Website policies

Privacy policy

1. Introduction

2. Scope of application of the Policy

3. Commitment to privacy

4. Purposes of the processing

5. Source of the data

6. Legitimation of the processing of your personal data

7. Sending of promotional messages.

8. Automated decision-making and profiling

9. Duration of processing and data storage period

10. Exercise of rights and claims before the supervisory authorities

11. Adherence to the Self-Monitoring Code of Conduct

12. Confidentiality and Security in data processing

13. Social networks

14. Recipients

Your personal data will not be transferred to any third party, except to government agencies and authorities in those cases where a legal rule establishes it; as well as to those providers whose intervention is necessary for the provision of the services.

In particular, your personal data will be transferred to Global-e, which is the entity responsible for managing the purchase and delivery process of your order. For more information on how this partner processes the data, please refer to its Privacy Policy.

15. International transfers

As a general rule, TOUS attempts to keep your personal data within the European Union (EU) or the European Economic Area (EEA). Nonetheless, TOUS may sometimes exceptionally need to provide them to other companies in the Group or to service providers located in other countries, either as a result of the need to provide the requested service or to be able to provide the service with the highest quality standards, or to assess or complete a business relationship or corporate transaction when necessary.

In these situations, TOUS guarantees the application of all necessary measures and controls to guarantee and protect the processing of your personal data, such as:

  1. Transfer to countries that, despite not being part of the EU or EEA, have been considered by the European Commission as having data protection regulations that guarantee a level of security similar to that applicable in Europe.
  2. Existence of standard contractual clauses approved by the European Commission: to ensure that third-counry companies that are not part of the EU or EEA provide a similar level of protection. TOUS will sign these agreements as long as there is no equivalent alternative that guarantees the protection of its personal data.
  3. Definition of binding corporate rules (BCRs) that are approved by the companies and are reviewed and approved by the control authorities in order to ensure that the company to which we provide your data provides, in any country, an adequate level of protection.
  4. In certain cases, the company to which TOUS provides the data may have data protection certifications that guarantee the correct use of your data, in accordance with current regulations.

You may request information about said guarantees from the addresses listed below.  

16. Contact TOUS

If you have any questions or concerns about the processing of your personal data, please contact us through:

(i) Email that must be sent to the following address: dataprotection@tous.com

(ii) Web contact forms

(ii) By mail addressed to Carretera de Vic, El Guix 3, 08243 Manresa (Spain)

(iv) DPO contact information: dpo@tous.com