Privacy Policy

1. Introduction

2. Scope of application of the Policy

3. Personal Data We Collect

TOUS will only collect those personal data that you wish to disclose voluntarily and, in accordance with current regulations on data protection and on information society services and electronic commerce, will inform you that such personal data provided at the time of registration, or any others provided to TOUS for access to some of the services on the website, will be incorporated into files owned by this company.

Information You Provide to Us

The data that TOUS may request from you are the following:

Identification data. Information concerning an individual that allows them to be differentiated from others in a group, such as: name; handwritten and electronic signature; tax identification number; place and date of birth; nationality; photograph; age.
Contact data. Information that allows contact with their owner to be maintained or initiated, such as: address; email address; landline; mobile phone.
Data on physical characteristics. Information about an individual relating to their physiognomy, anatomy, features or specific characteristics, such as: measures necessary for the manufacture of the products.
Asset or financial data. Information concerning an individual relating to their assets, rights, liens or obligations that can be valued economically, such as: bank accounts, credit card number, security number.

The processing of your personal data may sometimes be necessary to comply with certain legal obligations, or in relation to any contractual relationship that TOUS may have with you.

In some cases, where appropriate or required by law, TOUS will request your consent to process your personal data.

Information Collected Automatically

We automatically collect information about your device and how your device interacts with our Site. We may use Service Providers (defined below) to collect this information. Some examples of information we collect include the following:

Service Use Data. We collect data about the features you use, the pages you visit, the e-mails and advertisements you view, the products you purchase, the time of day you browse, your referring and exiting pages, and other similar information.
Device Connectivity and Configuration Data. We collect data about the type of device or browser you use, your device’s operating software, your internet service provider, your device’s regional and language settings, and other similar information. This data also includes IP address, MAC address, device advertising Id (e.g., IDFA or AAID), and other device identifiers.
Location Data. We collect data about your device’s location, which can be precise (e.g., latitude/longitude data) or imprecise (e.g., location derived from an IP address or data that indicates a city or postal code level).

We use various current – and later – developed technologies to collect this information (“Tracking Technologies”), including the following:

Log Files. A log file is a file that records events that occur in connection with your use of the Service, such as your service use data.
A cookie is a small data file stored on your device that acts as a unique tag to identify your browser. We use two types of cookies: session cookies and persistent cookies. Session cookies make it easier for you to navigate the Service and expire when you close your browser. Persistent cookies help with personalizing your experience, remembering your preferences, and supporting security features. Additionally, persistent cookies allow us to bring you advertising both on and off the Site. Persistent cookies may remain on your device for extended periods of time, and generally may be controlled through your browser settings. For more detailed information regarding our use of cookies, please review our Cookie Policy.
A pixel (also known as a web beacon) is code embedded in a website, video, e-mail, or advertisements that sends information about your use to a server. There are various types of pixels, including image pixels (which are small graphic images) and JavaScript pixels (which contain JavaScript code). When you access a website, video, e-mail, or advertisement that contains a pixel, the pixel may permit us or a third party to drop or read cookies on your browser. Pixels are used in combination with cookies to track activity by a particular browser on a particular device. We may incorporate pixels from third parties that allow us track our conversions, bring you advertising both on and off the Site, and provide you with additional functionality, such as the ability to connect our Site with your social media account.
Device Fingerprinting. Device fingerprinting is the process of analyzing and combining sets of information elements from your device’s browser, such as JavaScript objects and installed fonts, in order to create a “fingerprint” of your device and uniquely identify your device and apps.
Location-Identifying Technologies. GPS, WiFi, Bluetooth, and other location-aware technologies may be used to collect precise location data when you enable location-based services through your device. Location data may be used for purposes such as verifying your device’s location and delivering or restricting relevant content and advertising based on that location.

Some information about your use of the Site and certain third party services may be collected using Tracking Technologies across time and services and used by us and third parties for purposes such as to associate different devices you use, and deliver relevant ads and/or other content to you on the Site and certain third party services.

4. Purposes of the processing

TOUS collects your personal data in order to manage your requests and offer you services and products that may be of interest to you. Specifically, TOUS processes your personal data for the following purposes:

Dealing with your queries, questions or requests made through the customer service or communication channels identified on each website and contacting you to respond to them.
Improving the TOUS websites, as well as their services and products, in order to offer a better service and content.
Offering access to restricted spaces on the TOUS website (registration may require acceptance of a specific privacy policy).
Managing your registration on the TOUS website.
Allowing you to make purchases through the TOUS website.
Sending transactional notifications in relation to your purchase.
Conducting studies for statistical purposes.
Having your data updated.
Processing reservation requests.
Managing billing and for accounting purposes.
Fulfilling tax obligations.
Processing guarantees, where applicable, for the products acquired in TOUS.
Complying with applicable laws.
Sending you marketing including offers and promotions that may be of interest to you, and other commercial information.
Facilitating your participation in sweepstakes, contests, surveys, or other promotions.
Collecting, storing and processing your CV, as well as the personal data included in it, if you apply for a job through our website.
Sending notifications by email and/or telephone and/or post as part of the TOUS staff selection processes.
Evaluating your abilities to perform a job by carrying out specific tests that will be notified in due course.

