My account 0 Choose your pack

Privacy policy

Last updated: 15 October 2026

This privacy policy explains which personal data EAN Deals processes when you visit our website, order EAN codes or contact us, why we do so and what rights you have. We process no more data than we need, and we never sell your data.

1. Who is responsible?

EAN Deals is a trading name of the company below, which is the data controller under the General Data Protection Regulation (GDPR).

Gtincodes.com
Herengracht 320
1016 CE Amsterdam
Netherlands
Chamber of Commerce no.: 73198153
VAT no.: NL859395893B01
Email: support@gtincodes.com

Questions about privacy? Email us at the address above or send a message through the chat on this website.

2. Which data do we process?

  • Order data: name, company name, email address, (billing) address, country, VAT number and phone number if you fill them in, the products ordered and the EAN codes delivered.
  • Payment data: payments are handled by Mollie. We only see the payment method and whether the payment succeeded, never your full card or account number.
  • Account data: your email address and the orders, codes and invoices in your customer account.
  • Contact and support: messages you send us through the chat or by email, with any attachments, and your name and email address if you leave them.
  • Technical data: IP address, browser, device and pages visited, needed to keep the website secure and working.
  • Statistics and advertising: only if you consent in the cookie banner (see section 5).

3. For what purposes and on what legal basis?

  • Carrying out your order (delivering codes by email and in your account, issuing the invoice, answering questions about your order): performance of the contract.
  • Legal obligations, such as keeping invoices and order records for the tax authorities: legal obligation.
  • Support through chat and email and improving our service: performance of the contract and our legitimate interest.
  • Security and preventing fraud and abuse: legitimate interest.
  • Statistics and advertising (Google Analytics, Microsoft Clarity, Google Ads): your consent, which you can withdraw at any time.

We do not send newsletters or advertising unless you have asked for them.

4. Chat and AI assistant

The chat on this website is answered first by an AI assistant. It uses the information on our website to answer your question and can look up the status of an order, but only when you give both the order number and the email address of that order. If the assistant cannot help you, a colleague takes over the conversation. Messages in another language are translated automatically, so our team can help you in your own language.

For this, your chat messages are processed by Anthropic (the provider of the AI model). Anthropic does not use these messages to train its models. Please do not share passwords, payment details or other sensitive information in the chat; we will never ask for them.

5. Cookies and similar technologies

We use necessary cookies and local storage, for example for your shopping cart, your cookie choice and an ongoing chat. These do not require consent. Cookies for statistics (Google Analytics, Microsoft Clarity) and advertising (Google Ads) are only set if you consent. You can change your choice at any time via Cookie settings at the bottom of every page.

6. Who do we share data with?

We only share your data with parties we need to provide our service. They process the data on our behalf (processors) and may not use it for their own purposes:

  • Mollie (Netherlands): payments.
  • Amazon Web Services (servers in the EU, Frankfurt): sending and receiving email and storing files.
  • Cloudflare: hosting and security of the website.
  • Our hosting provider: the servers of our order and customer system.
  • Anthropic (United States): the AI assistant in the chat and automatic translations.

For statistics and advertising we use, only with your consent, services of Google (Analytics, Ads) and Microsoft (Clarity). They are partly responsible for this data themselves, under their own privacy policies.

We also share data where the law requires it, for example with the tax authorities or our accountant.

7. Transfers outside the EU

Some parties (Anthropic, Google, Microsoft, Cloudflare) may process data in the United States. These transfers are based on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

8. How long do we keep data?

  • Order and invoice data: 7 years, as required by law.
  • Your customer account and delivered codes: as long as you are a customer, so you can always find your codes again. You can ask us to delete your account.
  • Chat and email conversations: as long as needed to help you and answer follow-up questions; we delete them earlier on request.
  • Statistics data: according to the retention period set in Google Analytics and Microsoft Clarity.

9. Security

We protect your data with measures including an encrypted connection (HTTPS), encrypted storage of sensitive settings, two-step verification for staff and access only for those who need it for their work.

10. Your rights

You have the right to access, correct and delete your data, to restrict processing, to data portability and to object. If you have given consent, you can withdraw it at any time. Send your request to the email address in section 1; we respond within one month. To prevent abuse, we may ask you to identify yourself.

If you are not satisfied with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl) or the supervisory authority in your country.

11. Changes

We may update this privacy policy, for example when our service changes. The date at the top shows when it was last updated.