Privacy & Cookies

1. Introduction

The right to privacy and, in particular, the right to the protection of personal data is one of the fundamental principles of Joyería TOUS, S.A., part of the TOUS Group (hereinafter, "TOUS"), with registered address at Carretera de Vic - El Guix Km 3 · 08243 Manresa, Barcelona, which is included in its Code of Ethics, available on the corporate website. 

The purpose of this General Privacy Policy (hereinafter, the "Policy") is to explain the way in which TOUS will process any personal data belonging to users that may be collected through the different TOUS forms. 

 

2. Scope of application of the Policy

This Policy applies only to this website and not to websites owned by third parties. From this website, TOUS may provide links to other websites that it considers of interest to its visitors. TOUS strives to ensure that these websites adhere to the highest standards in relation to privacy. 

However, due to the very nature of the Internet, TOUS is unable to guarantee the privacy levels of these websites, nor can it be held responsible for the content of websites other than those of TOUS itself. 

 

3. Commitment to privacy

TOUS is fully committed to regulatory compliance and, in particular, to compliance with the General Data Protection Regulation of the European Union (“GDPR”) and the regulations related to the protection personal data in force at any time, this being a priority objective for the Group.

As a result, and with privacy being the basis on which all processing carried out is configured, TOUS has taken the decision to implement the following principles:

• Transparency in data processing is one of the priorities of TOUS, so whenever it is necessary to collect personal data we will duly inform you through the corresponding privacy policy, including the purposes of such processing, among other aspects.
• The processing of those personal data that are strictly necessary to provide any services that you request.
• Accessibility and proactivity, whenever possible, to make available to you simple measures that allow you to control your personal data.
• The non-transfer to third parties of your personal data, except those suppliers providing a service to TOUS, or those about which TOUS has previously informed you and received your consent in this regard.
• The confidentiality of the personal data collected and processed by TOUS, guaranteeing the adoption of adequate security measures for their protection.

 

4. Purposes of the processing

TOUS collects your personal data in order, among others, to manage the commercial relationship, your requests and offer you services and products that may be of interest to you. Specifically, TOUS processes your personal data for the following purposes:

1. Dealing with your queries, questions or requests made through the customer service or communication channels identified and contacting you to respond to them.
2. Managing your registration in the TOUS database.
3. Allowing you to make purchases through the TOUS website or in physical shops.
4. Sending transactional notifications in relation to your purchase.
5. Managing user participation in the TOUS loyalty programmes.
6. Processing potential product reservation requests.
7. Managing billing and for accounting purposes.
8. Complying with the applicable legal requirements, both tax-related and those relating to the prevention of money laundering and terrorist funding.
9. Processing guarantees for the products acquired in TOUS.
10. Managing your data to send you commercial information.
11. Obtaining information about your tastes and preferences from your purchasing history and wishlist.
12. Sending information from the TOUS Group that may be considered of special interest for our stakeholders.

5. Source of the data

TOUS will only process the personal data that you have voluntarily disclosed to us or that you have provided to us through third parties that manage the payment gateways or that are involved during the purchasing processes (eg marketplaces).

6. Legal ground for the processing of your personal data

In accordance with current regulations on data protection, as well as those on information society services and electronic commerce, TOUS will inform you that such personal data provided at the time of registration, or any others provided to TOUS for access to some of the services on the website, will be processed by this company.

The data that we may request from the data subjects are the following:

• Identification data. Information concerning an individual that allows them to be differentiated from others in a group, such as: full name; handwritten and electronic signature; tax identification number; place and date of birth; nationality; photograph; age.
• Contact data. Information that allows contact with its owner to be maintained or initiated, such as: address; email address; fixed telephone number, mobile telephone number.
• Data on physical characteristics. Information about an individual relating to their physiognomy, anatomy, features or specific characteristics, such as: measures necessary for the manufacture of the personalised products.
• Asset or financial data. If necessary, information concerning an individual relating to their assets, rights, liens or obligations that can be valued financially.

