ScanShop Privacy Policy

Latest Update: December 2021

Introduction

A miraculous team behind ScanShop works within the Croatian registered company ITalk LLC, located at IX. Juzna obala 20, Zagreb, Croatia (hereinafter: “ScanShop”). We are fully committed to protecting your privacy. With this privacy statement, we want to explain how data, that you potentially share with us, will be stored, by what means and for how long, the purpose of storing and processing such data, as well as individual rights in relation to such data. Please read it carefully before accessing any ScanShop service (as defined below). If you have any questions about this privacy policy, please email us at privacy@ss.hr.

ScanShop processes personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and other applicable data privacy regulations.

We process your personal data on the basis of our prevailing legitimate interest according to Article 6(1)(f) GDPR to achieve the purposes of giving you services through our website or communicating with you. If not expressly mentioned otherwise, collecting and processing of data is based on our legitimate interest, considering always that your fundamental rights and freedoms are not overridden by the interests of our communication with you.

In some specific situations (e.g. subscribing to receive ScanShop newsletters), we may ask you for your consent to process your personal data. In case you provide your consent, we will be processing your data on the basis of such consent (Article 6(1)(a) GDPR). You may withdraw such consent previously granted at any time. However, withdrawing your consent does not affect the lawfulness of any processing based on your consent before your withdrawal.

Within this Privacy Policy, personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

When you send personal data of third parties to ScanShop, you are solely responsible for ensuring an appropriate legal basis for any such sharing of third parties/data subjects. We may ask you to provide evidence that such data is shared on a lawful basis. We shall use our best efforts to ensure that third parties’ personal data is processed, handled, and collected in the same manner as your own personal data. However, you are solely responsible for obtaining consent from third parties for the use and processing of their personal data.

Purpose of data collection

Contacting ScanShop If you are using our contact form so we could reach out and tell you more about our product, customize our offerings and optimize services, we will only store and process the data expressly stated on such form (including but not limited to name and last name, user name, e-mail address, phone number, city, country of residence, company name, department, job role, city, device, browser, application name, IP address).

Requesting a ScanShop demo app Since our demo app showcases our technology, we will ask you to register your email address for downloading and using the app. It is in our legitimate interest to contact you at the given email address with our ScanShop solution offering.

Subscribing to our newsletter If you provided your email to receive a ScanShop newsletter, we might have collected personal data contained within such email addresses. Subscribing to our newsletter is voluntary (based on the consent you have given). Following your subscription, you receive an email through which you can unsubscribe at any time.

The newsletter is sent via Mailchimp, a delivery service offered by The Rocket Science Group LLC d/b/a Mailchimp. You can find more information on their privacy policies on https://mailchimp.com/legal/privacy/.

We will use such data in order to send you our newsletter with promotional communications, including emails about the offering related to our solution.

Sharing the data

This privacy policy does not apply to third parties websites and/or services that you may encounter when you visit our website. We encourage you to carefully familiarize yourself with privacy policies applicable to any websites and/or services operated by third parties which you encounter on our website.

In addition, in order to fully optimize our offerings and enhance your user experience, please note that we may implement additional tools or introduce new third-party providers. We will strive to notify you of such changes by updating this privacy policy in due time. Data collected through the channels described above might be shared with such third parties. You can contact us at any time to get additional information about such data sharing.

Public authorities ScanShop may disclose information to public authorities, such as law enforcement, if legally required to do so, or when necessary to protect our rights or the rights of third parties.

Do Not Track

Your browser or device may include ‘Do Not Track’ functionality. Since these features are not yet uniform and there is no common standard adopted by industry or regulators, ScanShop’s information collection and disclosure practices, as well as the choices ScanShop provides to its users, we will continue to operate as described in this policy, whether or not a Do Not Track signal is received.

Data transfer

The Internet is a global environment. Using the Internet to collect and process personal data necessarily involves the transmission of data on an international basis. Any such transfer is made in accordance with regulatory requirements that ensure such transfer and/or country maintains the same level of personal data protection. ScanShop opted for industry-approved storage providers with the highest privacy and data security standards.

Data retention period

ScanShop may retain your personal data as long as it is required to complete the purpose of collection or for as long as the applicable law requires.

The data that is not required to be kept by applicable law, shall be kept up to five years from receipt. Any data collected on the basis of consent shall be stored for as long as such consent is not withdrawn.

Your rights related to the collected data

You have a right to know what data ScanShop holds about you. GDPR grants you following rights:

• the right to be informed, • the right of access, • the right to rectification, • the right to erasure, • the right to restrict processing, • the right to data portability, • the right to object to processing, • the right to withdraw consent, and • the right not to receive discriminatory treatment by ScanShop for the exercise of an individual’s rights conferred by the applicable data protection laws.

For any questions and requests for access or deletion, please email us at privacy@ss.hr. It is necessary to clearly state on which basis and through which channel you shared your personal data with us so we could easily fulfil your request. Please note that we may ask for additional info in order to determine if you are authorized to submit a particular request. If you have a complaint about our handling of your data, you can contact the supervisory authority (Croatian Personal Data Protection Agency) to find out more information.

No automated decision making and profiling

We do not automatically process, nor use techniques for profiling our users.

User content

We practice a zero-tolerance approach to illegal, prohibited, and unethical activities, as well as upload of related content, therefore any such information shall be immediately deleted from our systems.

Children data

We do not knowingly collect information from persons who are considered children by their local law. We encourage parents and guardians to take an active role in their children’s online and mobile activities and interests.

Children below the age of 16 may provide their information only if a parent or guardian has given their consent to do so, in accordance with applicable law. If you have reason to believe that a child below the minimum age has provided personal data to us by using any of the above-stated services without the necessary consent, please contact us at privacy@ss.hr, and we will use commercially reasonable efforts to delete that data.

Changes to the Privacy Policy

In case we make changes to our website and services offered, we might need to revise this policy to reflect those changes. You can tell when changes have been made to the privacy policy by referring to the “Latest update” legend at the top of this page. When the policy is revised, we will post the new policy on the our website (www.ss.hr), so you should review the page periodically. We encourage you to review the privacy policy whenever you access the services to stay informed about our privacy practices. Please do not use our services if you do not agree with any of the stipulations contained herein.

Questions or concerns

Should you have any questions regarding this privacy policy, your privacy as it relates to the use of the services or the protection of the personal data you shared with us, please contact us via e-mail at privacy@ss.hr. We seek to promptly resolve any concerns you may have.