PRIVACY POLICY
In accordance with the obligations of the General Data Protection Regulation (EU) 2016/679, of the European Parliament and of the Council, of 27 April 2016, together with those included in Organic Law 3/2018, of 5 December 2018, on the Protection of Personal Data and Guarantee of Digital Rights, TOMASA S.L., places at your disposal through this website cordera.es this Privacy Policy with the aim of informing you of the processing to which your personal data are subject, the measures aimed at protecting your privacy and the information provided by you.
In the event of any modification of the Privacy Policy, TOMASA will communicate it through this website or by any other means so that you may be aware of the new Privacy conditions.
DATA CONTROLLER
Data controller: TOMASA S.L. (hereinafter, "the Data Controller", "the Controller", or "TOMASA").
Representative: Mónica Cordera
Tax Identification Number (NIF): B44858439
Registered office: Calle Picavia, 5, 2oD, 15004, A Coruña
E-mail address: info@curatedbytomasa.com
Business activity: Retail craft & fashion sale
PERSONAL DATA PROCESSED
TOMASA will process the user's personal data in order to render the contracted services. In no event will TOMASA process special categories of personal data. Likewise, in the event that the User provides third party personal data, TOMASA declares having obtained their consent and undertakes to inform the third party of the content of this Privacy Policy. TOMASA will not assume any type of responsibility in this respect.
However, TOMASA may carry out periodic checks to verify this fact, adopting the corresponding diligence measures in accordance with data protection regulations.
TOMASA will process the following data categories:
1. Identification data: name, surname and national identity card number or equivalent document for a natural person or of the representative of the legal entity.
2. Contact data: e-mail address, telephone number, identification data (as mentioned above), postal address, etc.
3. Economic and financial data: bank details (credit card, bank account number) or any other data necessary for invoicing purposes.
4. Details of the corresponding service.
5. Data provided through contact channels provided on the website (via telephone or e-mail).
6. Browsing data.
PURPOSES AND LEGAL BASIS FOR PROCESSING
TOMASA will collect and process the User's personal data in order to manage their relationship. In particular, the main purposes identified are the following:
- Management of the User 's registration platform.
- Management and contracting of the services offered by the Data Controller, including the placing and management of orders on the website.
- Channeling requests for information, suggestions, and complaints that the User may file against TOMASA.
- Communicating with TOMASA's users or potential users, whether through the website, social media or by any other means. This communication includes the sending of communications on advertising, emails from the contact form, news and novelties of special interest and relevance for information purposes, or TOMASA's newsletter.
- Management of the labor relationship, with regards to employees.
- Management of the commercial relationship maintained with suppliers.
- Management of personnel selection.
- Computer maintenance of the website and associated services.
- For marketing and advertising purposes.
TOMASA collects the User's personal data by different means, but always informing at the time of collection by means of informative clauses about the controller of the processing, the purpose and legal basis of the processing, the recipients of the data and the period of conservation of your personal data, as well as the way to exercise your rights in terms of data protection.
In general, the personal data that TOMASA processes is limited to identification data (name and surname, date of birth, address, identity document, telephone number and e- mail address) for the management of the contracted services and the management of invoicing.
In case of personnel management and selection, we collect academic and professional data in order to meet the obligations arising from the maintenance of the employment relationship or, where appropriate, to become part of our staff.
Through its website, TOMASA collects personal data related to your browsing through the use of cookies. To find out clearly and precisely what cookies are used, its purpose and how they can be configured o disabled, please consult the Cookies Policy.
TOMASA's processing is carried out on the basis of:
1. Data provided to contract a service:
(a) Consent to register as a user of the website and create a personal account.
2. Data provided for the management and contracting of the services offered by TOMASA, including the placing and management of orders on the website:
(a) Consent to request the contract of the services.
(b) Execution of a contract to manage the contracting of the service or sale contracted with TOMASA.
3. Data provided to channel requests for information, suggestions and complaints by the User:
(a) Consent of users or customers who contact TOMASA to request information, suggestions, or complaints.
4. Data provided for the IT maintenance of the website and associated services, to analyze the use and quality of the services and their potential improvement:
(a) TOMASA's legitimate interest, to ensure the proper functioning of its main means of commerce, as well as to guarantee the best possible service to its users and customers.
5. Data provided for marketing and advertising purposes:
(a) Consent that users give, for example, through cookies, when they save an item of clothing in favorites, by subscribing to the newsletter, etc.
(b) Legitimate interest of TOMASA, as this information is useful for the creation of content, as well as to improve the user's experience, providing the information that best suits their preferences.
All consents obtained for the aforementioned purposes are independent and the User may revoke only one of them without affecting the others.
RECIPIENTS
TOMASA does not share personal data of its clients or users of the website and social networks, except for those cases in which it is strictly necessary to comply with a legal obligation or for the execution of the service contract with the users.
