GIFTALL.COM Privacy Policy

Last Updated: February 14, 2024

This Giftall.com Privacy Policy (“Privacy Policy”) will provide you with information about the collection, processing and use of data that identifies you or may be used to identify you with (“Personal Data”) when using the “www.giftall.com” website (“Website”) and Services provided herein.

ABOUT US

Ananda Digital Technologies B.V., a company with limited liability under the laws of the Netherlands with its registered offices in Amsterdam, the Netherlands, having offices at Reguliersbreestraat 42-C, 1017 CN, Amsterdam, The Netherlands and registered in the register of the Chamber of Commerce under registration number 71017216 (hereinafter: “Giftall” or “we”)). Giftall’’s data protection representatives can be reached by email at dataprotection·@·allyouplay.com

Contact to Data Protection Representative. If you have any questions after reading this Privacy Policy, or would like to exercise the rights as entailed in this Privacy Policy, Giftall data protection representatives can be reached by email at support@giftall.com.

INTRODUCTION

If you choose to use our Services, you agree to the collection, and use of information under this Privacy Policy. The Personal Data, collected by our Website used for the Service provision and improvement. The Website will not use or share your information with anyone except for the persons listed in this Privacy Policy.

If you do not accept this Privacy Policy, please do not visit our Website and/or do not use our Services.

You should carefully read this Privacy Policy as well as any additional notices or policies we may offer when we collect or process Personal Data about you on a particular occasion so that you are aware of the purposes for which and how we will use your data. Other notifications and policies are meant to be supplements, not replacements, for this Privacy Policy.

Amendments. We reserve the right to partly or fully amend this Privacy Policy, or simply update its content at any time. In case the Privacy Policy is amended, the amended Privacy Policy will be made available to you through publication of the amended Policy on this Website via www.giftall.com.

Data of Minors. Please note that our Website and Services are not intended for children under the age of 18, and no person under 18 may use the Website or the Services, place orders or create an account. We, therefore, do not consciously process data from minors. If, as a parent or legal representative, you suspect that Giftall is processing data from your child or a minor entrusted to your care, please contact us using the contact details mentioned above.

1) TYPES OF PERSONAL DATA WE PROCESS

In the course of your visit to the Website and / or any orders placed through the Website, we may process Personal Data. Giftall is responsible for determining the purpose and the means of the processing of this Personal Data and is therefore considered data controller, pursuant to Article 13 and Article 14 of the General Data Protection Regulation (“GDPR”) (Regulation (EU) 2016/679).

We collect Personal Data as described below:

2) Information You Provide Us

For the mere accessing of the Website, it is not required to provide us with Personal Data. It is furthermore not required to set up an account.

When you place an order with us, create an account or have a question for us, we may process additional Personal Data about you such as your (a) first name and family name, (b) your contact details, (c) your address, (d) your email address, (e) your (mobile) phone number, (f) your username/password, (g) your IP address, (h) your date of birth and any other contact details.

If you choose to voluntarily provide us with Personal Data, other than the above, we advise you to limit this disclosure to the absolute minimum and not to provide us with any sensitive or special personal data, such as data revealing your race or ethnic origin, political views, religious or philosophical beliefs, membership of a union, or any genetic data, biometric data processed for the unique identification of a person, data on health, or data relating to a person's sexual behavior or sexual orientation.

3) Personal Data Collected via Technology

As you navigate through and interact with our Services, and regardless of whether you place an order, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns.

We do not have the intention of identifying you with any such data, but it is possible to directly or indirectly identify you on the basis of such data. For this reason, this Privacy Policy informs you about our use of this data in a transparent way.

Automatically collected Personal Data may include:

Browser type, screen ratio, screen resolution, language settings, browser information (user agent), operating system, Internet Protocol (“IP”) address, mobile device ID, and date/time stamps,
Retail Customer ID,
Any pages you have visited on the Website,
Your Website preferences, and
Your location (including country code) and time zone.

We process the above data through cookies and similar techniques. We may use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your computer until you delete them) to analyze how users interact with our Service, make improvements to our product quality, and provide users with a more personalized experience. More information about the cookies we use can be found in our cookie statement.

4) Information Collected from Third-Party Companies

Third parties may possibly process personal data related to you through our Websites to provide us with certain products and services.