If you are located in the United States, the Site may offer you, the option to send a communication to a friend. If so, we rely on you to only send to people that have given you permission to do so. The friend’s personal information you provide (e.g., name, e-mail address) will be used to facilitate the communication, but not used by us for any other marketing purpose unless we obtain consent from that person. Your contact information and message may be included in the communication.

5. Sending commercial notifications

6. Automated decisions and the creation of profiles; analytics and interest-based advertising

TOUS will obtain your express consent for the processing of your personal data in relation to the possible adoption of automated decisions and/or the creation of profiles.

For the provision of some services, TOUS may process your personal data using automated means. This means that certain decisions are taken automatically, without human intervention. For example, in the event that you have purchased products in your "Shopping Bag", you will receive specific notifications informing you that your order has left the TOUS facilities.

TOUS can also process your data to create profiles, with the purpose of predicting your behaviour on the website. As a result of that, products that may be of interest to you will be displayed on the homepage, based on the preferences you have shown through your browsing or information obtained through cookies and other Tracking Technologies described above, as well as if you are part of the MY TOUS loyalty programme.

You can review the applicable Cookies Policy at the following link https://www.tous.com/es-es/politica-cookies. Likewise, you can contact TOUS for any questions or queries related to the processing of your personal data through the following address: dataprotection@tous.com.

Our Site also contains Tracking Technologies owned and operated by third parties. For example, we use Tracking Technologies from third party analytics provides, such as Google Analytics, to help us analyze your use of the Site, compile statistic reports on the Site’s activity, and provide us with other services relating to Site activity and internet usage. We also work with ad serving services, advertisers, and other third parties to serve advertisements on the Site and/or on third party services. These third parties may use Tracking Technologies on our Site and third party services (including in e-mails and advertisements) to track your activities across time and services for purposes of associating the different devices you use, and delivering relevant ads and/or other content to you on the Site and third party services or third party devices after you have left the Site (“Interest-based Advertising”).

We serve ads on and through third party services, such as Facebook and Google, that are targeted to reach people (or people similar to people) who have visited our Site or are identified in one or more of our databases (“Matched Ads”). This is done by us uploading a customer list to the third party service or incorporating a pixel from the third party service on our Site, and the third party service matching common factors between our data and their data. To opt-out of receiving Matched Ads, please contact the applicable third party service. If we use Facebook Custom Audiences to serve Matched Ads on Facebook services, you should be able to hover over the box in the right corner of such Facebook ads and find out how to opt-out. We are not responsible for such third party service’s failure to comply with your opt-out instructions.

7. Sharing of Information

We share information about you as follows:

Service Providers. We share your information with our agents, vendors, and other service providers (collectively “Service Providers”) in connection with their work on our behalf. Service Providers assist us with services such as payment processing, data analytics, marketing, and promotional services, Promotions, website hosting, and technical support. Service Providers are prohibited from using your information for any purpose other than to provide this assistance, although we may permit them to use aggregate information that does not identify you or de-identified data for other purposes.
We may share your information with our related entities including our parent and sister companies. For example, we may share your information with our affiliates for customer support, marketing, and technical operations.
Business Partners. We may share your information with our business partners in connection with offering you co-branded services, selling or distributing our products, or engaging in joint marketing activities. For example, we may share information about you with a retailer for purposes of providing you with product support.
Third Parties. We may share your information with third parties for purposes of facilitating your requests (such as when you choose to share information with a social network about your activities on the Site) and in connection with tailoring advertisements, measuring and improving our Site and advertising effectiveness, and enabling other enhancements.
Merger or Acquisition. We may share your information in connection with or during negotiations of, any proposed or actual merger, purchase, sale, or any other type of acquisition or business combination of all or any portion of our assets, or transfer of all or a portion of our business to another business.
Security and Compelled Disclosure. We may share your information to comply with the law or other legal process, and where required, in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may also share your information to protect the rights, property, life, health, security, and safety of us, the Service, or any third party.
We may share your information for any other purpose disclosed to you and with your consent.

Without limiting the foregoing, in our sole discretion, we may share aggregated information that does not identify you or de-identified information about you with third parties or affiliates for any purpose except as prohibited by applicable law.

