Latest Update: December 2021
ScanShop processes personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and other applicable data privacy regulations.
We process your personal data on the basis of our prevailing legitimate interest according to Article 6(1)(f) GDPR to achieve the purposes of giving you services through our website or communicating with you. If not expressly mentioned otherwise, collecting and processing of data is based on our legitimate interest, considering always that your fundamental rights and freedoms are not overridden by the interests of our communication with you.
In some specific situations (e.g. subscribing to receive ScanShop newsletters), we may ask you for your consent to process your personal data. In case you provide your consent, we will be processing your data on the basis of such consent (Article 6(1)(a) GDPR). You may withdraw such consent previously granted at any time. However, withdrawing your consent does not affect the lawfulness of any processing based on your consent before your withdrawal.
When you send personal data of third parties to ScanShop, you are solely responsible for ensuring an appropriate legal basis for any such sharing of third parties/data subjects. We may ask you to provide evidence that such data is shared on a lawful basis. We shall use our best efforts to ensure that third parties’ personal data is processed, handled, and collected in the same manner as your own personal data. However, you are solely responsible for obtaining consent from third parties for the use and processing of their personal data.
Purpose of data collection
Contacting ScanShop If you are using our contact form so we could reach out and tell you more about our product, customize our offerings and optimize services, we will only store and process the data expressly stated on such form (including but not limited to name and last name, user name, e-mail address, phone number, city, country of residence, company name, department, job role, city, device, browser, application name, IP address).
Requesting a ScanShop demo app Since our demo app showcases our technology, we will ask you to register your email address for downloading and using the app. It is in our legitimate interest to contact you at the given email address with our ScanShop solution offering.
Subscribing to our newsletter If you provided your email to receive a ScanShop newsletter, we might have collected personal data contained within such email addresses. Subscribing to our newsletter is voluntary (based on the consent you have given). Following your subscription, you receive an email through which you can unsubscribe at any time.
The newsletter is sent via Mailchimp, a delivery service offered by The Rocket Science Group LLC d/b/a Mailchimp. You can find more information on their privacy policies on https://mailchimp.com/legal/privacy/.
We will use such data in order to send you our newsletter with promotional communications, including emails about the offering related to our solution.
Sharing the data
Public authorities ScanShop may disclose information to public authorities, such as law enforcement, if legally required to do so, or when necessary to protect our rights or the rights of third parties.
Do Not Track
Your browser or device may include ‘Do Not Track’ functionality. Since these features are not yet uniform and there is no common standard adopted by industry or regulators, ScanShop’s information collection and disclosure practices, as well as the choices ScanShop provides to its users, we will continue to operate as described in this policy, whether or not a Do Not Track signal is received.
The Internet is a global environment. Using the Internet to collect and process personal data necessarily involves the transmission of data on an international basis. Any such transfer is made in accordance with regulatory requirements that ensure such transfer and/or country maintains the same level of personal data protection. ScanShop opted for industry-approved storage providers with the highest privacy and data security standards.
Data retention period
ScanShop may retain your personal data as long as it is required to complete the purpose of collection or for as long as the applicable law requires.
The data that is not required to be kept by applicable law, shall be kept up to five years from receipt. Any data collected on the basis of consent shall be stored for as long as such consent is not withdrawn.
Your rights related to the collected data
You have a right to know what data ScanShop holds about you. GDPR grants you following rights:
• the right to be informed, • the right of access, • the right to rectification, • the right to erasure, • the right to restrict processing, • the right to data portability, • the right to object to processing, • the right to withdraw consent, and • the right not to receive discriminatory treatment by ScanShop for the exercise of an individual’s rights conferred by the applicable data protection laws.
For any questions and requests for access or deletion, please email us at firstname.lastname@example.org. It is necessary to clearly state on which basis and through which channel you shared your personal data with us so we could easily fulfil your request. Please note that we may ask for additional info in order to determine if you are authorized to submit a particular request. If you have a complaint about our handling of your data, you can contact the supervisory authority (Croatian Personal Data Protection Agency) to find out more information.
No automated decision making and profiling
We do not automatically process, nor use techniques for profiling our users.
We practice a zero-tolerance approach to illegal, prohibited, and unethical activities, as well as upload of related content, therefore any such information shall be immediately deleted from our systems.
We do not knowingly collect information from persons who are considered children by their local law. We encourage parents and guardians to take an active role in their children’s online and mobile activities and interests.
Children below the age of 16 may provide their information only if a parent or guardian has given their consent to do so, in accordance with applicable law. If you have reason to believe that a child below the minimum age has provided personal data to us by using any of the above-stated services without the necessary consent, please contact us at email@example.com, and we will use commercially reasonable efforts to delete that data.
Questions or concerns