Website policies

The right to privacy and, in particular, the right to personal data protection, is one of the basic principles of Joyería TOUS, S.A., part of the TOUS Group (hereinafter, “TOUS”), with registered address at Carretera de Vic - El Guix Km 3 · 08243 Manresa, Barcelona, which is included in its Code of Ethics, available on the corporate Website.

The purpose of this General Privacy Policy (hereinafter, the “Policy”) is to explain to you how TOUS will process the personal data that can be collected through the different forms on TOUS websites. Your personal data will be processed in a strictly confidential manner and only for the purposes for which you have given your consent, as explained below and, in more detail, as per the specific privacy policies of each form.

This Policy applies only to this Website and not to the Websites owned by third parties. From this website, TOUS will provide links to other pages that it considers of interest to its visitors. TOUS wants to guarantee that these pages maintain the highest standards.

However, due to the very nature of the Internet, TOUS cannot guarantee privacy levels on these Websites, nor can it be held responsible for the contents of the pages that are not owned by TOUS. This Policy shall not be applied to any page to which TOUS maintains a link and which does not belong to the Group.

TOUS is fully committed to regulatory compliance, especially the General Data Protection Regulation of the European Union and the regulations related to personal data protection in effect at all times. This is a priority objective for the Group.

For this reason, TOUS has decided to implement the following principles, with all instances of processing carried out with privacy as the base of their configuration:

• Transparency in data processing is one of TOUS’s priorities. Thus, whenever gathering personal data is necessary, it will duly inform you when this occurs through the corresponding privacy policy, including, among other aspects, the purposes of said processing.
• Processing only the personal data that is strictly necessary to provide the service you request, when applicable.
• Accessibility and proactivity, whenever possible, to make simple means of controlling your personal data available to you.
• Not transferring your personal data to third parties, except to suppliers who provide a service to TOUS, or of whom TOUS has previously informed you and received your consent in this regard.
• Confidentiality of the personal data collected and processed by TOUS by adopting the appropriate security measures for their protection.

TOUS collects your personal data in order to manage your requests and offer you the services and products that may be of interest to you. Specifically, TOUS will process your personal data for the following purposes:

1. To address your inquiries, questions or requests made through the customer service or communication channels identified on each Website and to contact you to resolve them.
2. To improve TOUS Websites, as well as their services and products, in order to offer better service and content.
3. To offer access to restricted spaces on the TOUS website (signing up may require acceptance of a specific privacy policy)
4. To manage your registration on the TOUS Website.
5. To allow you to make purchases through the TOUS Website.
6. To send transaction-related communications in relation to your purchase
7. To carry out statistical analyses.
8. To keep your data updated.
9. To process the reservation request.
10. To manage billing and for accounting purposes.
11. To comply with tax obligations.
12. To process the warranty of products purchased at TOUS.
13. To comply with current legal requirements.
14. To manage your data to send you business information.
15. To collect, store and process your CV, as well as the personal data included therein, in order to analyze your professional profile in order for you to participate, if applicable, in TOUS selection processes.
16. To send communications by email and/or telephone and/or mail during employee selection processes at TOUS.
17. To evaluate your abilities to perform a job by conducting specific tests that will be communicated to you at their appropriate time.

TOUS will only collect the personal data that you wish to voluntarily disclose. In accordance with current regulations on data protection, as well as company information and electronic commerce services, we will inform you when the personal data provided at the time of registration, or when any other data is provided to TOUS to access services on the Website, are incorporated into files owned by this company.

We can request the following data from you:

• Identification information. Information concerning a natural person that allows it to be differentiated from others in a group, such as: name; handwritten and electronic signature; tax ID number; place and date of birth; nationality; photograph; age.
• Contact details. Information that allows you to keep in touch with or enter into contact with its holder, such as: address, email, landline or cell phone.
• Data on physical characteristics. Information about an individual relating to his or her appearance, anatomy, specific features or particularities, such as measures necessary for the manufacture of the products.
• Wealth or financial data. Information concerning an individual relating to his or her assets, rights, debts or obligations subject to economic valuation, such as bank accounts, credit card numbers and security numbers.

