The purpose of this General Privacy Policy (hereinafter, the "Policy") is to explain the way in which Joyería TOUS, S.A., part of the TOUS Group (hereinafter, “TOUS”), with registered address at Carretera de Vic - El Guix Km 3 · 08243 Manresa, Barcelona, will process any personal data belonging to users that may be collected through the different TOUS forms.  

This Policy applies to any online service location that posts a link to this Privacy Policy and all features, content, and other services that we own, control, and make available through such online service location (collectively, the “Site”) and does not apply to websites owned by third parties. TOUS may provide links from this website to other websites that it considers of interest to its visitors.  

TOUS does not control or guarantee the privacy levels of these third-party websites, nor can it be held responsible for the content of websites other than those of TOUS itself. This Policy is not intended to be applied to any website to which TOUS has a link and which does not belong to the Group. 

TOUS is committed to compliance with the General Data Protection Regulation of the European Union (“GDPR”) and the regulations related to the protection personal data in force at any time, this being a priority objective for the Group. 

 As a result, and with privacy being the basis on which all processing carried out is configured, TOUS has taken the decision to implement the following principles: 

 Transparency in data processing is one of the priorities of TOUS, so whenever it is necessary to collect personal data we will duly inform you through the corresponding privacy policy, including the purposes of such processing, among other aspects. 

• The processing of those personal data that are strictly necessary to provide any services that you request. 
• Accessibility and proactivity, whenever possible, to make available to you simple measures that allow you to control your personal data. 
• The non-transfer to third parties of your personal data, except those suppliers providing a service to TOUS, or those about which TOUS has previously informed you and received your consent in this regard.
• The confidentiality of the personal data collected and processed by TOUS, guaranteeing the adoption of adequate security measures for their protection. 

TOUS collects your personal data in order, among others, to manage the commercial relationship, your requests and offer you services and products that may be of interest to you. Specifically, TOUS processes your personal data for the following purposes: 

1. Dealing with your queries, questions or requests made through the customer service or communication channels identified and contacting you to respond to them. 
2. Managing your registration in the TOUS database. 
3. Allowing you to make purchases through the TOUS website or in physical shops. 
4. Sending transactional notifications in relation to your purchase. 
5. Managing user participation in the TOUS loyalty programmes. 
6. Processing potential product reservation requests. 
7. Managing billing and for accounting purposes. 
8. Complying with the applicable legal requirements, both tax-related and those relating to the prevention of money laundering and terrorist funding. 
9. Processing guarantees, where applicable, for the products acquired in TOUS. 
10. Sending you marketing including offers and promotions that may be of interest to you, and other commercial information. 
11. Facilitating your participation in sweepstakes, contests, surveys, or other promotions. 
12. Obtaining information about your tastes and preferences from your purchasing history and wishlist. 
13. Sending information from the TOUS Group that may be considered of special interest for our stakeholders. 

If you are located in the United States, the Site may offer you, the option to send a communication to a friend. If so, we rely on you to only send to people that have given you permission to do so. The friend’s personal information you provide (e.g., name, e-mail address) will be used to facilitate the communication, but not used by us for any other marketing purpose unless we obtain consent from that person. Your contact information and message may be included in the communication. 

TOUS will only process the personal data that you have voluntarily disclosed to us or that you have provided to us through third parties that manage the payment gateways or that are involved during the purchasing processes (eg marketplaces). 

We share information about you as follows: 

• Service Providers. We share your information with our agents, vendors, and other service providers (collectively “Service Providers”) in connection with their work on our behalf. Service Providers assist us with services such as payment processing, data analytics, marketing and promotional services, Promotions, website hosting, and technical support. Service Providers are prohibited from using your information for any purpose other than to provide this assistance, although we may permit them to use aggregate information which does not identify you or de-identified data for other purposes.  

• Affiliates. We may share your information with our related entities including our parent and sister companies. For example, we may share your information with our affiliates for customer support, marketing, and technical operations.

• Business Partners. We may share your information with our business partners in connection with offering you co-branded services, selling or distributing our products, or engaging in joint marketing activities. For example, we may share information about you with a retailer for purposes of providing you with product support.

• Third Parties. We may share your information with third parties for purposes of facilitating your requests (such as when you choose to share information with a social network about your activities on the Site) and in connection with tailoring advertisements, measuring and improving our Site and advertising effectiveness, and enabling other enhancements.

• Merger or Acquisition. We may share your information in connection with, or during negotiations of, any proposed or actual merger, purchase, sale or any other type of acquisition or business combination of all or any portion of our assets, or transfer of all or a portion of our business to another business. 

