Privacy statement

Privacy Statement

PRIVACY STATEMENT GENERAL

This Privacy Statement applies to the collection and processing of personal data of Scotch & Soda's visitors, users and customers, while interacting with us via our website www.scotch-soda.eu and all subdomains, jointly referred to as “website(s)” and app.

Scotch & Soda is a trade name of United Legwear & Apparel Europe B.V. (“we” or “Scotch & Soda”). Therefore, we are responsible for the processing of your personal data through our website(s) and/or app. You can find our contact details in the Contact section at the end of this Privacy Statement.

Scotch & Soda values great importance to the protection and security of your privacy and your personal data. We process your personal data in accordance with the EU General Data Protection Regulation (EU 2016/679), and/or any other (local) data protection and direct marketing laws (when applicable) (“Applicable Legislation").

Scotch & Soda may amend this Privacy Statement from time to time. If applicable, the amended version will be published on our website(s) and app. In the event of changes that may substantially have an impact on your privacy, we will – to the best of our ability – actively inform you hereof.

This Privacy Statement was last amended on June 20th 2024

 THIS PRIVACY STATEMENT INFORMS YOU ABOUT THE FOLLOWING:

  1. HOW DO WE PROCESS YOUR PERSONAL DATA, WHAT TYPE OF PERSONAL DATA AND FOR WHICH PURPOSE? 

1.1 Completion of online orders, customer services and fulfilment of any other request 

1.2 Customer related marketing initiatives or personalised advertising, use of website

1.3 Functionality of use website(s) and app

1.6 Business purposes

  1. LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

2.1 Consent 

2.2 The performance of agreement 

2.3 Legitimate interests

2.4 Compliance with legal obligations

  1. HOW DO WE PROTECT YOUR PERSONAL DATA?
  2. RETENTION PERIODS
  3. DO WE SHARE YOUR PERSONAL DATA WITH THIRD PARTIES?
  4. YOUR PRIVACY RIGHTS
  5. MINORS PROVIDING PERSONAL DATA
  6. COMPLAINTS
  7. CONTACT
  1. HOW DO WE PROCESS YOUR PERSONAL DATA, WHAT TYPE OF PERSONAL DATA AND FOR WHICH PURPOSE?

We will process your data for different purposes. Depending on the purpose for which we process your data from time to time, we need to process one or more categories of personal data, which we have set out in a detailed overview below.

1.1 Completion of online orders, customer services and fulfilment of any other request

 

1.1.1 Online orders and personal Scotch & Soda accounts

  • Online order:

If you place an order through our website(s) or app, we process your name, e-mail address, telephone number, billing information (including billing address), shipment address and other data needed to complete and deliver your order. Some of this information is necessary to complete your order, as without a name and shipment address, we cannot deliver any purchases. To deliver your order in accordance with the delivery method you have chosen, we will notify you per e-mail about the status of your delivery. We will share your contact details with our contracted carrier. All carriers involved act as independent controllers, responsible for processing your personal data. In case of any questions relating to how they process your personal data, please consult the privacy statement on the website of the respective carrier. You can find the carrier fulfilling your delivery in the notification e-mail about the status of your order.

  • Online Account:

If you create an online account on our website(s) or app, we process your personal data on a secure server. You are asked to fill in your name, e-mail address, telephone number, billing information (including billing address), shipment address, to create a password and to subscribe to our newsletter(s) (optional). Furthermore, we will create a user-ID in our system. We also give you the option to store your credit card details in an encrypted format.

1.1.2 Payments and prevention of fraud When you pay for an online order, we need to process your personal data. All payments done with a debit or credit card are processed by a payment (service) provider, who acts as independent controller for the processing of personal data for this specific payment purposes. In case of any questions relating to how such payment (service) provider processes your personal data, please consult their privacy statements on their website. In case of a payment with your credit card, the payment (service) provider is legally obliged to check your personal data against your ability to fulfil your payment obligation or fraud. To recognize, detect or to prevent fraud, our payment (service) provider will use transactional data, such as your bank account number, the type of debit or credit card, expiration date, location of the purchase, time of the purchase and the country of origin of the credit. When you pay online, our payment (service) provider will also process the IP address of your mobile device or your computer. Scotch & Soda will not process any personal data for this specific purpose.

1.1.3 Communicating with consumer care We collect personal data to be able to answer any of your questions raised to our consumer care by regular mail, by telephone, by email or via chat. If you contact our consumer care, we collect your name, e-mail address (and any additional data you provide us with or necessary in relation to your purchase), the content of correspondence, conversation notes and call recordings in case of contact by telephone to be able to respond to your questions or comments, to provide better service and for training purposes. If you make use of our chatbot service on our website, you can always speak with someone in person.

