About Our Privacy Policy

Scalato cares deeply about your privacy. Therefore, we only process data that is necessary for (improving) our services and handle the information we have collected about you and your use of our services with great care. We never provide your data to third parties for commercial purposes.

This privacy policy applies to the use of the website and the services offered by Scalato. The effective date of these terms is 01/07/2023, and with the publication of a new version, the validity of all previous versions will expire. This privacy policy describes what data we collect about you, how we use it, and under what conditions we may share this data with third parties. We also explain how we store and protect your data against misuse and outline the rights you have concerning the personal data you have provided to us.

If you have any questions about our privacy policy, you can contact our privacy officer. Contact details can be found at the end of our privacy policy.

Data Processing

Below, you can learn about how we process your data, where we store it, the security measures we use, and who has access to the data.

Webshop Software

–

Web Hosting

Mackaay IT Services

We use web hosting and email services provided by Mackaay IT Services. Mackaay IT Services processes personal data on our behalf and does not use your data for its own purposes. However, this party may collect metadata about the use of the services, which is not considered personal data. Mackaay IT Services has implemented appropriate technical and organizational measures to prevent loss and unauthorized use of your personal data. Mackaay IT Services is also bound by a confidentiality agreement based on the agreement with us.

Office365

For our regular business email communication, we use Office365. This party has implemented appropriate technical and organizational measures to prevent abuse, loss, and corruption of your and our data. Office365 does not have access to our mailbox, and we treat all our email communication confidentially.

Payment Processors

–

Reviews

–

Shipping and Logistics

Bode Scholten

When you place an order with us, it is our responsibility to have your package delivered to you. We use the services of Bode Scholten for the execution of deliveries. Therefore, we need to share your name, address, and place of residence data with Bode Scholten. Bode Scholten only uses this data for the purpose of executing the agreement. If Bode Scholten engages subcontractors, they will also provide your data to these parties.

Invoicing and Accounting

–

External Sales Channels

–

Purpose of Data Processing

General Purpose of Processing

We use your data solely for the purpose of providing our services. This means that the processing is always directly related to the task you have entrusted to us. We do not use your data for targeted marketing. If we use your data for contacting you at a later time – other than at your request – we will ask for your explicit consent. We do not share your data with third parties, except to comply with accounting and other administrative obligations. These third parties are all bound to confidentiality based on the agreement between them and us or a statutory obligation.

Automatically Collected Data

Data automatically collected by our website is processed to further improve our services. This data (such as your IP address, web browser, and operating system) is not considered personal data.

Cooperation with Tax and Criminal Investigations

In some cases, Scalato may be obliged to share your data in connection with fiscal or criminal investigations by government authorities. In such cases, we will resist this to the extent permitted by law.

Data Retention

We keep your data for as long as you are a client of ours. This means that we retain your customer profile until you indicate that you no longer wish to use our services. If you inform us of this, we will also consider it as a request to be forgotten. We are legally required to keep invoices with your (personal) data, so we will retain this data for as long as the applicable term runs. However, employees will no longer have access to your client profile and the documents we have created based on your assignment.

Your Rights

Under the applicable Dutch and European legislation, you, as the data subject, have certain rights regarding the personal data processed by or on behalf of Scalato. Below, we explain what these rights are and how you can invoke them.

To prevent abuse, we will only send copies of your data and data to be provided in response to your request to your already known email address. If you request the data to be sent to a different email address or by post, we will ask you to identify yourself. We keep a record of completed requests, and in the case of a forget request, we administer anonymized data. You will receive all copies and copies of data in the machine-readable data format that we use within our systems.

You have the right at all times to lodge a complaint with the Dutch Data Protection Authority if you suspect that we are using your personal data in the wrong way.

Right of Access

You have the right to inspect the data we (or a third party on our behalf) process about you and that are related to your person or can be traced back to you. You can make a request to that effect to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data with an overview of the processors holding this data, along with the category under which we store this data.

Right to Rectification

You have the right to have the data we (or a third party on our behalf) process about you and that are related to your person or can be traced back to you adjusted. You can make a request to that effect to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation at the email address known to us that the data has been adjusted.

Right to Restriction of Processing

You have the right to restrict the data we (or a third party on our behalf) process about you and that are related to your person or can be traced back to you. You can make a request to that effect to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation at the email address known to us that the data will no longer be processed until you remove the restriction.

Right to Data Portability

You have the right to receive the data we (or a third party on our behalf) process about you and that are related to your person or can be traced back to you, in a machine-readable format. You can make a request to that effect to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you copies of all data about you that we have processed or that has been processed on our behalf by other processors or third parties. Most likely, we will no longer be able to continue our service in such a case, as the secure linking of data files can then no longer be guaranteed.

Right to Object and Other Rights

In certain cases, you have the right to object to the processing of your personal data by or on behalf of Scalato. If you object, we will immediately stop data processing pending the handling of your objection. If your objection is well-founded, we will provide you with copies and/or copies of data that we (or a third party on our behalf) process about you, and then stop processing the data permanently.

You also have the right not to be subjected to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe this is the case, please contact our privacy officer.

Cookies

Google Analytics

Our website places cookies from the American company Google as part of the “Analytics” service. We use this service to track and obtain reports on how visitors use the website. This processor may be required to provide access to this data based on applicable laws and regulations. We have not allowed Google to use the obtained analytics information for other Google services.

Third-Party Cookies

In the event that third-party software solutions use cookies, this will be stated in this privacy statement.

Changes to the Privacy Policy

We reserve the right to modify our privacy policy at any time. However, you will always find the most recent version on this page. If the new privacy policy affects the way we process data already collected about you, we will notify you by email.

Contact Information

Scalato
Noorddammerweg 1c
1424NV De Kwakel
The Netherlands
T (065) 366-2520
E jack@cst.nl

Privacy Officer
Jack Duis