Privacy Policy
DATA PROTECTION
thescottish.shop
Privacy Policy
Last modified: 15.10.2020
PREAMBLE
thescottish.shop (hereinafter "TSS") respects the privacy and personal sphere of customers and users. When processing personal data as part of the services offered, TSS strictly adheres to the legal provisions in accordance with the EU General Data Protection Regulation and other legal regulations. With this data protection declaration, TSS therefore provides detailed information about which data is collected when you visit the website and use the services there and how this data is subsequently processed or used. TSS is responsible for the processing and has implemented numerous technical and organizational measures to ensure the most complete protection possible for the personal data processed via the website.
By agreeing to the following data protection declaration, the customer/user consents to TSS collecting, processing, storing and using personal data in compliance with data protection laws and the following provisions.
- RESPONSIBLE/DATA PROTECTION OFFICER
The controller responsible for processing your personal data is thescottish.shop, Lindenstraße 13, 15566 Schöneiche near Berlin, Managing Director: Craig Stevenson; VAT ID: DE329030471.
If the user/customer wishes to object to the collection, processing or use of personal data by TSS in accordance with this data protection declaration in whole or in relation to individual measures, he/she can send the objection by email or letter to the following contact details:
thescottish.shop
Lindenstrasse 13
15566 Schöneiche near Berlin
Phone: +49(0)170 899 2171
Email: craig.stevenson [@] thescottish.shop
In addition, the user/customer can also obtain information about the data stored by TSS at any time and free of charge.
A data protection officer has not currently been appointed because the minimum requirement for the appointment of such an officer is not met.
- SECURITY OF DATA TRANSMISSION
To protect the security of personal data during transmission, TSS uses SSL encryption procedures that correspond to the current state of the art. Encrypted data transmission can be recognized by the https://www.thescottish.shop at the beginning of the browser line. Personal data includes, for example, the name of the user/customer, address or email address, as well as other data that is provided during registration and when creating an optional customer account.
- HOW THE DATA IS USED
3.1 COOKIES
Cookies are text files that are stored on a computer and that enable analysis of website usage. For example, information about the operating system, browser, your IP address, the website previously visited by the user/customer (referrer URL) and the date and time of the visit to https://www.thescottish.shop is recorded. Cookies can be used to estimate which websites are visited most frequently. This enables TSS to better tailor the content of its own pages to the needs of visitors and optimize the existing offering. In addition, this information is used to automatically recognize a user/customer on their next visit to https://www.thescottish.shop and to make navigation easier. Cookies allow, for example, the user to remain permanently logged in so that repeated entry of log-in data is not necessary.
Cookies cannot be used to run programs or transmit viruses to a computer.
The TSS website can also be used without cookies. If the user/customer does not want their computer to be recognized, they can prevent cookies from being saved on their hard drive by selecting "do not accept cookies" in the browser settings. The browser manufacturer's instructions explain how this works in detail. If cookies are not accepted, this can lead to functional restrictions on the offers on the TSS website. Cookies already set on a computer can be deleted at any time. Alternatively, cookies from the TSS domain can also be blocked. TSS points out, however, that this may mean that not all functions of https://www.thescottish.shop can be used to their full extent.
3.2 SERVER DATA / SERVER LOG FILES
For technical reasons, the following data, which an Internet browser transmits to TSS or to the hosting partner, is recorded. This data includes:
- Browser type and version
- operating system used
- Website from which a user/customer visits us (referrer URL)
- Website that is accessed
- Date and time of access
- Internet Protocol (IP) address.
This anonymous data is stored separately from any personal data provided and cannot be assigned to specific people. It is evaluated for statistical purposes in order to optimize the website and offers. TSS reserves the right to subsequently check this data if concrete evidence of illegal use becomes known.
3.3 NEWSLETTER
TSS uses the newsletter to provide information about the company and its current offers at regular intervals. The so-called double opt-in procedure is used to order the newsletter, i.e. the newsletter is only sent by email if the user/customer confirms that they would like to receive our newsletter by clicking on a link in the notification email. No further data is collected. The data is not passed on to third parties.
When you register for the TSS newsletter, your IP address and the date of registration are saved. This storage serves solely as evidence in the event that a third party misuses an email address and registers to receive the newsletter without the knowledge of the authorized person.