The processing of your personal data may sometimes be necessary to comply with certain legal obligations, or in relation to any contractual relationship that TOUS may have with you. In all other cases, whenever appropriate, TOUS will request your consent to process your personal data or will consider that this is covered by the legitimate interest of the company.

The legal grounds applicable to each of the purposes indicated in point 4 of this Policy are indicated below.

PURPOSE	LEGAL GROUND
Responding to queries, questions or requests (…).	Consent granted by the users through completing the form and/or ticking the corresponding box.
Managing your registration in the TOUS database.	Consent granted by the users through completing the form and/or ticking the corresponding box.
Allowing you to make purchases (…).	Performance of the contractual relationship.
Sending transactional notifications in relation to your purchase.	Performance of the contractual relationship.
Managing (…) the TOUS loyalty programmes.	Performance of the contractual relationship.
Processing the reservation request.	Performance of the contractual relationship.
Managing billing and for accounting purposes.	Complying with a legal obligation.
Complying with the applicable legal obligations (…)	Complying with a legal obligation.
Processing guarantees for the products acquired in TOUS.	Complying with a legal obligation.
Managing your data to send you commercial information.	Consent granted by the users through completing the form and/or ticking the corresponding box.
Obtaining information about your tastes and preferences (…).	Legitimate interest of the TOUS Group, consisting in personalising commercial offers and marketing activities.
Sending information from the TOUS Group that may be considered of special interest for our stakeholders.	Legitimate interest of the TOUS Group, consisting in offering improved service and content for users.

 

7. Sending commercial notifications

Within the framework of its promotional activity, TOUS may provide you with resources for registration or subscription to news or commercial information related to the TOUS Group. These resources will always be subject to your prior and express consent to send them.

In the event that you have authorised this, TOUS will send you information about its products, activities and personalised services in keeping with your tastes and preferences. Moreover, you may also receive information related to TOUS competitions and/or prize draws, as well as its events and corporate activities.

You can revoke your consent to receiving commercial notifications at any time, through the link or button enabled for this purpose in each of the notifications, or by directly communicating your wish to revoke the consent through any of the following channels:

(i). By email that you should send to the following address: dataprotection@tous.com 

(ii). By post, addressed to Joyería Tous, S.A., Carretera de Vic, El Guix 3, 08243 Manresa (Spain).

8. Automated decisions and the creation of profiles

TOUS will obtain your express consent for the processing of your personal data in relation to the possible adoption of automated decisions and/or the creation of profiles.

For the provision of some services, TOUS may process your personal data using automated means. This means that certain decisions are taken automatically, without human intervention. For example, you will receive specific notifications if you have products selected in your "Shopping Bag” or “wishlist”, as well as when your order has left the TOUS facilities.

TOUS may also process your data to create profiles, with the purpose of predicting your behaviour. As a result of that, you will receive personalised commercial notifications and/or be shown products that may be of interest to you on the homepage, based on the preferences you have shown in your previous purchases, through your browsing, or from information obtained through cookies, as well as if you are part of the MY TOUS loyalty programme. 

You can review the applicable Cookies Policy at the following link https://www.tous.com/es-es/politica-cookies. Likewise, you can contact TOUS for any questions or queries related to the processing of your personal data through the following address dataprotection@tous.com.

9. Duration of the processing and data retention period

TOUS is committed to processing your personal data while they are actually useful and necessary to offer you a quality service through their processing. Therefore, TOUS will make all reasonable and timely efforts to minimise the processing and retention time for your personal data.

In any case, and even if you request the erasure of your personal data, TOUS will have the right to store and retain them, under the appropriate blocking, for the time necessary to comply with the legal obligations that apply, as well as to make them available to the competent authorities in the different matters that are applicable.