 

1.2 Customer related marketing initiatives or personalised advertising, use of website

 1.2.1 To offer you Scotch & Soda products and services. I you have consented to this, we may send you an e-mail to inform and remind you that the items you have placed in your shopping cart are still available for purchase, provided you were logged into your online account and have not yet purchased any of these items. For this purpose, we collect data about the items placed in your shopping cart. Scotch & Soda uses interest-based advertising. This means we collect data regarding your website behaviour, use of applications and your shopping behaviour to improve your customer experience, our customer service and to provide you with communications and promotions from us or from advertising partners working on behalf of us. By using interest-based advertising, Scotch & Soda or its advertising partners want to show you advertisements that match your interests. According to Applicable Law, you either have to consent to this or can object to Scotch & Soda's and our partners' ability to collect and use your data for these purposes. To opt out of receiving interest-based advertising, please click on either one of the following links: https://www.networkadvertising.org or https://youradchoices.com.

To successfully opt-out, please note that you must have cookies enabled in your web browser and that if you choose to opt-out, you continue to see advertisements on our websites and receive communications from us. Such advertisements and communications will not be based on your website behaviour or shopping behaviour. As described above, you can also prevent automatic collection of some data by disabling cookies on your web browser. For more information about cookies, please see our Cookie Statement on our website(s).

1.2.2 To be able to send you our newsletter and other promotional communications per e-mail. Scotch & Soda loves to keep you updated through our newsletter, in which we will inform you about new products, special offers and other promotional activities. We will first obtain your consent / subscription before sending our newsletter and other special offers by e-mail. Subscription is based on your e-mail address, no other personal data will be collected by Scotch & Soda, other than any preferences specified by you. Preferences specified by you in your account will also be used in our communications. You always have the option to revoke your consent for receiving our newsletter or other marketing related communications from us by choosing one of the following options:

  • By clicking the 'unsubscribe' link at the bottom of the respective Scotch & Soda e-mail.
  • By clicking the 'unsubscribe from all' link in the newsletter preferences in your personal Scotch & Soda account.
  • By sending an email to contact@scotch-soda.eu.
  • By notifying consumer care in writing using the postal address mentioned in the 'Contact' section below or by using the contact form on https://www.scotch-soda.eu.

When you unsubscribe to marketing related communications from us, we will remove you from the mailing list as quickly as possible. Clicking the 'unsubscribe' link at the bottom of the Scotch & Soda e-mail or via your personal Scotch & Soda account is the easiest and most efficient way for you to unsubscribe.

1.2.3 To personalize our services by creating a marketing profile Upon your consent, Scotch & Soda creates marketing profiles to optimise our day-to-day business and to provide you with better offers and services. For example, we use your feedback, information about your purchases and the use of our services to make your shopping experience as good as possible. We use this data to personalize our products and services and to recommend products you might be interested in. By analysing your purchases and use of the various services of Scotch & Soda, we can better match our services and communication to your preferences. We therefore link and add available information about you to your account, including your interests, selected preferences, online purchases and information about your use of our website(s), app and other digital environment. We also use this data to find patterns that can be used to further optimize our marketing. We process data regarding your online purchase history and behaviour on our website(s),app and e-mail data in a Data Management Platform. When you log in to your online account on our website(s) and app, we link this data to your customer ID. T Using a Data Management Platform allows us to show you specific (targeted) advertisements on our website(s), app and/or or on third party websites or platforms, such as Facebook, Instagram and Google. The Data Management Platform also supports us to send you targeted e-mails and to personalize our website(s) and app to your interests. We never sell your personal data to third parties. We analyse the data collected to target a specific audience, to match your data with other customers who have a similar profile, to link devices that you use, and to show you targeted advertisements and special offers and to customize your online experience. Based on your customer profile, we determine the communication you receive as a customer. We work with segmentation based on profile characteristics. For example, a birthday gift based on the date of birth. We have also set up our systems to ensure the accuracy of personal information. Scotch & Soda does not make use of automated decision-making. This means that the way we compose your profile has no significant legal implications for you. Furthermore, we do not use any special categories of personal data for marketing purposes, such as personal data revealing racial or ethnic origin, political opinions and religious or philosophical beliefs.