TSS newsletters contain so-called tracking pixels, which can be used to determine whether and when an email was opened. In addition, link clicks are evaluated within the newsletter. This data is stored by TSS so that the newsletter can be optimally tailored to the wishes and interests of the subscribers. The data collected in this way is therefore used to send personalized newsletters to the respective recipient.
Consent to the storage of data, the email address and their use for sending the newsletter can be revoked at any time. By revoking consent to receive the newsletter, consent to the aforementioned tracking is also revoked. The revocation can be made by sending a message to the contact options listed under point 1 of this data protection declaration. You can also unsubscribe from the newsletter at any time by clicking on the unsubscribe link at the end of each newsletter.
3.4 PRODUCT RECOMMENDATIONS BY E-MAIL
As a TSS customer, you will receive product recommendations by email at irregular intervals. You will receive these from us regardless of whether you have subscribed to a newsletter. In this way, TSS would like to provide information about products from the existing range that could be of interest to the customer based on their last purchases and an existing wish list at TSS. In doing so, we strictly adhere to the legal requirements.
If you no longer wish to receive product recommendations or any advertising messages, you can object to this at any time. A written message to the contact details given in Chapter 1 (by letter or email) is sufficient. Of course, there is an unsubscribe link in every email.
3.5 CONTACT FORM
TSS offers the opportunity to contact the company via email and/or a contact form on its website. The email address is only used to process the request and for possible follow-up questions.
3.6 GOOGLE SERVICES
The TSS website uses the following services from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA:
3.6.1 WEB ANALYSIS WITH GOOGLE ANALYTICS
Google Analytics is used, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. A contract for order processing has been concluded with Google and the legal requirements for the use of Google Analytics are fully implemented.
The "Activation of IP anonymization" function is used on this website. In this case, Google will shorten the IP address within member states of the European Union or in other contracting states to the Agreement on the European Economic Area and thus make it anonymous. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Cookies are used to collect information about the operating system, browser, IP address, the website previously accessed by the user/customer (referrer URL) and the date and time of the visit to the website. The information generated in this way about the use of the website is transferred to a Google server in the USA and stored there. Google will use this information to evaluate the use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. If this is required by law, or if third parties process this data on behalf of Google, Google will also pass this information on to these third parties. This use is anonymized or pseudonymized. More information about this can be found directly on Google.
More information on how Google Analytics handles user data can be found in Google's privacy policy: support.google.com/analytics/answer/6004245?hl=de
The collection of data generated by the cookie and related to the use of the website (including the IP address) to Google and the processing of this data by Google can be prevented. However, we would like to point out that in this case, not all functions of this website may be fully available.
In the corresponding settings overview of the browser software
Click the following link: Deactivate Google Analytics
An opt-out cookie will be set which prevents the future collection of data when visiting this website: This will prevent Google Analytics from collecting data for this website and for this browser in the future as long as the cookie remains installed in the browser.
3.6.2 GOOGLE CONVERSION TRACKING
If a user/customer accesses the website via an ad placed by Google, Google AdWords places a cookie on the customer's computer. This cookie expires after 30 days and is not used for personal identification. If a user/customer visits certain pages of the TSS website and the cookie has not yet expired, TSS and Google can recognize that this user clicked on an ad placed on Google and was redirected to our site. The information obtained using the cookies is used by Google to create visit statistics for TSS. Through these statistics, TSS learns the total number of users who clicked on a specific ad and which pages of the website were subsequently accessed by the respective user. However, TSS or other advertisers via "Google AdWords" do not receive any information with which users can be personally identified.
Google’s privacy policy can be found here .
You can prevent the installation of cookies by setting your browser accordingly, for example by using a browser setting that generally deactivates the automatic setting of cookies or specifically blocks only cookies from the domain "googleadservices.com".
3.6.3 GOOGLE REMARKETING
This service can be used to display advertisements for users/customers who have already visited the TSS website in the past.
Within the Google advertising network, advertisements tailored to the interests of the user/customer can be displayed on the website. Google Remarketing uses cookies for this evaluation. This makes it possible to recognize visitors as soon as they visit pages within the Google advertising network. In this way, advertisements can be presented within the Google advertising network that are related to content that the visitor has previously accessed on websites in the Google advertising network that also use Google's remarketing function. Google states that it does not collect any personal data in this process. You can deactivate this function by making the appropriate settings at google.com/settings/ads . Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at networkadvertising.org/managing/opt_out.asp .
