MediRelaxa Privacy Policy
Last updated on 11 June 2026. This privacy policy explains which personal data we process when you visit our website, place an order or contact us, why we do so and which rights you have. We process your data in accordance with the General Data Protection Regulation (GDPR) and Belgian privacy legislation.
1. Who is responsible for your data
The data controller is:
- MediRelaxa, a trade name of Gelasco
- Blaubergsesteenweg 63C, 2230 Herselt, Belgium
- Company number and VAT number: BE 1000.295.870
- Phone: +32 456 81 15 79
- Email: [email protected]
2. What data we collect
- Order and invoicing data: name, company name and VAT number (business customers), delivery and invoicing address, email address, telephone number, ordered products and payment status. Your full card or account details are processed by our payment service providers and do not reach our systems.
- Contact details: what you enter in the contact form or send us via email, telephone or WhatsApp, including the content of those messages.
- Newsletter data: your email address and possibly your name, if you subscribe.
- Website and analytics data: information about your visit, such as pages viewed, device type, browser and your approximate region, collected via cookies as described in point 9.
3. What we use your data for and on what legal basis
| Target | Legal basis |
|---|---|
| Processing, delivering and installing your order (massage chairs) and providing warranty and service | Performance of the contract |
| Drawing up invoices and keeping them in our accounts | Legal obligation (accounting and tax legislation, 7 years) |
| Answering your questions via the contact form, email or telephone and drawing up quotes | Performance of the contract or steps taken prior to entering into it, or our legitimate interest in answering questions |
| Sending the newsletter and commercial emails | Your consent, which you can withdraw at any time via the unsubscribe link |
| Analysing and improving our website (statistics, anonymised where possible) | Your consent via the cookie banner |
| Preventing fraud and protecting our legal interests | Legitimate interest |
4. Who we share your data with
We never sell your data. We only share it with service providers who need it to deliver our services, always under a data processing agreement or as an independent controller within their own legal framework:
- Stripe (Stripe Payments Europe Ltd, Ireland): processing of online payments, including Bancontact, iDEAL, Klarna and card payments.
- PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg): processing of PayPal payments.
- Hostinger: hosting of our website within the EU.
- Google (Google Ireland Ltd): Google Analytics and Google Tag Manager for website statistics, anonymised where possible and only with your consent.
- Transport partners: DHL and specialist pallet and furniture carriers receive your name, delivery address and telephone number to deliver your order.
- Billit (Billit NV, Belgium): invoicing and accounting software in which your billing details are processed.
In addition, we may share data when the law requires us to do so, for example with tax or judicial authorities.
5. Transfers outside the European Economic Area
As a rule, we do not transfer your data outside the European Economic Area. Some of our processors, such as Google, may process data in the United States. This only happens with appropriate safeguards: Google is certified under the EU-US Data Privacy Framework and, where necessary, the European Commission's standard contractual clauses apply in addition.
6. How long we keep your data
- Invoices and accounting records: 7 years, as required by law.
- Customer accounts in the webshop: until you delete your account or ask us to delete it.
- Newsletter data: until you unsubscribe; after that we remove your email address from the mailing list.
- Analytics data: a maximum of 14 months.
- Contact messages and quotes: a maximum of 2 years after the last contact, unless a contract results from it.
7. How we secure your data
We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Our website uses a secure connection (SSL/TLS), access to customer data is limited to those who need it, passwords and access rights are managed securely and back-ups are made regularly. Payments are handled entirely via the secure environment of our payment service providers.
8. Your rights
You have the right to:
- Access: request a copy of the data we process about you.
- Rectification: have inaccurate or incomplete data corrected.
- Erasure: have your data deleted, insofar as no legal retention obligation applies.
- Restriction: have the processing of your data temporarily restricted.
- Portability: receive your data in a common digital format or have it transferred.
- Objection: object to processing based on legitimate interest and, at any time, to direct marketing.
- Withdrawal of consent: withdraw consent you have given at any time, without this making the earlier processing unlawful.
U oefent deze rechten uit door een e-mail te sturen naar [email protected]. Om misbruik te voorkomen kunnen wij u vragen uw identiteit aan te tonen. Wij antwoorden uiterlijk binnen één maand.
9. Cookies
Our website uses cookies. Functional cookies are always active: they are necessary to make the website and the shopping cart work. We only place analytical and marketing cookies after you have given consent for this via the cookie banner. You can adjust your preferences or withdraw your consent at any time via the cookie settings on the website or via your browser settings.
10. Complaints
If you have a question or complaint about how we handle your data, please contact us first at [email protected]; we are happy to find a solution together. In addition, you always have the right to lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussel, www.gegevensbeschermingsautoriteit.be.
11. Changes
We may amend this privacy policy, for example in the event of new legislation or new services. The most recent version is always available on this page, with the date of the last update at the top. This version dates from 11 June 2026.