In order to provide the requested service, third parties acting as suppliers of TOMASA S.L. may have access to personal information in order to carry out the service for which they have been contracted, acting as data processors (legal and accounting assistance, auditors, destruction of documents/information and information technology service providers, for example, data hosting and email service). It should be emphasized that the above shall not be considered as a transfer of personal data. These providers will access your personal data in accordance with the instructions of TOMASA and will not use it for any other purpose, keeping your personal information strictly confidential.TOMASAundertakes to select suppliers who comply with the current regulatory framework for the protection of personal data.
The competent authorities and bodies, to the extent necessary to comply with legal obligations, will also be considered recipients for these purposes.
In the development and fulfillment of the contracted services, international data transfers may occur when, in order to carry out the above communications, personal data must be transferred to any of these recipients that are not within the European Economic Area and, therefore, do not comply with European regulations on data protection. In these cases, TOMASA will use the Standard Contractual Clauses adapted by the European Commission as a guarantee for transfers made to countries that do not have a European Commission adequacy decision. However, third parties that TOMASA shares certain personal data with must have previously accredited the adoption of adequate technical and organizational measures for the correct protection of such data.
STORAGE PERIOD
TOMASA will only keep your personal data for the period of time necessary to fulfil the purpose for which they were collected, to comply with legal obligations and to attend to possible responsibilities that may arise from the fulfilment of the purpose for which the data were collected.
If TOMASA collects your data in order to contact you as a User of its services or to respond to any request for information made by you, your personal data will be kept for a maximum period of 2 years. Likewise, they will also be deleted whenever the User requests so.
In the specific cases of "registration form" to request the registration of the User as a purchaser of TOMASA, "contact form" and other consultations, and "newsletter form", the personal data will be kept until the User requests the deletion of his or her data.
In any case, and as a general rule, TOMASA will keep your personal data for as long as there is a contractual relationship that links it to you or you do not exercise your right to suppression and/or limitation of processing, in which case, the information will be blocked without being used beyond its conservation, while it may be necessary for the exercise or defense of claims or any type of responsibility may arise that needs to be attended.
RIGHTS OF INTERESTED PARTIES
Users of the website may exercise the following rights before TOMASA, insofar as they are applicable: the right to access by the data subject, the right to rectification, the right to erasure or the right to be forgotten, the right to restriction of processing, the right to data portability, the right not to be subject to an automated individual decision- making, and the right to object.
In accordance with current legislation, these rights must always be free of charge, except in the case of manifestly unfounded or excessive requests. In this case, TOMASA may charge a fee proportional to the administrative costs incurred or refuse to act. Furthermore, they must be exercised directly by the interested party or through their legal representative or volunteer.
TOMASA must reply to your request within one month, although, depending on the complexity and number of requests, this period may be extended by up to two months. In the event of not acting on your request, TOMASA will inform you, within one month at the latest, of the reasons for its failure to act and the possibility of lodging a complaint with the Spanish Data Protection Agency.
You must be provided with all the necessary information on the means of exercising these rights, which must be accessible. You may not be denied the exercise of the right simply because you choose a different means. If the request is made by electronic means, the information should be provided by electronic means where possible, unless you ask us to do otherwise.
Users may exercise these rights by duly identifying themselves with their ID card and by sending a letter or e-mail to the addresses indicated in the "Data controllers" section. The request must be signed, and the subject line must indicate "Exercise of GDPR Rights".
In case you wanted to exercise any of these rights, you may use the following application forms:
(a) Right of access by the data subject
(b) Right to rectification
(c) Right to erasure ("right to be forgotten")
(d) Right to restriction of processing
(e) Right to data portability
(f) Right to object
(g) Right not to be subject to an automated individual decision-making
RESPONSIBILITY OF THE USER
By providing their data to TOMASA through electronic channels, the User guarantees to be over 18 years of age and that the data provided to TOMASA are true, exact, complete and up to date. To this effect, the User takes responsibility for the veracity of the data communicated and for keeping this information suitably updated so that it corresponds to reality, taking responsibility for any false or inaccurate provided data, as well as for any damages, direct or indirect, that may arise.
DATA SECURITY
TOMASA informs you that the necessary technical and organizational security measures have been implemented to guarantee the security of your personal data and to avoid its alteration, loss and unauthorized processing and/or access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed, whether these arise from human action or from the physical or natural environment. All in accordance with the provisions of the GDPR.
Likewise, TOMASA has established additional measures in order to strengthen the confidentiality and integrity of the information in its organization and to continuously maintain the supervision, control and evaluation of the processes to ensure respect for data privacy.
MODIFICATIONS TO THIS PRIVACY POLICY
TOMASA reserves the right to modify, at any time, the present Policy in order to adapt it to new legislation or jurisprudence, as well as to industry practices. In such cases, the Data Controller will announce on this page the changes introduced with reasonable notice of their implementation. Likewise, TOMASA recommends that this Privacy Policy be reviewed periodically in order to be aware of the latest version of the same.