10. Exercising of rights and claims with the AEPD (Spanish Data Protection Agency)

As a result of the processing of your personal data by TOUS, the current legislation grants you a series of rights. TOUS offers a brief explanation of each right in order to facilitate your exercising of them:

 

1. Right to access: You will have the right to find out what personal data are being processed by TOUS, as well as the purposes of such processing. You may also request a copy of your personal data being processed.

2. Right to rectification: You may request their rectification at any time if those that appear in the TOUS records are erroneous.

3. Right to be forgotten: You may at any time request that your personal data be erased from the TOUS files. However, and as previously indicated, you must take into account that in certain circumstances compliance with the current legislation may prevent the effective exercising of this right.

4. Right to object: You can object to the processing of your personal data in relation to any of the purposes for which we process your data, in accordance with the privacy policies applicable in each case. 

5. Right of restriction of the processing. You can request the restriction of the processing in the following cases:

1. When you consider that the data that TOUS retains about you are not correct or accurate;
2. When, even though you consider that TOUS is not processing your data legitimately, you prefer the restriction of their processing to their elimination;
3. When the data that TOUS retains are no longer necessary in accordance with the purpose for which they were collected, but you need TOUS to retain them to lodge legal claims;
4. When, having exercised the right to object to any processing, a response from TOUS is being awaited.

6. Right to the portability of your data: Whenever technically possible and reasonable, you will be entitled to request that the personal data you have provided directly be communicated to another data controller. If this is not possible, TOUS will directly provide your data to that other data controller, but if it is not, they will be provided to you in a standard format.

Provided that TOUS is processing your personal data based on your express consent, you can revoke this at any time without further consequences for you beyond, depending on the right exercised, not being able to provide you certain services.

The exercising of your rights may be carried out by contacting TOUS through any of the following means, accompanying this with, to be precise, a copy of your DNI or equivalent identification document: 

(i) By email that should be sent to the following address:dataprotection@tous.com 

(ii) By post addressed to Carretera de Vic, El Guix 3, 08243 Manresa (Spain).

In addition, if you consider it necessary, you can contact our TOUS data protection officer (DPO) through the following email address dpo@tous.com.

If you do not want to exercise a specific right but want to ask a question or make a suggestion in relation to the processing of your personal data, you can also use the addresses provided for the exercising of rights in relation to data protection matters.

If you decide to exercise your rights, our team may provide you with information, on request, about: (i) the information that you must provide as evidence of your identity or the legal status of your representative and the information or documentation that you must provide with the request; (ii) the time it will take for TOUS to respond to your request; (iii) how you should submit your request, including the form, if one is available; and (iv) the method or means of reproduction that TOUS will use to make the requested information available to you (which will generally be uncertified copies or electronic documents). 

Please note that in any case, you may lodge a claim with the competent data protection authority if you consider that TOUS has not processed your data in a lawful manner or it has not correctly responded to your requests or rights. In Spain, this competent authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD).

11. Confidentiality and Security in the processing of data

Your personal data are very important for TOUS, so it is committed to processing them with the utmost confidentiality and discretion and to implementing all those security measures that it deems appropriate and reasonable.

In this sense, TOUS declares and guarantees that it has established all the technical means at its disposal to avoid the loss, misuse, alteration, unauthorised access and theft of the data provided by the users. Likewise, TOUS constantly reviews its security measures to ensure that they are always up to date.

 

12. Social networks

Social networks are part of the daily life of many Internet users, and for this purpose TOUS has created different profiles in them. 

All users have the opportunity to join the pages or groups that TOUS has in different social networks. However, it must be taken into account that, unless we request your information directly (for example, through marketing actions, competitions, promotions, or any other valid form), your data will belong to the corresponding social network. Therefore, it is recommended that you carefully read its conditions of use and privacy policies and ensure that you configure your preferences regarding the processing of data.

 

13. International Transfers

As a general rule, TOUS tries to keep your personal data within the European Union (EU) or the European Economic Area (EEA). However, on an exceptional basis, TOUS may need to provide them to other companies in the Group or to service providers located in other countries, either by necessity to provide the requested service, or to be able to offer you the service with the highest quality standards. 

