GENERAL DATA PROTECTION REGULATION (GDPR)

What is the GDPR?

The General Data Protection Regulation (GDPR) is a data privacy law passed by the European Union to strengthen and unify personal data for all the European Union’s citizens. The GDPR requires companies to secure and protect the personal data of individuals with respect to their personal data rights. Individuals also have rights over their personal data such as a right to access, correct, delete and restrict processing of their data. As a Simile Client you have already agreed to our Terms of Service and Privacy Policy, both of which are in full compliance with the GDPR to help empower and keep you in compliance with the regulations in regards to your use of Simile services.

How the GPRP Affects You (What is Required of You as a Simile Client)

As a Data Processor under the GDPR definitions, we may be collecting data on your site to provide our services to you at your direction. We have no visibility to, and therefore no way of managing, certain aspects of the interaction with your Shoppers. These aspects include, notably, obtaining consent and the means of collection (e.g. the interaction with your site). Solely to the extent that the GDPR is applicable to you, we now require that you: Obtain informed consent associated with your use of Simile products with your e-Commerce platform; Incorporate our Terms of Service directly into your own privacy policy and make sure your Shoppers are aware of the existence of such policy.

Data Protection Officer

Simile has a Data Protection Officer (“DPO”) to respond to certain requests. On matters of data protection our policy is to practise extreme caution for the benefit of both of us, as well as for the benefit of your Shoppers. Please remember that most shoppers will be unaware of Simile's involvement on your store. You will therefore be, by default and necessity, a Shopper’s first point of contact regarding data protection and so will be considered the representative responsible with respect to the requirements of the GDPR. The Simile DPO can be reached at dpo@scopemedia.com. ​ ​

Does Simile transfer European personal data outside Europe?

Simile's technical infrastructure relies on data centers and cloud service providers that are located outside Europe on Amazon’s AWS Infrastructure.

You can find out more about Amazon’s AWS Platform compliance here

This page has been created to help you comply with the GDPR in regards to your use of Simile's services.

TO COMPLY WITH GDPR YOU MUST 

1) Have a clear method of consent where users have to opt into your service.

2) Have a clear privacy policy that incorporates Simile's privacy policy via hyperlink.