8. Duration of the processing and data retention period

9. Exercising of rights, and claims with the AEPD (Spanish Data Protection Agency)

As a result of the processing of your personal data by TOUS, the current legislation grants you a series of rights. TOUS offers a brief explanation of each right in order to facilitate your exercising of them:

Right to access: You will have the right to know what personal data are being processed by TOUS, as well as the purposes of this processing.
Right to rectification: Your data will always be yours, and as such you can request their rectification at any time if those that appear in the TOUS records are erroneous.
Right to be forgotten: You may at any time request that your personal data be erased from the TOUS files. However, and as previously indicated, you must take into account that in certain circumstances compliance with the current legislation may prevent the effective exercising of this right.
Right to object: You can object to the processing of your personal data in relation to any of the purposes for which we process your data, in accordance with the privacy policies applicable in each case.
Right of restriction of the processing. You can request the restriction of the processing in the following cases:

(a) When you consider that the data that TOUS retains about you is not correct or accurate;

(b) When, even though you consider that TOUS is not processing your data legitimately, you prefer the restriction of their processing to their elimination;

(c) When the data that TOUS retains are no longer necessary in accordance with the purpose for which they were collected, but you need TOUS to retain them to lodge legal claims;

(d) When, having exercised the right to object to any processing, a response from TOUS is being awaited.

6. Right to the portability of your data: Whenever technically possible and reasonable, you will be entitled to request that the personal data you have provided directly be communicated to another data controller. If this is not possible, TOUS will directly provide your data to that other data controller, but if it is not they will be provided to you in a standard format.

Provided that TOUS is processing your personal data based on your express consent, you can revoke this at any time without further consequences for you beyond, depending on the right exercised, not being able to provide you certain services.

The exercising of the rights held may be carried out by contacting TOUS through any of the following means, along with a copy of your DNI or equivalent identification document:

(i) By email, sent to the following address: dataprotection@tous.com

(ii) By post, addressed to Carretera de Vic, El Guix 3, 08243 Manresa (Spain)

In addition, if you consider it necessary you can contact our TOUS data protection officer (DPO) through the following email address dpo@tous.com.

If you do not want to exercise a specific right but want to ask a question or make a suggestion in relation to the processing of your personal data, you can also use the addresses provided for the exercising of rights.

Please note that in any case, you may lodge a claim with the competent data protection authority if you consider that TOUS has not processed your data in a lawful manner or it has not correctly responded to your requests or rights. In Spain, this competent authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos).

10. Tracking Technology Choices

As a result of the processing of your personal data by TOUS, the current legislation grants you a series of rights. TOUS offers a brief explanation of each right in order to facilitate your exercising of them:

Right to access: You will have the right to find out what personal data are being processed by TOUS, as well as the purposes of such processing. You may also request a copy of your personal data being processed.
Right to rectification: You may request their rectification at any time if those that appear in the TOUS records are erroneous.
Right to be forgotten: You may at any time request that your personal data be erased from the TOUS files. However, and as previously indicated, you must take into account that in certain circumstances compliance with the current legislation may prevent the effective exercising of this right.
Right to object: You can object to the processing of your personal data in relation to any of the purposes for which we process your data, in accordance with the privacy policies applicable in each case.
Right of restriction of the processing. You can request the restriction of the processing in the following cases:

When you consider that the data that TOUS retains about you are not correct or accurate;
When, even though you consider that TOUS is not processing your data legitimately, you prefer the restriction of their processing to their elimination;
When the data that TOUS retains are no longer necessary in accordance with the purpose for which they were collected, but you need TOUS to retain them to lodge legal claims;
When, having exercised the right to object to any processing, a response from TOUS is being awaited.

Right to the portability of your data: Whenever technically possible and reasonable, you will be entitled to request that the personal data you have provided directly be communicated to another data controller. If this is possible, TOUS will directly provide your data to that other data controller, but if it is not, they will be provided to you in a standard format.

Provided that TOUS is processing your personal data based on your express consent, you can revoke this at any time without further consequences for you beyond, depending on the right exercised, not being able to provide you certain services.

The exercising of your rights may be carried out by contacting TOUS through any of the following means, accompanying this with, to be precise, a copy of your DNI or equivalent identification document:

(i) By email that should be sent to the following address:dataprotection@tous.com

(ii) By post addressed to Carretera de Vic, El Guix 3, 08243 Manresa (Spain).

In addition, if you consider it necessary, you can contact our TOUS data protection officer (DPO) through the following email address dpo@tous.com.

If you do not want to exercise a specific right but want to ask a question or make a suggestion in relation to the processing of your personal data, you can also use the addresses provided for the exercising of rights in relation to data protection matters.