3.6.4 GOOGLE MAPS
Each time the “Google Maps” component is called up, Google sets a cookie to process user settings and data when the page on which the “Google Maps” component is integrated is displayed. This cookie is generally not deleted when the browser is closed, but expires after a certain period of time, unless it is deleted manually by the user/customer beforehand.
If you do not agree to this processing of data, you have the option of deactivating the "Google Maps" service and thus preventing the transmission of data to Google. To do this, you must deactivate the Java Script function in the browser you are using. Please note that in this case "Google Maps" cannot be used or can only be used to a limited extent.
The use of “Google Maps” and the information obtained via “Google Maps” is subject to the Google Terms of Use google.de/intl/de/policies/terms/regional.html and the additional terms and conditions for “Google Maps” google.com/intl/de_de/help/terms_maps.html .
3.6.4 GOOGLE OPTIMIZE & GOOGLE TAG MANAGER
Google Optimize is used occasionally. Google Optimize analyzes the use of different versions of a website and helps us optimize the user experience and our offering according to the behavior of our users on the website. Google Optimize is a tool integrated into Google Analytics.
Using Google Tag Manager allows us to manage website tags via one interface. The Tag Manager is a cookie-free domain and does not collect any personal data. The tool triggers other tags that may collect data from the user. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.
3.7 FACEBOOK SERVICES
TSS uses the following communication tools from Facebook Ireland Limited Hanover Reach, 5-7 Hanover Quay, Dublin 2 Ireland (hereinafter "Facebook") on some of the pages of its website.
3.7.1 FACEBOOK PIXEL WEBSITE CUSTOM AUDIENCES
The tool makes it possible to deliver ads within Facebook that are tailored to the interests of users/customers. Basically, a non-reversible and non-personal checksum (hash value) is generated from the usage data, which can be sent to Facebook for analysis and marketing purposes. The content is therefore controlled anonymously based solely on encrypted values, where a certain value always generates a certain identification value, without sending the clear data to TSS or to Facebook. The data is transmitted using TLS (Transport Layer Security). The Facebook cookie is used for the Website Custom Audiences product.
Further information about the purpose and scope of data processing and use by Facebook as well as setting options for protecting privacy can be found in Facebook's privacy policy, which can be found at facebook.com/ads/website_custom_audiences and facebook.com/privacy/explanation . If you would like to object to the use of Facebook Website Custom Audiences, you can do so in your personal Facebook account settings here .
3.7.2 FACEBOOK LIKE BUTTON
TSS integrates the Facebook “Like button”. An overview of Facebook plug-ins can be found here . Each time a website equipped with such a component is accessed, this component causes the browser used by the user/customer to download a corresponding representation of the component from Facebook. This process informs Facebook which specific page within https://www.thescottish.shop the user/customer is currently visiting. When the TSS website is accessed and a user/customer is logged into Facebook at the same time, Facebook uses the information collected by the component to recognize which specific page is being visited and assigns this information to the personal account on Facebook. If, for example, you click the “Like” button or make corresponding comments, this information is transmitted to the personal user account on Facebook and saved there. In addition, the information that our website has been visited is passed on to Facebook. This happens regardless of whether you click on the component or not.
Please note that TSS, as the provider of the website, has no knowledge of the content of the data transmitted or how it is used by Facebook. Further information on this can be found in Facebook's privacy policy . If you do not want Facebook to be able to associate your visit to the website with your personal Facebook user account, you can log out of your Facebook user account beforehand.
3.8 YouTube
TSS uses components from YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a company of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA. TSS uses the “enhanced data protection mode” option provided by YouTube.
When a page is accessed that has an embedded video, a connection is established to the YouTube servers and the content is displayed on the website by notifying the respective browser. According to YouTube, in "extended data protection mode" only data is transmitted to the YouTube server, in particular which pages on the TSS website were visited when the video was to be viewed. If the user/customer is logged in to YouTube at the same time, this information is assigned to the YouTube member account. This can be prevented by logging out of the respective YouTube member account before visiting the TSS website. Further information on YouTube's data protection has been provided by Google here .