When the data need to be transferred to a third party in the context of a commercial relationship or corporate transaction (including mergers and acquisitions, among others), the companies that could receive your information are the suppliers, subsidiaries or franchisees, or, where appropriate, potential purchasers and advisers (legal, accounting or financial, among others) involved. TOUS will only communicate your personal data to those third parties to the extent that this communication is necessary for the execution of the services or to evaluate or complete the relationship or transaction.

In these situations, TOUS guarantees the application of all necessary measures and controls to guarantee and protect the processing of your personal data, such as:

1. Communication to countries that, despite not being part of the EU or the EEA, have been considered by the European Commission as countries that have data protection regulations that guarantee a level of security similar to that applicable in Europe.

2. Existence of contractual clauses of the type approved by the European Commission: to ensure that companies in third countries that are not part of the EU or the EEA comply with a similar level of protection. TOUS will sign these agreements as long as there is no equivalent alternative that guarantees the protection of your personal data.

3. Definition of binding corporate rules (BCRs) approved by the companies, which are reviewed and approved by control authorities, with the aim of ensuring that the company, in any country, to whom we provide your data complies with an adequate level of protection.

4. In certain cases, the company to which TOUS provides the data may have Data Protection Certificates that guarantee the correct use of your data in accordance with current regulations.

You can request information about these guarantees from the addresses indicated below.

 

14. Contact with TOUS

If you have any questions or concerns about the processing of your personal data, please contact us through:

(i) Email that must be sent to the address dataprotection@tous.com

(ii) Web contact forms

(ii) Post addressed to Carretera de Vic, El Guix 3, 08243 Manresa (Spain)

(iv) DPO contact details: dpo@tous.com

Cookies are tiny data files received by your PC from a Website you visit. They are used to register
certain browsing interactions on the Website, storing data that can be updated and retrieved. These
files are stored on the user’s computer and contain anonymous information that is not harmful to
your equipment. They are used to remember user preferences, such as the language selected, access
information or the personalization of a Website.

Cookies can also be used to register anonymous information about how a visitor uses the Website.

For example, the Website from which the user has navigated, or whether they have used an advertising “banner” to access the page.

You can find more information on cookies at: http://es.wikipedia.org/wiki/Cookie

SUOT uses only necessary, essential cookies to ensure that you are able to make the most of our Websites and move around them freely, through secure areas, personalized options, etc. SUOT also uses cookies to gather data for analysis on Website use. This analysis helps to improve our customer service, and measure the usage and performance of our website in order to enhance and personalize it.

· Session cookies: These are temporary cookies that are stored in your browser’s cookies file until you leave the website. For this reason, nothing remains stored on the user’s hard drive. The information obtained by these cookies helps to analyze trends in web traffic. In the long term, this allows us to provide a better experience by improving Web content and making the site easier to use.

· Permanent cookies: These are stored on your hard drive and the website detects them every time a user returns. A permanent cookie has a defined expiry date. The cookie will no longer work after this date. These are generally used, for example, to facilitate the registration process.

· Technical cookies: These are essential and absolutely necessary for the correct operation of the Web portal and use of the different options and services it offers. For example, these cookies work to maintain the session, to manage response, performance or option validation time, to utilize security elements, to share content on social media, etc.

· Customization cookies: These cookies allow the user to specify or customize some characteristics of the Website’s general options. For example, to define the language, location configurations or browser type.

· Analytics cookies: These are used by our Sites to analyze user behavior on our website and create browser profiles, as well as to understand user preferences with the aim of
offering better products and services. For example, an analytics cookie can be used to control the user’s geographical areas of interest, to define which product may be more
relevant to them, etc.

· Advertising cookies: These cookies allow for the efficient management of advertising spaces that appear on the web page or application where the service is provided. They ensure that advertising content is tailored to be relevant to the user and that adverts already seen are not repeated.