If you decide to exercise your rights, our team may provide you with information, on request, about: (i) the information that you must provide as evidence of your identity or the legal status of your representative and the information or documentation that you must provide with the request; (ii) the time it will take for TOUS to respond to your request; (iii) how you should submit your request, including the form, if one is available; and (iv) the method or means of reproduction that TOUS will use to make the requested information available to you (which will generally be uncertified copies or electronic documents).

Please note that in any case, you may lodge a claim with the competent data protection authority if you consider that TOUS has not processed your data in a lawful manner or it has not correctly responded to your requests or rights. In Spain, this competent authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD).

11. Your California Privacy Rights.

Notice at Collection

In this privacy notice, “personal information” has the same meaning as under the California Consumer Privacy Act (CCPA), California Civil Code Section 1798.83: information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include information that has been de-identified or aggregated.

Personal Information We Collect and Share, and For What Purpose

In the past 12 months, we have collected and shared personal information from visitors in the following circumstances when they interact with the Service, as described in detail in the above sections:

Information You Provide to Us
Information Collected Automatically
Sharing of Information
Tracking Technology Choices

As described in detail above in Section 4, “Purposes of the processing,” we use your personal information for a variety of purposes to operate, assess activity on, and improve the performance of the Service.

Except as described in detail above, we will not share with third parties information about you without your consent.

Your Rights as a California Resident

Under California law, users who are California residents have specific rights regarding their personal information. These rights are subject to certain exceptions described below. When required, we will respond to most requests within 45 days unless it is reasonably necessary to extend the response time.

Right to Disclosure of Information

You have the right to request that we disclose certain information regarding our practices with respect to personal information. If you submit a valid and verifiable request and we confirm your identity and/or authority to make the request, we will disclose to you any of the following at your direction:

The categories of personal information we have collected about you in the last 12 months.
The categories of sources for the personal information we have collected about you in the last 12 months.
Our business or commercial purpose for collecting that personal information.
The categories of third parties with whom we share that personal information.
The specific pieces of personal information we collected about you.
If we disclosed your personal information to a third party for a business purpose, a list of the personal information types that each category of recipient received.

Right to Delete Personal Information

You have the right to request that we delete any of your personal information collected from you and retained, subject to certain exceptions. Upon receiving a verified request to delete your personal information, we will do so unless otherwise authorized by law.

How to Exercise these Rights

You may submit a verifiable consumer request to us for disclosure or deletion of personal information by clicking here [INSERT HYPERLINK – dataprotection@tous.com?]

Alternatively, you may call us at [INSERT TOLL-FREE TELEPHONE NUMBER]

We will respond to verifiable requests for disclosure or deletion of personal information free of charge, within 10 days of receipt.

In order to protect your privacy and the security of your information, we verify consumer requests by [description of how a business will verify consumer requests to know and to delete.]

Any additional information you provide will be used only to verify your identity and not for any other purpose.

You may designate an authorized agent to make requests on your behalf. You must provide an authorized agent written permission to submit a request on your behalf, and we may require that you verify your identity directly with us. Alternatively, an authorized agent that has been provided power of attorney under Probate Code sections 4000-4465 may submit a request on your behalf.

Right to Opt Out of Sales of Your Personal Information

You have a right to opt-out of the sale of your personal information. You may, at any time, direct businesses that sell your personal information to third parties not to sell your personal information.

We do not sell your personal information. Therefore, we do not provide any mechanism for you to exercise the right to opt out.

Right to Non-Discrimination

You have the right not to be discriminated against for the exercise of your California privacy rights described above.

California’s “Shine the Light” law permits customers in California to request certain details about how certain types of their information are shared with third parties and, in some cases, affiliates, for those third parties’ and affiliates’ own direct marketing purposes. Under the law, a business should either provide California customers certain information upon request or permit California customers to opt in to, or opt out of, this type of sharing.

We may share personal information as defined by California’s “Shine the Light” law with third parties and/or affiliates for such third parties’ and affiliates’ own direct marketing purposes. If you are a California resident and wish to obtain information about our compliance with this law, please contact us as set forth in the section entitled “Contact with TOUS” below. Requests must include “California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are not required to respond to requests made by means other than through the provided e-mail address or mail address.

WEB POLICIES

General Privacy Policy

1. Introduction

2. Scope of application of the Policy

3. Personal Data We Collect

4. Purposes of the processing

5. Sending commercial notifications

6. Automated decisions and the creation of profiles; analytics and interest-based advertising

7. Sharing of Information

8. Duration of the processing and data retention period

9. Exercising of rights, and claims with the AEPD (Spanish Data Protection Agency)

10. Tracking Technology Choices

11. Your California Privacy Rights.

12. Children

13. Confidentiality and Security in the processing of data

14. Social networks

15. International Transfers

16. Contact with TOUS