Processing your personal data may be necessary to fulfill certain legal obligations or in relation to a contractual relationship that TOUS could have with you.

In other cases, whenever appropriate, TOUS will request your consent to process your personal data.

Within the framework of its promotional activity, TOUS can provide you with resources for signing up for or subscribing to news or commercial information related to the TOUS Group. Said resources shall always be subject to your prior and express consent to send them.

If you have authorized it, TOUS will send you information about products, activities and personalized services, based on your tastes and preferences. Likewise, and if you have also expressly consented to it, you may receive information related to TOUS contests and/or raffles, as well as events and corporate acts close to your location.

You may revoke your consent to receive promotional messages at any time through the link or button enabled for this purpose in each of the communications, or directly communicating your willingness to revoke your consent through the following channels:

(i). Email that must sent to the following address: dataprotection@tous.com

(ii). Mail addressed to Joyería Tous, S.A., Carretera de Vic, El Guix 3, 08243 Manresa (Spain)

(iii). Web form at https://www.tous.com/es-es/faqs/es_es_co

TOUS will obtain your express consent for the processing of your personal data in case of the adoption of automated decision-making and/or profiling.

For the provision of some services, TOUS may process your personal data through automated means. This means that certain decisions are made automatically, without human involvement. For example, if you have products in the “Shopping cart,” you will receive specific communications informing you that your order has left the TOUS facilities.

Another processing that TOUS can perform with your data is the creation of profiles in order to predict your behavior on the Website. As a result, the main page will display products that may be of interest to you, based on the preferences you have shown through your browsing or the information obtained through cookies, as well as in the event you belong to the MY TOUS loyalty program.

You can review the applicable Cookies Policy at the following link: https://www.suotstudio.com/su-en/policies/cookies-policy. You can also contact TOUS with any questions or concerns related to the processing of your personal data at the following address: dataprotection@tous.com

TOUS is committed to processing your personal data as long as they are truly useful and necessary, in order to offer you quality service through their processing. For this reason, TOUS will make all reasonable and timely efforts to minimize the processing and the storage period of your personal data.

In this regard, in each data capture form, TOUS will inform you of the expected period for the processing and/or storage of your personal data.

In any case, and even if you request the erasure of your personal data, TOUS will have the right to store and maintain them, subject to the corresponding blocking, for the period necessary to comply with its corresponding legal obligations, as well as to make them available to the competent Authorities in the different matters that are applicable.

As a result of the processing of your personal data by TOUS, current legislation grants you a series of rights. Here, TOUS offers a summarized explanation of each right to facilitate its exercise:

1. Right of access: You have the right to know what personal data is processed by TOUS, as well as the purposes of said processing.
2. Right of rectification: Your information will always be yours. As such, you can request that it be corrected at any time if the data appearing in the TOUS records is incorrect.
3. Right of erasure: You may request, at any time, that your personal data be erased from TOUS files. However, as previously stated, you should bear in mind that in certain circumstances, compliance with current legislation may prevent the effective exercise of this right.
4. Right of objection: You may object to the processing of your personal data in relation to any purposes for which we process your data, in accordance with the privacy policies applicable in each case.
5. Right of restriction of processing: You may request the restriction of processing in the following cases: 
   1. When you consider that the data that TOUS keeps about you is not correct or accurate;
   2. When, despite the fact that you consider that TOUS is not processing your data legitimately, you prefer that its processing be limited to its erasure;
   3. When the data that TOUS maintains is no longer necessary, according to the purpose for which they were collected, but you need them to be kept to file legal claims;
   4. When, having exercised the right to objection to any processing, TOUS has not yet responded.
6. Right to the portability of your data: You will have the right to, whenever technically possible and reasonable, request that the personal data you have provided be directly communicated to another controller. If this is not possible, TOUS will provide your data directly to said other controller. If that is not possible either, you will be provided with them in a standard format.

