Gisele Retail Portal Privacy Policy
Business registration and account access
Last updated: September 2025
This policy explains how Gisele handles personal data when you use our Retail Portal, register your business, request access to our B2B shopping platform or communicate with us about your account.
Who is responsible for your data
The controller is Gisele INTL, S.L., trading as Gisele International. Our registered address is Carrer de Villarroel 193, 5th floor, door 1, 08036 Barcelona, Spain. Our NIF is B67616607 and our EU VAT number is ESB67616607. For privacy questions or requests, email info@giseleinternational.com.
The information we use
We use the information you provide through registration forms and correspondence, including professional contact details, your role, business name, business address, website, tax or VAT information and information needed to assess professional eligibility. We also keep your application status, account administration records and related communications. Company information falls within this policy where it relates to an identifiable person, including a named contact or sole trader.
Why we use your data
We use registration information to verify your business, assess eligibility, create and administer shopping-platform access, answer questions and send account communications. For representatives of companies, our legal basis is our legitimate interest in establishing and managing B2B relationships with those companies (Article 6(1)(f) GDPR). For sole traders personally entering into a contract, the basis is taking steps at their request before a contract and performing that contract (Article 6(1)(b) GDPR).
We use relevant information to meet legal obligations, including handling data protection requests (Article 6(1)(c) GDPR), and where necessary for account security and legal claims, based on our legitimate interests in protecting our services and legal rights (Article 6(1)(f) GDPR). Required fields are needed to assess your request or provide access; without them we may be unable to proceed.
Requesting an account does not by itself constitute consent to marketing. If you separately subscribe to newsletters, we rely on your consent for that subscription (Article 6(1)(a) GDPR). You may unsubscribe at any time.
Who may receive your data
Access is limited to authorised staff and providers supporting hosting, forms, storage, business-contact management, email and shopping-platform accounts. The portal uses Google Sites. Registration is provided through JOTFORM, and shopping-platform access through HOLDED, then to the 3PL that will process your order. Providers acting on our behalf process data under a data processing agreement and our instructions. Any provider acting for its own purposes must explain that processing in its own privacy notice.
Where necessary for account activation, we may disclose the relevant professional details to the business operating the shopping account, identified in the registration process. We may disclose relevant records to competent authorities where legally required, or to professional advisers where necessary for legal claims.
How long we retain data
We retain registration information while assessing your application. If the application is unsuccessful or abandoned, we delete information no longer needed within six months of the final decision or last relevant contact. For approved accounts, we retain the information needed to administer access while the business relationship continues and the contact remains relevant. We remove outdated contact details when notified of a replacement or when they are no longer needed.
After account closure, we remove information no longer needed from active use. Records required by law or necessary for legal claims are retained only for the applicable period and with restricted access. Business correspondence and accounting records subject to Article 30 of the Spanish Commercial Code are generally retained for six years from the last accounting entry, subject to any applicable longer or special periods. Where Spanish law requires blocking of personal data, its use is restricted to the legally permitted purposes until destruction is due.
Your rights
You may request access, rectification, erasure, restriction and, where applicable, portability. You may object to processing based on legitimate interests on grounds relating to your particular situation, and object to direct marketing at any time. You may withdraw consent for consent-based processing without affecting earlier lawful processing. Email info@giseleinternational.com or write to our registered address. We may request information reasonably needed to confirm your identity.
We normally respond within one month. If an extension is permitted, we will explain it within the first month. Requests are normally free. You may complain to the Spanish Data Protection Agency at https://www.aepd.es or another competent supervisory authority, including the authority where you live or work in the EU.
Security and account decisions
We apply appropriate measures to restrict access and protect personal data. Applications are reviewed by our team. We do not make decisions about individuals producing legal or similarly significant effects solely through automated processing.
Cookies and other processing
The Cookies page on this portal explains cookies, provider information and available choices. Further privacy information for orders, payments, invoicing and delivery is provided through the shopping platform. This notice covers registration, account access and related communications. We will provide relevant information before using personal data for a new purpose.
Gisele Retail Portal Cookie Policy
Cookies and similar technologies
Last updated: 28 October 2026
This page explains cookies used with the Gisele Retail Portal, operated by Gisele INTL, S.L. Contact: info@giseleinternational.com. We update this notice when relevant services change.
What cookies do
Cookies are small files stored in your browser. Similar technologies may store preferences or identify a device. Some deliver requested functions; others support optional measurement or embedded content. Cookies may last for a browsing session or remain until expiry or deletion.
Google Sites
Our portal is hosted using Google Sites. Google uses cookies and similar technologies for functions such as service delivery, security and remembering preferences. The cookies encountered depend on the features enabled, your choices and whether you are signed in to Google. Google explains its cookie purposes and individual lifetimes here: https://policies.google.com/technologies/cookies?hl=en
Google explains its Sites cookie notice and the accept or reject options shown in relevant circumstances here: https://support.google.com/sites/answer/9396802?hl=en
Google privacy information: https://policies.google.com/privacy?hl=en . These pages explain Google technologies; they do not open this portal's cookie settings.
Registration forms and embedded services
A registration form or another embedded feature can involve its own provider and technologies. Information about Google technologies is linked above. Additional provider cookie information is supplied with the relevant feature. Opening the shopping platform may take you to a separate website with its own cookie information and choices.
Consent and your choices
Strictly necessary cookies can operate without consent where the legal exemption applies. Where consent is required for optional cookies, including analytics that are not exempt, we request it before those cookies are activated. You may accept or reject optional cookies through the controls presented by the portal or relevant embedded service. Refusing optional cookies does not withdraw your registration request, although a feature that needs an optional service may remain unavailable.
Registration form privacy notice
Place beside the form before submission
Gisele INTL, S.L. is the controller of the personal data you provide. We use your professional details to assess your business registration, create and manage access to our B2B shopping platform, and communicate about your account. Our legal basis is our legitimate interest in managing B2B relationships, or precontractual steps and contract performance where you personally are the contracting party. Information identified as required is needed to process the request.
You may exercise your data protection rights by emailing info@giseleinternational.com and may complain to the AEPD or another competent supervisory authority.
Optional acknowledgement
I have read the Privacy Policy.
Optional newsletter subscription
I would like to receive Gisele International newsletters and business updates by email. I understand that I can unsubscribe at any time.