3.9 AFFILIATE MARKETING
TSS uses affiliate tracking cookies to correctly record sales and/or leads (website visitors acquired through online marketing measures). These affiliate tracking cookies do not store any personal data. Rather, only the identification number of the referring partner and the serial number of the advertising material clicked on by the user/customer are recorded. This information is required for payment processing between the website operator and TSS. The partner identification number is used to allocate the commission to be paid to the referring partner when a transaction is concluded.
The installation of cookies can be prevented by a corresponding setting in the browser software; however, we would like to point out that in this case, not all functions of the website may be fully available.
3.10 PAYMENT SERVICE PROVIDERS
If necessary, data will be transferred to one of the following payment service providers named in the order process. Payment can only be made using the online payment methods specified in the shop.
3.10.1 PAYPAL
When paying via PayPal, data relating to the order will be passed on to PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg. TSS does not come into contact with the customer's bank details. Further information on PayPal's data protection can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full .
3.10.2 SHOPIFY PAYMENTS
When paying by debit card, Maestro, credit card, Klarna, Sofort, purchase on account, GPay, ApplePay, data as part of the order will be passed on to Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify") and Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. TSS does not come into contact with the customer's bank details. Further information on Shopify's data protection can be found at https://www.shopify.de/legal/datenschutz .
3.11 SHIPPING SERVICE PROVIDER
TSS works with the following shipping service providers to whom, depending on the order, personal data – which is solely necessary for order processing – is transmitted: DHL, DPD, Hermes, UPS, FedEx).
3.12 USER REGISTRATION
It is possible to register on https://www.thescottish.shop. The personal data voluntarily provided by a user/customer, such as name, address, date of birth and email address, are processed for the use of the offer.
In the case of important changes, such as changes to the scope of the service or technically necessary adjustments, the email address provided during registration will be used to inform the user.
Registered users have the option of changing or deleting the data they provided during registration at any time if necessary. We will gladly correct or delete this data at the request of the user/customer, provided that there are no statutory retention periods to the contrary. Please use the contact details provided on this page under point 1 of this data protection declaration.
When you register on the TSS website, your IP address and the date and time of registration are also saved. This serves as a safeguard for the operator in the event that a third party misuses the data and registers on the website using this data without the knowledge of a user/customer. The data is not passed on to third parties.
3.13 GUEST ORDER
It is possible to place orders as a guest. If you choose this type of order, you do not have to register before placing an order. The data must be entered again for each subsequent order. TSS collects, processes, stores and uses the information provided for a guest order for the purpose of executing the contract.
3.14 CUSTOMER / CONTRACT DATA
Personal data is only processed to the extent that it is necessary for the establishment, content design or modification of the legal relationship (master data). Personal data about the use of the TSS website (usage data) is processed to the extent that this is necessary to enable the user/customer to use the service or to bill them.
3.15 TRUSTPILOT REVIEWS
The Trustpilot widget is integrated on https://www.thescottish.shop to display the services provided by Trustpilot and any reviews collected as well as to offer Trustpilot products to users/customers after an order.
This serves to safeguard the legitimate interests in optimal marketing of the existing offer, which prevail within the framework of a balancing of interests. The widget and the services advertised with it are an offer from Trustpilot A/S, Pilestræde 58, 5th floor, 1112 Copenhagen K, Denmark, registration number (CVR) 30 27 65 82.
When the widget is called up, the web server automatically saves a so-called server log file, which contains information such as the IP address, date and time of the call, amount of data transferred and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your visit to the site.
Further personal data will only be transferred to Trustpilot if, after completing an order, a user/customer decides to use Trustpilot reviews or has already registered to use them. In this case, the contractual agreement concluded between the user/customer and Trustpilot applies.
3.16 JOB ADVERTISEMENTS
If you would like to apply to TSS, the application data will be processed electronically by TSS for the purpose of completing the application process. Processing will be carried out electronically in particular if the application documents have been sent to TSS electronically, for example by email.
If an application is followed by the conclusion of an employment contract, the transmitted data may be stored in a newly created personnel file by TSS for the purposes of the usual organizational and administrative processes, in compliance with the relevant legal provisions.
If a job application is rejected, the transmitted data will be deleted automatically two months after notification of the rejection.
This does not apply if longer storage is necessary due to legal requirements (e.g. the burden of proof under the General Equal Treatment Act) or if the applicant has expressly consented to longer storage.
