Privacy Policy

ShoeStories by Elsa Coloured Shoes

Privacy Policy ShoeStories

https://www.myshoestories.com/   

About our privacy policy

ShoeStories cares about your privacy. We therefore only process information we need for (improving) our service delivery and we carefully manage the information we have collected about you and your use of our services. We never share your data with third parties for commercial purposes.

This privacy policy applies to use of the website and ShoeStories services offered via the website. These conditions apply as of 14/02/2020, all previous versions lapse when a new version is published. This privacy policy outlines what information we collect about you, what this information is used for, and with whom and on what condition we may share this information with third parties. We also explain how we store your information and how we protect your data from misuse, and inform you of your rights pertaining to the personal data you provide us.

If you have questions about our privacy policy, please contact our data protection officer. You can find the contact details at the end of our privacy policy. 

About data processing

Below you can read how we process your data, where we (have) it stored, what security measures we have in place and who may view the data.

Webshop software

Magento
Our web shop was developed with Magento software. Personal data you provide to us in connection with our services is shared with this party. Magento has access to your information in order to provide us with (technical) support. They will never use your data for any other purpose. Our agreement with Magento obliges them to implement appropriate security measures. These security measures consist of the use of SSL encryption and a stringent password policy. Magento uses cookies to collect technical information pertaining to your use of the software, they do not collect and/or store any personal data. Magento reserves the right to share the data collected within their own business to improve service delivery further.

Web hosting

Mijndomein and WeProvide
Our web hosting and email services are provided by Mijndomein and WeProvide. Mijndomein and WeProvide process personal data on our behalf and do not use your data for their own purposes. These parties may however collect metadata about use of services. This does not include personal data. Mijndomein and WeProvide have implemented appropriate technical and organisational measures to prevent loss and unauthorised use of your personal data. The agreement obliges both parties to observe confidentiality.

Payment processors

Mollie
We use Mollie’s platform to process payments in our webshop. Mollie processes your name, address and payment details, such as your bank account or credit card number. Mollie has implemented appropriate technical and organisational measures to protect your personal data. Mollie reserves the right to use your data to improve service delivery and to share (anonymised) data with third parties for that purpose. All the aforementioned guarantees pertaining to the protection of your personal data also apply to those elements of Mollie’s service delivery that are outsourced to third parties. Mollie does not retain your data for longer than the lawfully permitted term.

E-mail en mailing lists

MailChimp
Our website uses MailChimp, a third party that manages email traffic that originates from our website and the sending of any newsletters. All confirmation mails you receive via our website and web forms are sent via MailChimp servers. MailChimp will never use your name and email address for their own purposes. There is an unsubscribe link at the bottom of every automated email sent via our website. You will no longer receive emails from our website if you click it. This could seriously impede the functionality of our website! Your personal data is stored securely by MailChimp. MailChimp uses cookies and other internet technologies to identify whether emails are opened and read. MailChimp reserves the right to use your data to improve service delivery further and to share information with third parties for that purpose.

Office365
We use the services of Office365 for our normal business email traffic. This provider has implemented appropriate technical and organisational measures to prevent misuse, loss and corruption of your and our data as far as possible. Office365 has no access to our inbox and we treat all our email traffic as confidential.

Reviews

Trusted Shops
We collect reviews from the Trusted Shops platform. You can provide your name and email address when you leave a review via Trusted Shops. Trusted Shops shares this information with us, so we can link the review to your order. Trusted Shops publicises your name and town/city of residence on its own website if possible. In some cases, Trusted Shops may contact you for an explanation of your review. If we invite you to leave a review, we share your name and email address with Trusted Shops. They will only use this information for the purpose of inviting you to leave a review. Trusted Shops has implemented appropriate technical and organisational measures to protect your personal data. Trusted Shops reserves the right to outsource services to third parties. We have given Trusted Shops permission for this. All the aforementioned guarantees pertaining to protection of your personal data also apply to those elements of service delivery that Trusted Shops outsources to third parties.

Shipment and logistics

Transsmart, DHL and PostNL
When you place an order with us, our task is to have your package delivered to you. We use the services of Transsmart, PostNL and DHL for deliveries. It is therefore necessary to share your name and address details with Transsmart, DHL or PostNL. Transsmart, DHL and PostNL only use this information to execute the agreement. In the event that Transsmart, DHL or PostNL outsource to sub-contractors, Transsmart, DHL or PostNL will make your details available to these parties.

Invoicing and bookkeeping

XL-ENZ
We use the services of Reflecta and their XL-ENZ software to manage our administration and bookkeeping. We share your name and address details in connection with your order. These details are used for the administration of sales invoices. Your personal data is sent and stored securely. Reflecta is bound by confidentiality and will treat your data as confidential. Reflecta will not use your personal data for purposes other than those described above. 