 

1.3 Functionality of use website(s) and app

 1.3.1. To optimize the use of the Scotch & Soda website(s) and app We use technology service providers to better understand the needs of the users of our website(s) and app with the purpose to optimize our website(s), app and your user experience (e.g., how much time do you spend on which pages, which links do you click, what users do and do not like). This enables us to build and maintain our service with user behaviour. We use technology service providers such as Google to collect and display detailed statistics from our website(s). The purpose of this service is to give us a clear overview of visitor flows, traffic sources and pageviews. Based on this information we improve and secure our website(s) and app, offer you services and products via other media and improve and personalize your shopping experience. The technology service providers use cookies and other technologies to collect (personal) data on our users' behaviour and their devices. This personal data collected while using cookies and other technologies include information about your device, such as device type (unique device identifiers) and operating system, your geographic location (country only), the preferred language used to display our websites, mouse events (movements, locations, clicks), keypresses, referring URL and web domains & web pages visited and date and time when our pages were visited.

1.3.2. Cookies When you visit the Scotch & Soda website(s), Scotch & Soda uses cookies to improve your user experience. Cookies are small text files saved on your computer's hard drive or memory. We use cookies to record the preferences you set for a particular service or website(s), so that you do not have to fill them in again during subsequent visits. In addition, cookies ensure that the products or services that you purchase are saved when you use our online 'shopping cart'. You can read more about cookies in the Cookie Statement on our websites. The legal basis for the use of personal data obtained through cookies and other technologies is based on your consent (with the exception of functional cookies and cookies with a minimum infringement on your privacy). You can withdraw your consent any time.

 

 1.4 Social Media

By using social media and by following or communicating with Scotch & Soda’s social media channels, you may already be familiar with and understand the way your personal data is processed. You can always decide as to how and to whom these social media channels share your personal data. If you engage with Scotch & Soda's social media channels, the administrator may share certain categories of personal data with us regarding your online activities and social media profiles, for marketing purposes.

1.5 Customer (satisfaction) surveys

Scotch & Soda gives you the possibility to write online reviews, either via our website or via e-mail after your received a purchase confirmation. This enables Scotch & Soda to research the customer satisfaction and usability of our website(s) and app and to optimise our products and services. When you write a review, we collect the following personal data: your name and email address. Please note that we always give you the option to write a review anonymously.

1.6 Business purposes

We share your personal data with third parties in the context of a corporate transaction, such as a reorganization, merger, sale, joint venture, assignment, bankruptcy, transfer or other disposition or acquisition of all or any part of our businesses, assets or stock or similar events. Such third parties may include, for example, an acquiring entity and/or its advisors. We will only do so if permitted by Applicable Law or where we have a legitimate commercial interest.

  1. LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

The legal grounds for processing your personal data (depending on the context) are:

 

2.1 Consent

Applies to the processing purposes referred to in Section 1.2.1, 1.2.2, 1.2.3, 1.3.2, 1.4.

Based on your consent, we use your personal data on both aggregated and individual basis for the marketing of our products and services, to contact you via e-mail, social media, for interest-based advertising or other commercial purposes. We can also use your personal data to create a marketing profile to analyse and improve the quality of our products and services, to analyse your interests, to personalize our advertisements and to measure and understand the effectiveness of our personalized advertisements.

Note: if you have not purchased any product or service from us, we will not send you marketing related communications (such as newsletters, promotions, news on products or service updates) via e-mail, other electronic means, via telephone or per hardcopy mail (such as flyers), unless you have given your consent / opt-in. You can withdraw your consent at any time (please see the section 'Your Privacy Rights' below).

2.2 The performance of agreement

 

Applies to the processing purposes referred to in Section 1.1.1.

We need to process your personal data in order to handle your order you have placed with us.  When you have purchased a product or service from us, we need to process your personal data to send you e-mail notifications about your purchase, to deliver the product or to respond (if any) to your requests to our consumer care and to provide you with other essential information regarding our products and services.

 

2.3 Legitimate interests

 

Applies to the processing purposes referred to in Section 1.1.2, 1.1.3, 1.2.1, 1.2.2, 1.3.1, 1.3.2, 1.5 and 1.6.

We use your personal data for our legitimate commercial interests such as to operate and expand our business activities, to develop, improve or modify our products and services, to generate aggregated statistics about the users of our products and services, to facilitate our business operations, to operate company policies and procedures, to enable us to make corporate transactions, such as any merger, sale, reorganization, transfer of our assets or businesses, acquisition, bankruptcy, or similar event, intragroup restructuring or for other legitimate business purposes permitted by applicable law. We have performed a balancing test to weigh the legitimate interests of Scotch & Soda (as described above) against your personal interests, personal rights and freedoms. Please note that the infringement of your privacy rights and freedoms is minimised because, if possible, we use pseudonyms, aggregated data and apply other principles of privacy by design. Furthermore, only a limited number of staff have access to your personal details and only when required to exercise their duties. Scotch & Soda has carefully safeguarded your personal data (please see 'How do we protect your personal data' below). Based on the balancing test performed, Scotch & Soda believes that our legitimate interests do not harm your personal rights or freedoms.