- LEGAL BASIS FOR PROCESSING OF PERSONAL DATA
TSS processes personal data only to the extent that it is necessary for the establishment, content design or modification of the legal relationship, if a legal regulation prescribes the processing of personal data or the user/customer has expressly consented to this.
- PROCESSING BASED ON LEGITIMATE INTERESTS
In order to protect other legitimate interests, TSS is legally permitted to process personal data, unless the interests or fundamental rights and freedoms of the data subject prevail.
- TRANSFER OF PERSONAL DATA TO THIRD PARTIES
Personal data will only be passed on or transmitted to third parties if this is necessary for the purpose of contract execution – in particular passing on order data to suppliers – or for billing purposes or if the user/customer has previously consented.
The data will not be passed on to third parties without your express consent, for example for advertising purposes. All service providers are obliged to comply with the applicable data protection requirements.
7.Duration of storage of personal data
TSS stores personal data in accordance with legal requirements and for as long as it is necessary to perform a service requested by the user/customer or for which the user/customer has given consent, unless there are legal obligations to the contrary, such as retention periods under commercial and tax law.
8. USER/CUSTOMER RIGHTS WITH REGARD TO DATA PROTECTION
8.1 INFORMATION
The user/customer has the right at any time to obtain information about the personal data stored about him/her, including its origin, the recipients to whom the data is passed on and the purpose of the data processing.
8.2 CORRECTION
The user/customer has the right to request that we immediately correct any inaccurate personal data concerning him or her or to complete any incomplete personal data, taking into account the purposes of the processing.
8.3 DELETION
The stored personal data will be deleted if the user/customer revokes his/her consent to storage, objects to the processing of personal data, the data retention is no longer necessary to fulfil the purpose for which it was stored, or if storage is not permitted due to legal requirements.
8.4 RESTRICTION OF PROCESSING
If the user/customer disputes the accuracy of the personal data stored about him or her or if the personal data is required to assert, exercise or defend legal claims, but at the same time is no longer required by TSS, the user/customer can request that the processing of the personal data be restricted.
The user/customer can also have the processing restricted for the period from the time of filing an objection to the processing until the decision on whether to grant it.
If the processing of personal data is restricted, it will no longer be processed.
8.5 OBJECTION
If TSS processes personal data based on a legitimate interest (either itself or that of a third party) or the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority, the user/customer has the right to object to the processing at any time for reasons arising from the particular situation.
In the event of an objection, TSS will no longer process the personal data unless TSS can demonstrate compelling legitimate grounds that outweigh the interests, rights and freedoms of a user/customer or requires the processing for the establishment, exercise or defense of legal claims.
The right of objection applies equally to direct advertising and related profiling.
8.6 REVOCATION
The user/customer has the right to revoke consent to the use of data at any time. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected.
9. PROVISION AND NON-PROVISION OF PERSONAL DATA
www.thescottish.shop can be visited and used without providing any personal information. TSS does not store any personal data in this context. However, we would like to point out that in this case not all functions of the website can be used to their full extent. In order to ensure that the service is improved, TSS only evaluates statistical data that does not allow any conclusions to be drawn about an individual person.
10. CHANGE OF PURPOSE OF PROCESSING PERSONAL DATA
If TSS intends to further process the personal data for a purpose other than that for which the personal data was collected, TSS will promptly inform the user/customer of this other purpose prior to such further processing.
11. TRANSFER OF DATA TO THIRD PARTIES AND NON-EU COUNTRIES
TSS does not pass on any personal data to third parties unless there is a legal basis that obliges TSS to do so. In addition, no personal data will be passed on to a non-EU country or a country outside the scope of GDPR, unless the customer places an order from a third country or the transfer of data is necessary for the processing of the order (e.g. for the delivery of goods abroad).
12. MINORS
TSS expressly points out that minors are not permitted to submit personal data on TSS websites without the explicit consent of a parent or legal guardian. TSS does not explicitly request that minors collect, store or pass on personal data.
13. CHANGES TO THE PRIVACY POLICY
TSS reserves the right to change security and data protection measures if this becomes necessary due to legal and/or technical developments. In these cases, the data protection information will also be adjusted accordingly. Please always refer to the latest version of our data protection declaration.