· Social media cookies: These allow users to share content from the website on certain social media platforms, specific buttons have been included. These buttons may result in the social media platforms to which they are linked installing cookies which, since they are not managed by Joyería Tous®, may be intended to manage the user’s session login on the social network, or the continuation of a session, or to count how many times a specific content has been shared on each social media network. We recommend that users revise the privacy and cookie policies for each social media network regularly and, if necessary, modify the privacy settings on each to limit the tracking that may be carried out, adjusting
each setting according to their own preferences.

· Personalization cookies: These cookies improve the browsing experience by optimizing the content based on user behavior. On visiting a Web page, an advert or promotion for our products and services may be displayed and a cookie may be stored on your browser. This cookie helps us to control our adverts in terms of, for example, how many times they are seen, where they appear, at what time of day, etc.

Some cookies used on this Website may not be associated with SUOT. This is because some Web pages include inserted content belonging to third-party Websites. As this content originates from another Website, SUOT does not control the settings of said Cookies. If you would like to change your Cookies settings preferences, you should check the third-party Websites to obtain more
information.

To comply with current legislation, we have to seek your permission to use cookies. If you choose not to authorize their use by indicating your disagreement, we will only use technical cookies as these are necessary for browsing our Website. In this case, we will not store any other type of cookie.
Keep in mind that if you reject or delete cookies from the Web browser, we cannot keep your preferences, some features of the pages will not function properly, we cannot offer you personalized services and we will have to request your authorization for the use of cookies every time you browse the Website. If, however, you decide to modify the website’s access settings, please be aware that it is possible to delete cookies or prevent them from saving information on your device by modifying the settings panel for this Policy, or by deleting cookies stored on your device, making adjustments and changing settings in your web browser.

Chrome: through http://support.google.com/chrome/bin/answer.py?hl=es&answer=95647

Explorer: through http://windows.microsoft.com/es-es/windows7/how-to-manage-Cookies-in-
internet-explorer-9

Firefox: through https://support.mozilla.org/en-US/kb/enable-and-disable-Cookies-website

Safari: through http://support.apple.com/kb/ph5042

Finally, if you would like to have more control over the installation of Cookies, you can install
programs or plug-ins on your browser, known as “Do Not Track” tools, which allow you to choose
which Cookies to authorize.

Analytics Cookies
Analytics cookies are used by our Web portals to analyze user behavior on our website and browser profiles, and also to understand user preferences with the aim of offering better products and services. For example, an analytics cookie can be
used to control the user’s geographical areas of interest, to define which product may
be more relevant to them, etc.

· Provider: Google Analytics (Google)
More information.

· Provider: New Relic
More information.

Social Media Cookies
To allow users to share content from the website on certain social media platforms, specific buttons have been included. These buttons may result in the social media platforms to which they are linked installing cookies which, since they are not
managed by Joyería Tous®, may be intended to manage the user’s session login on the social network, or the continuation of a session, or to count how many times a specific content has been shared on each social media network. We recommend that users revise the privacy and cookie policies for each social media network regularly and, if necessary, modify the privacy settings on each to limit the tracking that may be carried out, adjusting each setting according to their own preferences.

· Social media: Facebook
More information.

· Social media: Instagram
More information.

Advertising Cookies
These cookies allow for the efficient management of advertising spaces that appear on the web page or application where the service is provided. They ensure that advertising content is tailored to be relevant to the user and that adverts already seen are not repeated.

· Provider: Dataxu Cookies
More information.

· Provider: DBM Cookies
More information.

· Provider: Adroll Cookies
More information.

· Provider: Google Doubleclick
More information.

· Provider: Google Adwords
More information.

· Provider: Yandex
More information.

· Provider: AppNexus
More information.

· Provider: BrainSINS
More information.

· Provider: Rubicon
More information.

· Provider: TradeDoubler
More information.


Customize cookies
These cookies improve the browsing experience by optimizing the content based on user
behavior.

· Google Optimize

More Information.

· Retail Rocket

More information.