Personal Data processed by partners relates to:

Payment Details	Our payment and risk analysis partners can process Personal Data for the payment of your order. Giftall has no access to or involvement in (the processing of) such data. Our payment partners can, therefore, be regarded as an independent controller within the meaning of the GDPR. For more information about how our payment partners handle your data, we refer you to the websites of these partners: Checkout.com - Privacy Policy
Ad-partners:	Our advertisement partners may process Personal Data on your visit to the Website and your interests in order to provide you with tailored advertisements for our Website. More information on the processing of such Personal Data including how you can revoke your consent for such processing can be found in the cookie statement: META - Privacy Policy Google - Privacy Policy Reddit - Privacy Policy Omnisend - Privacy Policy
Intermediaries/ Aggregators	We can use intermediaries / aggregators in order to fulfill your order with the publisher of the product you intend to purchase. Such intermediaries / aggregators may process Personal Data on your purchases in order to verify eligibility for a specific purchase, adjust currency and for VAT requirements. Though any such information will be processed in aggregated / anonymized form as much as possible, intermediaries / aggregators and publishers may process your username, email address, retailcustomerID, name country code, currency code and IP address. Intermediaries / aggregators are data processors within the meaning of the GDPR and have entered into a data processing agreement with us in order to ensure the secure processing of your data.
Publishers:	We may transfer your personal data to the publisher of the title / product you purchase, either directly or through an intermediary / aggregator. Such data may include the data mentioned above under Information Collected via Technology and will only be processed where this is necessary in order to fulfill your order. Where any of this data is processed by a publisher, such publishers are independent controllers within the meaning of the GDPR. For more information about how publishers handle your data, we refer you to the websites of these publishers: - Blackhawk Network - Privacy Policy - epay Worldwide - Privacy Policy

5) PURPOSES FOR PROCESSING YOUR PERSONAL DATA

Our primary purposes for which we process your Personal Data are to offer you the best possible services, to optimize our Website and Services and to ensure their continuity.

More specifically, your Personal Data can be used for the following purposes:

To provide our Services and fulfill your order: we may need certain Personal Data about you to process and fulfill your order.
To personalize the Website: you have the option of adapting the Website experience to your needs, for example by changing the language of the Website. To remember your changes, we may process Personal Data about you, such as a unique ID and your IP address. If you have created an account, your preferences may be linked to your account.
To improve our Website: we are constantly working to improve our Website and your user experience and add new functionality. Processing analytical data (in an aggregated form) is essential for this.
To secure our Website: in order to offer you the best possible user experience, it is necessary to keep malicious third parties (e.g. hackers) out. We therefore constantly monitor our services and the use of our services. When we identify a potential threat, we can take immediate action to prevent disruption or unauthorized use of our services.
To communicate with you: when you contact us, we process your contact information such as your name and e-mail address and any other Personal Data that you provide to us.
For marketing purposes: your Personal Data can be used to provide you with newsletters and offers for our products and services.
To comply with a legal obligation: we may be required by law or by a court order to process and / or transfer certain Personal Data.

6) LEGAL BASIS OF PROCESSING PERSONAL DATA

Giftall has several legal bases for the processing of your Personal Data. The applicable ones are listed below:

To enable us to enter into an agreement with you, after which we will execute this agreement, such as but not limited to the agreement for the delivery of our Services;
To enable us to meet our statutory obligations;
To enable us to perform direct marketing activities, such as but not limited to informing you about our products, and to assess the effectiveness thereof;
The processing is necessary for the purposes of the legitimate interests pursued by us, including the interest to perform its business activities, except where such interests are overridden by the interests of fundamental rights and freedoms of the data subjects that require protection of Personal Data;

Your consent to the processing of your Personal Data for the purposes set out above;

Providing the requested Personal Data is a necessary condition for placing an order or creating an account. If this information is not provided, we may not be able to meet our obligations. Providing other Personal Data is not mandatory.

7) DISCLOSURE OF YOUR PERSONAL DATA

We pass on Personal Data to third parties, so-called "recipients", if this is necessary for the purposes stated in this Policy.

The (categories of) recipients of the Personal Data are:

Our suppliers, such as but not limited to the party that provides the hosting of our data and other external IT suppliers;

Other companies affiliated with Giftall, if this is necessary for compliance, internal reports, audit and/or security purposes or the execution of an agreement with you;

Our accountant, legal advisers and other professional service providers engaged by Giftall;

Our analytical service providers for the purpose of assessing the effectiveness of our Website;

Governmental bodies, if we are under an obligation to provide your Personal Data to a regulator (such as the Dutch Data Protection Authority) or other governmental bodies;

Fraud prevention companies, we may engage third parties to investigate fraudulent actions and ensure that our property and/or rights are protected;

If Personal Data must be transferred to third parties because Giftall is purchased or merged, or part of the assets is sold, or in the event of a corporate reorganization;

Where Giftall forwards your data to recipients who only process this data on behalf of Giftall and not for their own purposes, it has entered into written agreements with these receivers (so-called processors within the meaning of the GDPR) about the processing of your data.

