ShoeStories cares about your privacy. We therefore only process information we need for (improving) our service delivery and we carefully manage the information we have collected about you and your use of our services. We never share your data with third parties for commercial purposes.
About data processing
Below you can read how we process your data, where we (have) it stored, what security measures we have in place and who may view the data.
Mijndomein and WeProvide
Our web hosting and email services are provided by Mijndomein and WeProvide. Mijndomein and WeProvide process personal data on our behalf and do not use your data for their own purposes. These parties may however collect metadata about use of services. This does not include personal data. Mijndomein and WeProvide have implemented appropriate technical and organisational measures to prevent loss and unauthorised use of your personal data. The agreement obliges both parties to observe confidentiality.
We use Mollie’s platform to process payments in our webshop. Mollie processes your name, address and payment details, such as your bank account or credit card number. Mollie has implemented appropriate technical and organisational measures to protect your personal data. Mollie reserves the right to use your data to improve service delivery and to share (anonymised) data with third parties for that purpose. All the aforementioned guarantees pertaining to the protection of your personal data also apply to those elements of Mollie’s service delivery that are outsourced to third parties. Mollie does not retain your data for longer than the lawfully permitted term.
E-mail en mailing lists
We use the services of Office365 for our normal business email traffic. This provider has implemented appropriate technical and organisational measures to prevent misuse, loss and corruption of your and our data as far as possible. Office365 has no access to our inbox and we treat all our email traffic as confidential.
We collect reviews from the Trusted Shops platform. You can provide your name and email address when you leave a review via Trusted Shops. Trusted Shops shares this information with us, so we can link the review to your order. Trusted Shops publicises your name and town/city of residence on its own website if possible. In some cases, Trusted Shops may contact you for an explanation of your review. If we invite you to leave a review, we share your name and email address with Trusted Shops. They will only use this information for the purpose of inviting you to leave a review. Trusted Shops has implemented appropriate technical and organisational measures to protect your personal data. Trusted Shops reserves the right to outsource services to third parties. We have given Trusted Shops permission for this. All the aforementioned guarantees pertaining to protection of your personal data also apply to those elements of service delivery that Trusted Shops outsources to third parties.
Shipment and logistics
Transsmart, DHL and PostNL
When you place an order with us, our task is to have your package delivered to you. We use the services of Transsmart, PostNL and DHL for deliveries. It is therefore necessary to share your name and address details with Transsmart, DHL or PostNL. Transsmart, DHL and PostNL only use this information to execute the agreement. In the event that Transsmart, DHL or PostNL outsource to sub-contractors, Transsmart, DHL or PostNL will make your details available to these parties.
Invoicing and bookkeeping
We use the services of Reflecta and their XL-ENZ software to manage our administration and bookkeeping. We share your name and address details in connection with your order. These details are used for the administration of sales invoices. Your personal data is sent and stored securely. Reflecta is bound by confidentiality and will treat your data as confidential. Reflecta will not use your personal data for purposes other than those described above.
Purpose of data processing
General purpose of processing
We only use your data for the purposes of our service delivery. That is to say, the purpose of processing is always directly related to your order. We will not use your data for (targeted) marketing. If you share data with us and we use this data to contact you later, we will request your explicit permission – unless you requested contact. Your data is not shared with third parties, other than to fulfil our bookkeeping and other administrative obligations. These third parties are all bound by confidentiality based on the agreement between us and them, or a pledge, or a statutory obligation.
Automatic data collection
Data that is collected automatically by our website is processed for the purpose of improving our service delivery further. This information (for example, your IP address, web browser and operating system) does not qualify as personal data.
Cooperation with tax and criminal investigations
In some cases, ShoeStories may have a statutory obligation to share your data in connection with tax or criminal investigations by government agencies. We are compelled to share your data in such cases, but will resist this within the parameters of the law.
We retain your data for as long as needed to execute our services. Once the service or agreement ends, we will retain your personal data for a maximum of 12 months for the purpose of executing our services or our agreement with you. If you inform us, we will also treat this as a request to delete your information. We are obliged to retain invoices with your (personal) data in connection with applicable administrative obligations, we will therefore retain this information for the applicable term. However, employees will no longer have access to your customer profile and documents generated in the context of your order.
Applicable Dutch and European legislation entitles you to certain rights pertaining to your personal data processed by us or on our behalf. We inform you of these rights and explain how you can exercise them below.
To prevent misuse, we only send statements and copies of your details to email addresses already known to us. We will require proof of ID in the event that you wish to receive information via a different email address or by post, for example. We keep a list of requests we have processed, we use anonymised data in the event of a request to delete your information. You receive all statements and copies of information in the machine-readable section of our systems.
You have the right to lodge a complaint with the Dutch Data Protection Authority at any time if you believe we have used your personal data incorrectly.
Right to view your data
You always have the right to see the data we (have) processed and which pertains to your person, or which can be attributed to you. You can submit a request to view your data to our data protection officer. You will then receive a response to your request within 30 days. If we agree to your request, we will send a copy of all your data, with a summary of the processors who have access to this data and the category under which we have stored this data, to the email address we hold for you.
Right of rectification
You always have the right to have the data we (have) processed and which pertains to your person, or can be attributed to you, amended. You can submit a request for this to our data protection officer. You will then receive a response to your request within 30 days. If we agree to your request, we will send confirmation that the data has been amended to the email address we hold for you.
Right to restrict processing
You always have the right to restrict data we have processed that pertains to your person, or can be attributed to you. You can submit a request to our data protection officer. You will then receive a response to your request within 30 days. If we agree to your request, we will send confirmation that the data will no longer be processed until you lift the restriction to the email address we hold for you.
Right of transfer
You always have the right to have data we (have) processed and which pertains to your person, or can be attributed to you, processed by another party. You can submit such requests to our data protection officer. You will then receive a response to your request within 30 days. If we agree to your request, we will send copies of all your personal data we have processed, or which has been processed by other processors or third parties on our behalf, to the email address we hold for you. In all probability, we will no longer be able to continue providing you with a service in that case, because we can then no longer guarantee the secure transmission of data files.
Right to object and other rights
In certain cases, you have the right to object to the processing of your data by or on behalf of ShoeStories. If you object, we will cease processing data immediately pending processing of your objection. If your objection is justified, we will make copies of the data we (have) processed available to you and cease such processing permanently. In addition, you have the right not to be subjected to automated decision-making or profiling. We do not process your data in such a way that this right applies. Please contact our data protection officer if you believe this to be the case.
We collect data for research purposes to gain a better insight into our customers, so we can align our services accordingly.
Cookies from third parties
ShoeStories by Elsa Coloured Shoes
7040 AG 's-Heerenberg
Fax: 0049-2822 9575848
Trade Register: 09094697