1 COOKIES POLICY
TOMASA uses first-party and third-party cookies to offer the best experience on its website. If you accept or continue browsing, you accept their use. You can configure cookies or find more information about what kind of cookies are used, as well as disable them in the settings.
1.1 PRIVACY SUMMARY
In accordance with the provisions of Article 22.2 of Law 34/2002, July the 11th, on Information Society Services and Electronic Commerce, this website informs you about its Cookies policy.
Cookies are files with small pieces of data that are downloaded to the User ́s computer when accessing certain websites. Among their main functions, they allow storing and retrieving information about the User ́s browsing habits and, in some cases, they can be used to recognize the User himself.
1.2 WHAT KIND OF COOKIES DOES THIS WEBSITE USE
This website uses the following types of cookies:
(a) Necessary cookies: necessary cookies will only save the user ́s cookie settings preferences if they are activated, i.e., the user will have to activate or deactivate the cookies before every access to the website.
(b) Customization cookies: customization cookies store user preferences, such as language selection.
(c) Analysis cookies: analysis cookies allow us to quantify the number of users and perform the measurement and statistical analysis of the use made by users of the services of TOMASA.
(d) Technical cookies: technical cookies allow the User to browse through restricted areas and the use of their different functions, for instance, carrying out the purchase of a product.
(e) Advertising cookies: advertising cookies allow efficient advertisement on the website. In order to do so, they adapt the content of the advertisement to the content of the service and to the use made of the website. That includes the analysis of his/her habits while browsing on the Internet and allows to show advertisements related to them. Advertising cookies may be run by TOMASA or by a third-party.
2 LEGAL WARNING
2.1 OWNERSHIP OF THE WEBSITE
The ownership of this website belongs to TOMASA S.L. (hereinafter, TOMASA), with Tax Identification Number B32426157, registered office Calle Picavia 5, 2D, 15004, La Coruña, and telephone number +34 881 129 609, and constituted by the website associated with the domain curatedbytomasa.com.
2.2 INTELLECTUAL AND INDUSTRIAL PROPERTY
The design of the portal and its source codes, logos, brands, and other distinctive signs on this website belong to TOMASA and are protected by the corresponding intellectual and industrial property rights.
Likewise, the reproduction, distribution, public communication, and transformation, in whole or in part, of the content of this website as well as its design are prohibited without TOMASA's prior and express authorization.
2.3 RESPONSIBILITY FOR THE CONTENTS
TOMASA accepts no responsibility for the use that others might make of the website or its content, including any misuse that may be made of it. Nor will it assume any responsibility for the information contained in the webpages of third parties which may be accessed through links from the web page cordera.es. Said links will have exclusively information purposes. Under no circumstances shall they be considered as an invitation to contract services or products offered on the destination website.
Any person accessing this website undertakes to comply with the provisions herein, as well as with any other legal provision that may be applicable. Any person, whether natural or legal, resident or domiciled within or outside the European Union, must check that access to and use of this website, as well as its content, is permitted by their own legislation.
TOMASA will not be responsible for the use that third parties might make of the information contained in this website nor for any damage suffered or economic loss arising, directly or indirectly, from the same.
In the event that TOMASA has effective knowledge that the activity or information sent from these links is illicit, constitutes a crime or could damage the property or rights of third parties susceptible to compensation, it will act with the necessary diligence to remove or disable the corresponding link as soon as possible.
TOMASA is exempt from any type of responsibility derived from the lack of availability of the website for any reason whatsoever.
2.4 UPDATING AND MODIFICATION OF THE WEBSITE
TOMASA reserves the right to update, modify or delete the information contained in its website and its configuration or presentation at any time, without prior notice and without assuming any responsibility for doing so.
2.5 INFORMATION ON TECHNICAL ASPECTS
TOMASA will not assume any responsibility in the event of technical problems or errors in computer equipment when these occur during the user's connection period, or which may be caused by third parties through illegitimate intromissions beyond its control, provided that they cannot be attributed to the owner of the website.
TOMASA does not guarantee the absence of viruses or other elements that may cause damage to computer systems, electronic documents or user files on this website, nor does it accept responsibility for any damage that may stem from these causes.
Likewise, TOMASA is also exonerated from any responsibility for possible damages that the user may suffer as a consequence of errors, defects or omissions in the information provided when it comes from third party sources.
2.6 PROCESSING OF PERSONAL DATA
Users expressly authorize TOMASA to process their personal data whenever they provide their details and for the purpose indicated on the forms that collect them. TOMASA undertakes, in accordance with the principle of data minimization, to collect only those data necessary for the proposed purpose and will keep them for the specified period of time, being accessible only to authorized persons.
2.7 APPLICABLE LAW
Spanish law shall apply in the event of any dispute or conflict of interpretation of the terms that make up this legal notice, as well as any question related to the services of this portal. Likewise, the resolution of any controversy, dispute or discrepancy that may arise between the user and the owner of this website shall be submitted to mediation or to the Courts and Tribunals of La Coruña, Spain.
The users of this website are aware of all the above and accept it voluntarily.