• Security and Compelled Disclosure. We may share your information to comply with the law or other legal process, and where required, in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may also share your information to protect the rights, property, life, health, security and safety of us, the Service or any third party. 

• Consent. We may share your information for any other purpose disclosed to you and with your consent. 

Without limiting the foregoing, in our sole discretion, we may share aggregated information which does not identify you or de-identified information about you with third parties or affiliates for any purpose except as prohibited by applicable law. 

• Cookies and Pixels. Most browsers accept cookies by default. You can instruct your browser, by changing its settings, to decline or delete cookies. If you use multiple browsers on your device, you will need to instruct each browser separately. Your ability to limit cookies is subject to your browser settings and limitations.  

• Do Not Track. Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. Note, however, there is no industry consensus as to what site and app operators should do with regard to these signals. Accordingly, we do not monitor or take action with respect to “Do Not Track” signals or other mechanisms.  For more information on “Do Not Track,” visit http://www.allaboutdnt.com. 

Please be aware that if you disable or remove Tracking Technologies some parts of the Service may not function correctly.  

You can opt-out of your data being used by Google Analytics through cookies by visiting https://tools.google.com/dlpage/gaoptout and downloading the Google Analytics Opt-out Browser Add-on. 

Some of the third parties that collect information from or about you on the Site in order to provide more relevant advertising to you participate in the Digital Advertising Alliance (“DAA”) Self-Regulatory Program for Online Behavioral Advertising. This program offers a centralized location where users can make choices about the use of their information for online behavioral advertising. To learn more about the DAA and your opt-out options for their members, please visit (i) for website opt-out, http://www.aboutads.info/choices; and (ii) for mobile app opt-out, http://www.aboutads.info/appchoices. In addition, some of these third parties may be members of the Network Advertising Initiative ("NAI"). To learn more about the NAI and your opt-out options for their members, please visit http://www.networkadvertising.org/choices/. Please note that if you opt-out of online behavioral advertising using any of these methods, the opt-out will only apply to the specific browser or device from which you opt-out. Further, opting-out only means that the selected members should no longer deliver certain Interest-based Advertising to you, but does not mean you will no longer receive any targeted content and/or ads (e.g., from other ad networks). We are not responsible for effectiveness of, or compliance with, any third-parties’ opt-out options or programs or the accuracy of their statements regarding their programs.  

In this privacy notice, “personal information” has the same meaning as under the California Consumer Privacy Act (CCPA), California Civil Code Section 1798.83: information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include information that has been de-identified or aggregated. 

Personal Information We Collect and Share, and For What Purpose 

In the past 12 months, we have collected and shared personal information from visitors in the following circumstances when they interact with the Service, as described in detail in the above sections: 

• Information You Provide to Us 
• Information Collected Automatically 
• Sharing of Information 
• Tracking Technology Choices 

As described in detail above in Section 4, “Purposes of the processing,” we use your personal information for a variety of purposes to operate, assess activity on, and improve the performance of the Service. 

Except as described in detail above, we will not share with third parties information about you without your consent. 

Your Rights as a California Resident 

Under California law, users who are California residents have specific rights regarding their personal information. These rights are subject to certain exceptions described below. When required, we will respond to most requests within 45 days unless it is reasonably necessary to extend the response time. 

Right to Disclosure of Information 

You have the right to request that we disclose certain information regarding our practices with respect to personal information. If you submit a valid and verifiable request and we confirm your identity and/or authority to make the request, we will disclose to you any of the following at your direction: 

• The categories of personal information we have collected about you in the last 12 months. 
• The categories of sources for the personal information we have collected about you in the last 12 months. 
• Our business or commercial purpose for collecting that personal information. 
• The categories of third parties with whom we share that personal information. 
• The specific pieces of personal information we collected about you. 
• If we disclosed your personal information to a third party for a business purpose, a list of the personal information types that each category of recipient received. 

Right to Delete Personal Information 

You have the right to request that we delete any of your personal information collected from you and retained, subject to certain exceptions. Upon receiving a verified request to delete your personal information, we will do so unless otherwise authorized by law. 

How to Exercise these Rights 

You may submit a verifiable consumer request to us for disclosure or deletion of personal information by writing here: dataprotection@tous.com Alternatively, you may call us at Customer Service telephone number. 

We will respond to verifiable requests for disclosure or deletion of personal information free of charge, within 10 days of receipt. 

In order to protect your privacy and the security of your information, we verify consumer requests by [description of how a business will verify consumer requests to know and to delete.]  