2.4 Compliance with legal obligations

Any personal data that will be used to comply with a legal obligation to which we are subject, such as personal data to be provided to supervisory bodies, fiscal authorities or investigation bodies. For example, to provide camera footage to the police if such request is based on a valid legal ground and judicial authorities on the basis of a court order in case of incidents.

 

  1. HOW DO WE PROTECT YOUR PERSONAL DATA?

Scotch & Soda has taken appropriate technical and organisational measures to protect your personal data against loss or any form of unlawful processing. We protect your personal data using a wide range of security measures, including secure storage. Our information security policy is based on industrial standard norms and includes regulations about:

  • organisation of the security of personal data (assigning responsibilities in function profiles);
  • managing company resources;
  • physical security of the premises;
  • entry control and authorisations for staff members;
  • maintenance and development of systems;
  • emergencies;
  • business continuity;
  • monitoring potential threats (external or internal);
  • monitoring information security incidents; and
  • conducting a periodic security audit of the systems.

 

  1. RETENTION PERIODS

Scotch & Soda will only store your personal data for as long as needed for the specific purpose of the personal data. The term for which we store your personal data depends on the type of product or service, the country specific applicable law(s), the nature of the personal data and the purposes for which they have been processed. The retention period can therefore differ per purpose and country. We have an extensive Retention Policy in place, which covers all different scenarios applicable. If we receive a request from you, as further set out under 'YOUR PRIVACY RIGHTS' below, to delete your personal data, we will honour your request, unless Applicable Law prohibits us to do so.

 

  1. DO WE SHARE YOUR PERSONAL DATA WITH THIRD PARTIES?

Our basic principle is that we do not share your personal data with third parties. In some cases, however, we need to share your personal data with third parties (e.g., in the context of performing an agreement, to provide our products and services, or to send out marketing related messages):

  • business partners, suppliers (such as IT service providers) and subcontractors;
  • contact centres, to assist us with respect to consumer care;
  • advertising and media companies that carry out marketing and media activities on our behalf; and
  • analytics and search engine providers that assist us in the improvement and optimisation of our website(s) and app.

With all such third parties that qualify as a processer, we have data processing agreements in place. Some of our suppliers or third parties are based in countries outside of the European Economic Region (EER) or store their data outside of the EER. The regulations in these countries do not always offer an adequate level of data protection. A list of countries that do provide an adequate level of data protection can be found here. For that reason, we have taken additional appropriate adequate measurements to safeguard any transfer of personal data to these countries such as the EU Model Contract Clauses, approved and adopted by the European Commission. We also provide your personal data to third parties to comply with laws and regulations or in the context of legal proceedings or a court order.

 

  1. YOUR PRIVACY RIGHTS

You can always request Scotch & Soda for access to the personal data that Scotch & Soda processes about you. You have the right to request:

  • access to your personal data (access);
  • change or correction of your personal data (rectification);
  • deletion of your personal data (erasure/right to be forgotten);
  • restriction of the processing of your personal data (restriction);and
  • transfer of your personal data to another controller or to yourself if we have processed your data based on your consent or based on the agreement you have entered with us (data portability).

Furthermore, you are entitled to object to the (further) processing of your personal data if we have processed your data based on our legitimate interests (objection). If you would like to know more or would like to invoke any of your rights, please contact us at cs-nl@scotch-soda.eu.

 

  1. MINORS PROVIDING PERSONAL DATA

The age threshold of minors for obtaining parental consent is established by each EU Member State and can be between 13 and 16 years. Minors are only allowed to provide personal data to Scotch & Soda if they have written consent from one of their parents or a legal representative.

 

  1. COMPLAINTS
  • If you have a complaint about our products or services, please contact us at: contact@scotch-soda.eu.
  • If you have any question / complaint relating to how we process your personal data, please contact us at contact@scotch-soda.eu.
  • If you are not satisfied about we handle / process your requests or how we processes your personal data, you can contact your local Data Protection Authority. Here you find the link to the overview of your EU National Data Protection Authority.

 

  1. CONTACT
  • The e-mail address for contacting Scotch & Soda is contact@scotch-soda.eu.
  • Scotch & Soda's postal address is Jacobus Spijkerdreef 20, 2132 PZ, Hoofddorp, the Netherlands.
  • United Legwear & Apparel Europe B.V.  is registered in the commercial register under number 89918177, and its registered office is located at Jacobus Spijkerdreef 20, 2132 PZ, Hoofddorp, the Netherlands.
  • You can also contact Consumer Care via the telephone number as communicated on our website.