As long as TOUS processes your personal data based on your express consent, you may revoke it at any time, without any consequences for you beyond being unable to provide you with certain services, depending on the right exercised.

The exercise of the rights you hold may be made effective by contacting TOUS through any of the following means, accompanied by a copy of your ID card or equivalent identification document:

       (i) By email that must sent to the following address: dataprotection@tous.com

       (ii) By mail addressed to Carretera de Vic, El Guix 3, 08243 Manresa (Spain)

Furthermore, if you consider it necessary, you can contact the TOUS Data Protection Officer (DPO) at the following email address: dpo@tous.com.

In the event that you do not want to exercise a specific right, but you need to make a query or suggestion in relation to the processing of your personal data, you may also contact the addresses provided for the exercise of rights.

If you decide to exercise your rights, our DPO will be able to inform you, if you request it, about: (i) the information that you must provide in order to prove your identity or the capacity of your representative and the information or documentation that must accompany the request; (ii) the time it will take for TOUS to respond to your request; (iii) the way in which you must submit your request, including the form, if one is available; and (iv) the type or means of reproduction that TOUS will use to make the requested information available to you (which will generally be simple copies or electronic documents).

Please note that, in any case, you may file a claim with the Competent Data Protection Authority if you believe that TOUS has not processed your data in a lawful manner or has not properly addressed your requests or rights. In Spain, said competent authority is the Spanish Data Protection Agency.

Your personal data is very important to TOUS. Thus, it undertakes to process them with the utmost confidentiality and discretion, as well as to implement all security measures it deems appropriate and reasonable.

In this regard, TOUS declares and warrants that it has established all the technical means within its reach to avoid the loss, misuse, alteration, unauthorized access and theft of the data provided by users. Likewise, TOUS constantly reviews its security measures to ensure that they are always up to date.

Social Networks are part of the day-to-day activities of many Internet users. For that reason, TOUS has several different profiles.

All users have the opportunity to join the TOUS pages or groups on different social networks.

Nonetheless, you should keep in mind that, unless we request your data directly (for example, through marketing actions, contests, promotions, or any other valid form), your data will belong to the corresponding social network. Therefore, it is recommended that you carefully read their terms of use and privacy policies, as well as make sure that you set your preferences regarding data processing.

As a general rule, TOUS attempts to keep your personal data within the European Union (EU) or the European Economic Area (EEA). Nonetheless, TOUS may sometimes need to provide them to other companies in the Group or to service providers located in other countries, either as a result of the need to provide the requested service or to be able to provide the service with the highest quality standards.

When the data must be transferred to a third party in the context of a corporate transaction (including mergers, acquisitions, among others), the companies that could receive your information are the potential acquirers and advisers (legal, accounting or financial, among others) participating in the transaction. TOUS will only communicate your personal data to said third parties to the extent that said communication is necessary to evaluate or complete the transaction.

In these situations, TOUS guarantees the application of all necessary measures and controls to guarantee and protect the processing of your personal data, such as:

1. Transfer to countries that, despite not being part of the EU or EEA, have been considered by the European Commission as having data protection regulations that guarantee a level of security similar to that applicable in Europe.
2. Existence of standard contractual clauses from the European Commission to ensure that third-party companies that are not part of the EU or EEA enact a similar level of protection. TOUS will sign these agreements as long as there is no equivalent alternative that guarantees the protection of its personal data.
3. Definition of binding corporate rules (BCRs) that are approved by the companies and are reviewed and approved by the control authorities in order to ensure that the company to which we provide your data provides, in any country, an adequate level of protection.
4. In certain cases, the company to which TOUS provides the data may have data protection certifications that guarantee the correct use of your data, in accordance with current regulations.

You may request information about said guarantees from the addresses listed below.

If you have any questions or concerns about the processing of your personal data, please contact us through:

   (i) Email that must be sent to the following address: dataprotection@tous.com

   (ii) Web contact forms

   (iii) Mail addressed to Carretera de Vic, El Guix 3, 08243 Manresa (Spain)

   (iv) DPO contact information: dpo@tous.com