Any additional information you provide will be used only to verify your identity and not for any other purpose.  

You may designate an authorized agent to make requests on your behalf. You must provide an authorized agent written permission to submit a request on your behalf, and we may require that you verify your identity directly with us. Alternatively, an authorized agent that has been provided power of attorney under Probate Code sections 4000-4465 may submit a request on your behalf. 

Right to Opt Out of Sales of Your Personal Information 

You have a right to opt-out of the sale of your personal information. You may, at any time, direct businesses that sell your personal information to third parties not to sell your personal information. 

We do not sell your personal information. Therefore, we do not provide any mechanism for you to exercise the right to opt out.  

Right to Non-Discrimination 

You have the right not to be discriminated against for the exercise of your California privacy rights described above. 

California’s “Shine the Light” law permits customers in California to request certain details about how certain types of their information are shared with third parties and, in some cases, affiliates, for those third parties’ and affiliates’ own direct marketing purposes. Under the law, a business should either provide California customers certain information upon request or permit California customers to opt in to, or opt out of, this type of sharing. 

We may share personal information as defined by California’s “Shine the Light” law with third parties and/or affiliates for such third parties’ and affiliates’ own direct marketing purposes. If you are a California resident and wish to obtain information about our compliance with this law, please contact us as set forth in the section entitled “Contact with TOUS” below. Requests must include “California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are not required to respond to requests made by means other than through the provided e-mail address or mail address. 

The Site is intended for a general audience and not directed to children under thirteen (13) years of age. We do not knowingly collect personal information as defined by the U.S. Children’s Privacy Protection Act (“COPPA”) in a manner that is not permitted by COPPA. If you are a parent or guardian and believe we have collected such information in a manner not permitted by COPPA, please contact us as set forth in the section entitled “Contact with TOUS” below, and we will remove such data to the extent required by COPPA. 

TOUS has implemented security measures that it deems appropriate and reasonable designed to avoid the loss, misuse, alteration, unauthorised access and theft of personal data. TOUS periodically reviews its security measures to help ensure that they are up-to-date. 

Nevertheless, transmission via the internet is not completely secure and we cannot guarantee the security of your information. 

Social networks are part of the daily life of many Internet users, and for this purpose TOUS has created different profiles in them.  

All users have the opportunity to join the pages or groups that TOUS has in different social networks. However, it must be taken into account that, unless we request your information directly (for example, through marketing actions, competitions, promotions, or any other valid form), your data will be governed by the privacy policies and practices of the corresponding social network. Therefore, it is recommended that you carefully read its conditions of use and privacy policies and ensure that you configure your preferences regarding the processing of data. 

As a general rule, TOUS tries to keep your personal data within the European Union (EU) or the European Economic Area (EEA). However, on an exceptional basis, TOUS may need to provide them to other companies in the Group or to service providers located in other countries, either by necessity to provide the requested service, or to be able to offer you the service with the highest quality standards.  

When the data need to be transferred to a third party in the context of a commercial relationship or corporate transaction (including mergers and acquisitions, among others), the companies that could receive your information are the suppliers, subsidiaries or franchisees, or, where appropriate, potential purchasers and advisers (legal, accounting or financial, among others) involved. TOUS will only communicate your personal data to those third parties to the extent that this communication is necessary for the execution of the services or to evaluate or complete the relationship or transaction. 

In these situations, TOUS applies necessary measures and controls designed to protect the processing of your personal data, such as: 

1. Communication to countries that, despite not being part of the EU or the EEA, have been considered by the European Commission as countries that have data protection regulations that guarantee a level of security similar to that applicable in Europe. 
2. Existence of contractual clauses of the type approved by the European Commission: to ensure that companies in third countries that are not part of the EU or the EEA comply with a similar level of protection. TOUS will sign these agreements as long as there is no equivalent alternative that guarantees the protection of your personal data. 
3. Definition of binding corporate rules (BCRs) approved by the companies, which are reviewed and approved by control authorities, with the aim of ensuring that the company, in any country, to whom we provide your data complies with an adequate level of protection. 
4. In certain cases, the company to which TOUS provides the data may have Data Protection Certificates that guarantee the correct use of your data in accordance with current regulations. 

You can request information about these foregoing from the addresses indicated below. 

If you have any questions or concerns about the processing of your personal data, please contact us through: 

(i) Email that must be sent to the address dataprotection@tous.com 

(ii) Web contact forms 

(ii) Post addressed to Carretera de Vic, El Guix 3, 08243 Manresa (Spain) 

(iv) DPO contact details: dpo@tous.com