GDPR Privacy Policy

1. Data controller

The controller of your personal data is GOLD LINE HOLDING, Limbastraat 66, 9000 Ghent, Belgium (enterprise number 0103.118.390). For any privacy question or request, write to info@koffiana.com.

2. What we collect and why

• Orders: name, delivery address, email, phone, VAT number, ordered items and payment status — to deliver your order and invoice it (performance of the contract, legal obligation).
• Account: name, email and a hashed password — to give you access to your orders and wishlist (contract).
• Repair, return and B2B forms: the details you enter — to handle your request (contract / legitimate interest).
• Newsletter: your email — only with your consent, which you can withdraw at any time by replying to any newsletter or emailing us.
• Analytics: only if you accept analytics cookies (see the cookie policy).

3. Who we share it with

• Payment providers: Mollie B.V. (Netherlands) or Stripe Payments Europe Ltd (Ireland), when you pay online.
• Carriers: Bpost, PostNL, DHL or DPD — name, address and phone for delivery.
• Hosting and email: Hostinger (EU data centres).
• Accountant and tax authorities where Belgian law requires it.
• Google Analytics (Google Ireland Ltd) — only after your consent.

We never sell your data.

4. How long we keep it

Invoices and order data: as long as Belgian accounting and VAT law requires (currently 10 years). Accounts: until you ask us to delete them. Repair, return and B2B requests: up to 3 years after they are closed. Newsletter: until you unsubscribe.

5. Your rights

You have the right to access, correct or delete your data, to restrict or object to processing, to data portability and to withdraw consent at any time (Articles 15–22 GDPR). We answer within one month, free of charge. You can also complain to the Belgian Data Protection Authority (dataprotectionauthority.be).