Purpose of data processing

General purpose of processing
We only use your data for the purposes of our service delivery. That is to say, the purpose of processing is always directly related to your order. We will not use your data for (targeted) marketing. If you share data with us and we use this data to contact you later, we will request your explicit permission – unless you requested contact. Your data is not shared with third parties, other than to fulfil our bookkeeping and other administrative obligations. These third parties are all bound by confidentiality based on the agreement between us and them, or a pledge, or a statutory obligation.

Automatic data collection
Data that is collected automatically by our website is processed for the purpose of improving our service delivery further. This information (for example, your IP address, web browser and operating system) does not qualify as personal data.

Cooperation with tax and criminal investigations
In some cases, ShoeStories may have a statutory obligation to share your data in connection with tax or criminal investigations by government agencies. We are compelled to share your data in such cases, but will resist this within the parameters of the law. 

Retention periods 
We retain your data for as long as needed to execute our services. Once the service or agreement ends, we will retain your personal data for a maximum of 12 months for the purpose of executing our services or our agreement with you. If you inform us, we will also treat this as a request to delete your information. We are obliged to retain invoices with your (personal) data in connection with applicable administrative obligations, we will therefore retain this information for the applicable term. However, employees will no longer have access to your customer profile and documents generated in the context of your order.

Your rights
Applicable Dutch and European legislation entitles you to certain rights pertaining to your personal data processed by us or on our behalf. We inform you of these rights and explain how you can exercise them below.

To prevent misuse, we only send statements and copies of your details to email addresses already known to us. We will require proof of ID in the event that you wish to receive information via a different email address or by post, for example. We keep a list of requests we have processed, we use anonymised data in the event of a request to delete your information. You receive all statements and copies of information in the machine-readable section of our systems.

You have the right to lodge a complaint with the Dutch Data Protection Authority at any time if you believe we have used your personal data incorrectly.

Right to view your data
You always have the right to see the data we (have) processed and which pertains to your person, or which can be attributed to you. You can submit a request to view your data to our data protection officer. You will then receive a response to your request within 30 days. If we agree to your request, we will send a copy of all your data, with a summary of the processors who have access to this data and the category under which we have stored this data, to the email address we hold for you.

Right of rectification
You always have the right to have the data we (have) processed and which pertains to your person, or can be attributed to you, amended. You can submit a request for this to our data protection officer. You will then receive a response to your request within 30 days. If we agree to your request, we will send confirmation that the data has been amended to the email address we hold for you. 

Right to restrict processing
You always have the right to restrict data we have processed that pertains to your person, or can be attributed to you. You can submit a request to our data protection officer. You will then receive a response to your request within 30 days. If we agree to your request, we will send confirmation that the data will no longer be processed until you lift the restriction to the email address we hold for you.

Right of transfer
You always have the right to have data we (have) processed and which pertains to your person, or can be attributed to you, processed by another party. You can submit such requests to our data protection officer. You will then receive a response to your request within 30 days. If we agree to your request, we will send copies of all your personal data we have processed, or which has been processed by other processors or third parties on our behalf, to the email address we hold for you. In all probability, we will no longer be able to continue providing you with a service in that case, because we can then no longer guarantee the secure transmission of data files.

Right to object and other rights
In certain cases, you have the right to object to the processing of your data by or on behalf of ShoeStories. If you object, we will cease processing data immediately pending processing of your objection. If your objection is justified, we will make copies of the data we (have) processed available to you and cease such processing permanently. In addition, you have the right not to be subjected to automated decision-making or profiling. We do not process your data in such a way that this right applies. Please contact our data protection officer if you believe this to be the case.

Cookies
We collect data for research purposes to gain a better insight into our customers, so we can align our services accordingly.

This website uses cookies (small text files that are placed on your computer) to help the website analyse how people use the site. The cookie-generated information about your use of the website may be transferred to ShoeStories’ own secure servers, or to those of third parties. We use this information to monitor how you use the website, to compile reports about website activity, and to offer other services pertaining to website activity and internet use.

We also use JavaScript. This makes online ordering easier; we can remember the contents of your shopping cart or show you products you viewed previously.

Accepting cookies
You need to accept cookies if you want to use our website effectively. We naturally manage the personal data we collect about you with care. The use of cookies is safe. No personal information, such as a telephone number or email address, can be derived from cookies.

We believe it is very important for you to know what cookies our website uses and the purpose for which they are used. You see, we want to safeguard your privacy, as well as user-friendliness, and our commercial interests, as far as possible. You can read more about the cookies used by and via https://www.myshoestories.com/ and for which purposes, in our Cookie Policy.

Cookies from third parties
The use of cookies by third party software solutions is explained in our privacy policy.

Changes to the privacy policy
We reserve the right to amend our privacy policy at any time. However, you will always find the most recent version on this page. We will inform you by email if the new privacy policy has consequences for the way in which we process personal data about you that we have already collected.

Contactgegevens
ShoeStories by Elsa Coloured Shoes
Postbus 280
7040 AG 's-Heerenberg
NETHERLANDS

Tel: 0900-2022725
Fax: 0049-2822 9575848
E-mail: info@myshoestories.com

VAT: NL008004298B01
Trade Register: 09094697