Privacy Policy

RESPONSIBLE

Who is responsible for the processing of your data?

TOMY'S FASHION TRIBE SL, CIF B54632732. This privacy policy applies to all personal data provided by the user to TOMY'S FASHION TRIBE SL, with postal address at Avda. de la Estación N 27 - 03330 CREVILLENTE, (ALICANTE); Telephone 965 047 890, info@koalabay.es, through the online forms, when making a purchase on its web pages, social networks, or when transmitting their data by email, through orders through commercial agents or physically, or by any other means, The user may contact the Administration department in charge of Data Protection in the email info@koalabay.es, or through the telephone 965 047 890.

PURPOSES OF DATA PROCESSING

For what purpose do we use your personal data? The User is hereby informed that TOMY'S FASHION TRIBE SL may process the personal data provided by the User through the online forms, or when transmitting their data by email, through orders through commercial agents or physically, or by any other means, or during the purchase process of any of the products or services of TOMY'S FASHION TRIBE SL, for the purposes indicated below, to the extent that there is a legal basis for each treatment as explained below:

a) To guarantee the User access to, and use of their personal space in the private area of the web pages of products and services offered by TOMY'S FASHION TRIBE SL.

b) Manage purchases and requests made by the User via email, telephone or on the websites of TOMY'S FASHION TRIBE SL. We use the information to send you the budget, to process and deliver your order, inform you by email and / or SMS or mail. Manage, where appropriate, your order and carry out the contracted service, billing and collection.

c) Inform the User by any means, including sending commercial communications to the email address provided by the User, of products and services of TOMY'S FASHION TRIBE SL similar to those purchased by the User.

d) Carry out promotional activities about other products and services of TOMY'S FASHION TRIBE SL including sending commercial communications to the email address provided by the User.

e) Management and issuance of supporting sales documents: invoice, packing list or digital ticket.

f) Management of product or service availability alerts.

g) Response to the exercise of ARCO+ rights, queries and claims by the interested party.

h) Prevent abuse and fraud in the use of our services (for example, fraudulent activities, sending spam, etc.).

i) Transfer of data to public bodies and authorities, as long as they are required in accordance with legal and regulatory provisions.

j) Manage and control the customer portfolio.

DURATION OF DATA RETENTION

How long will we keep your data? The data for the management of the relationship with the customer and the billing and collection of services will be kept for as long as the contract is in force. After the end of this relationship, if necessary, the data may be kept for the time required by applicable law and until the expiration of any liabilities arising from the contract. The data for the management of queries and requests will be kept for the time necessary to respond to them, with a maximum period of one year. The data for sending commercial communications of our products or services will be kept indefinitely until, if necessary, you express your desire to delete them. After these periods, the data will be blocked from all systems.

LEGITIMACY FOR DATA PROCESSING

What is the legal basis for the processing of your personal data? The legal basis for the processing of your data for the purposes described in the second paragraph lies in:

• The performance of a contract for the provision of services and/or purchase of products. In this sense, the interested party is obliged to provide the data that are necessary for its execution. If this data is not provided, it will not be possible to carry out the purchase.
• The user's consent, in case it has been requested and granted.
• The legitimate interest of TOMY'S FASHION TRIBE SL in relation to the purpose indicated in paragraph (h) of point 2.
• Compliance with the legal obligations applicable to TOMY'S FASHION TRIBE SL for the purpose indicated in paragraph (e), (i) and (g) of point 2.

RECIPIENTS OF THE DATA

To which recipients can we send your data? The recipient's personal data may be transferred/communicated to the following recipients:

• Companies of the Group of companies to which TOMY'S FASHION TRIBE SL may belong for the purpose of centralized management of our activities and the fulfillment of internal administrative purposes, including the processing of personal data of customers. Also, if you have given us your consent, your data may be transferred to these companies in order to send you commercial communications that may be of interest to you, according to your customer profile.
• Public Administrations and Agencies when so required by tax, labor, Social Security or any other applicable regulations, and in general to the competent public administrations, in the cases provided for in the Law and for the purposes defined therein.
• Companies in charge of data processing, such as franchisees and suppliers that provide services to TOMY'S FASHION TRIBE SL (courier companies, companies sending communications, agencies, etc.), including financial institutions through which the management of collections and payments is articulated.

RIGHTS OF INTERESTED PARTIES

What are your rights in relation to personal data? You have the following rights that can be exercised through the e-mail address info@koalabay.es.

• Right of access: You have the right to obtain information about whether or not TOMY'S FASHION TRIBE SL is processing personal data concerning you, as well as access to personal data that we have.
• Right of rectification: You have the right to request that TOMY'S FASHION TRIBE SL rectify the data when they are inaccurate or complete when they are incomplete.
• Right of deletion or right to be forgotten: You can ask us to delete personal data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
• Right of limitation: You have the right to request the limitation of the processing of the data, in which case we will only keep them for the exercise or defense of claims.
• Right of portability: You have the right to receive personal data in a structured, commonly used and machine-readable format, and to transmit it to another controller when the processing is based on consent or a contract, and is carried out by automated means.
• Right of opposition: you have the right to oppose the processing of your data, in which case TOMY'S FASHION TRIBE SL will stop using the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.
• Right to file a complaint: You have the right to file a complaint with the Spanish Data Protection Agency (contact details accessible at www.agpd.es) or other competent supervisory authority. You can also obtain more information about your rights by contacting such bodies.

SECURITY MEASURES

How do we protect your personal data?

TOMY'S FASHION TRIBE SL is committed to fulfilling its obligation of secrecy of personal data and its duty to protect them, and take the necessary measures to prevent alteration, loss, or unauthorized access, in accordance with the provisions of applicable regulations. TOMY'S FASHION TRIBE SL L has implemented security measures of technical and organizational measures necessary to ensure the security of your personal data and avoid its alteration, loss and treatment and / or unauthorized access, given the state of technology, the nature of the data stored and the risks to which they are exposed, whether from human action or the physical or natural environment, in accordance with the provisions of the applicable regulations. TOMY'S FASHION TRIBE SL entity concerned about privacy, in order to strengthen the confidentiality and integrity of information in your organization, continuously maintains the supervision, control and evaluation of its processes to ensure respect for privacy and information security, according to international standards.