Giftall in principle does not transfer Personal Data outside of the European Union or international organizations unless one of the following situations applies:

We transfer Personal Data to other businesses, including the shareholders of these other businesses, that belong to the group of which we are part or have the same controlling shareholders. It may be that these businesses are located outside of the European Union. Giftall and these companies have taken appropriate safeguards in order to guarantee proper handling of your Personal Data.
Should we in any other way transfer Personal Data outside of the European Union or to international organizations, we shall determine whether an adequacy decision as stated in the relevant legislation applies and, where such is not the case, the transfer shall only be conducted where adequate safeguards apply. In such a case, a copy of the concerned documents is available at Giftall.

8) RETENTION OF YOUR PERSONAL DATA

We keep your Personal Data for as long as necessary to achieve the aforementioned purposes. We can then retain your Personal Data if this is required or necessary to comply with applicable legislation or to comply with legal, reporting or audit requirements. Where possible, we anonymize or pseudo-anonymize your Personal Data or we only keep it in aggregated form.

SECURITY OF YOUR PERSONAL DATA

Giftall highly values the security of your Personal Data. Therefore, Giftall will apply technical and organizational measures to protect your Personal Data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access.

To keep your Personal Data safe, the following measures are implemented:

Transfers of data via the Website are encrypted;
Servers on which your Personal Data is stored are protected with passwords and appropriate security measures;
Search engines are blocked from indexing the Personal Data;
Server access is limited to individuals with a need-to-know;
Servers are up to date
Personal data are stored in a hashed form;

9) YOUR RIGHTS UNDER GDPR

Objection: Depending on the situation, you have the right to consent or object to the processing of your Personal Data and the conditions under which this processing takes place.

Access: You have the right to request from us, without constraint, at reasonable intervals and without excessive delay or expense, i) a confirmation as to whether or not Personal Data regarding you is being processed, ii) information on the purposes for which Personal Data is processed, iii) the categories of Personal Data concerned, and iv) the recipients or categories of recipients to whom the Personal Data is disclosed. You have the right to receive, in an intelligible form, a communication of the Personal Data being processed and of any available information as to the source(s). Furthermore, you have the right to knowledge of the underlying logic of the automated processing of Personal Data relating to you.

Rectification, erasure, blocking or deletion: You, where appropriate, have the right to rectification, erasure, blocking or deletion of your Personal Data that is not processed in compliance with data protection laws and regulations, in particular when the nature of the data is incomplete or inaccurate.

Notification: You have the right to a notification to third parties to whom your Personal Data has been disclosed, when you have been granted any rectification, erasure, blocking or deletion as stated above, unless such notification proves to be impossible or requires a disproportionate effort from us.

Withdraw consent: where we are processing personal data relating to you on the basis of your prior consent to that processing, you may withdraw your consent at any time.

Complaint with relevant authority: You have the right to file a complaint with the relevant data protection authorities, e.g., the Autoriteit Persoonsgegevens in the Netherlands.

10) MISCELANOUS

This Privacy Policy is effective until terminated by Giftall. If you no longer agree to be bound by this Policy, you must cease your use of our Website.

This Privacy Policy is primarily available in English. Any Translations to other languages may be provided for the sake of convenience, but the English original shall always be leading with respect to the interpretation of this Privacy Policy and any terms or agreements governed by it.

This Privacy Policy is governed by the laws of the Netherlands, without application of its conflict of laws rules. We will first attempt to settle any dispute that arises amicably. Should we not be able to reach an amicable solution, any disputes arising between Giftall and the User in connection to the Website, the Services or the Terms will exclusively be resolved by the competent court in Amsterdam, the Netherlands.

If you are using our Website for personal use only (i.e. you are a consumer) and reside in a country which, by mandatory law, does not allow for the choice of law, jurisdiction or venue described above, the laws of your country of residence will apply and disputes may be submitted to your local jurisdiction and venue.

If you have any questions after reading this Privacy Policy, or would want to exercise any right as stated in this Privacy Policy, please do not hesitate to contact us with the details provided to you in this Privacy Policy under ABOUT US Section or e-mail us at support@giftall.com.