Who manages your data?
TOM B2C B.V.
Chamber of Commerce no.: 76043118
VAT no.: NL860487118B01
5531 MB Bladel
What do we do with your data
We have legal grounds for using your personal data. This applies to the following cases:
- Returning, warranties and repairs
- Contact with customer service
- Business orders
We may also use your data if there is a legitimate interest. In this case, we use your information to provide you with a personalised shopping experience, such as adapting our webshops to your interests. We use your data for:
- Reviews and customer satisfaction surveys
- Contact with customer service
- Visits to the TOM-websites
- Improving our webshops and service
- Your account
- Newsletters and email
- Personal advice
- Social media
We may use your e-mail address to send you information about products or services that are the same as or similar to those that you have ordered from us and that we think you may find useful. We will do so only if you have indicated that you do not object to being contacted for these purposes. At any stage you have the right to ask us to stop using personal data for direct marketing purposing by sending an e-mail to firstname.lastname@example.org.
Recording of data
All our pages use a secure connection. We store as little information from our customers as possible and ensure that no sensitive information is stored in our database, unless there is no alternative.
We keep the camera images of our store no longer than two weeks. Unless the images have to be kept longer because we see something suspicious that we have to investigate further, or because of another legal obligation.
Retention of data
Orders made with customer data are made anonymous after seven years. We delete inactive client accounts after seven years.
The tax authorities require us to keep our administration containing your invoice, payment and order information for seven years. After that retention period, we use your data anonymously for internal reporting.
We use strict security measures to prevent the loss, unauthorised use or unlawful changes to your personal data. When we transfer or receive your data, we guarantee your privacy by using modern security technology. All systems in which personal data is processed are equipped with powerful firewalls and strict security.
Of our corporate clients, we store the information of the contact person. We treat it the same as that of our private customers.
If we suspect fraud, we may have a legal obligation to use your data. If necessary, we will hand over customer data to the government.
Who can access your information?
We transfer your data to other parties only if that is necessary. For example, to facilitate the delivery of your order. The following parties have access to your information:
- Our carriers
- Suppliers or repairmen
- Product support
- Payment partners
- IT service providers
- The party that collects our reviews
We want to offer you the best possible shopping experience, based on your interests. We share data with parties such as data management platforms, media and advertising agencies and research agencies, to give you personalised advice or show you targeted advertisements.
The parties with whom we share your data may only use it to provide you with a service on behalf of TOM, unless they are responsible for obtaining and protecting your data themselves. We never sell your data to third parties.
Credit check for afterpay
Provided that you gave us your express consent to it, we reserve the right to obtain information about your identity and creditworthiness using the services of specialised service provider Klarna. To this end, we will transfer your personal data needed for the credit assessment to Klarna:
De Ruyterkade 7
1013 AA Amsterdam
In this process, we will apply appropriate measures to respect your rights, freedoms and legitimate interests. You can contact us via email@example.com to present your standpoint and contest the decision. You may revoke your consent at any time by sending a message via firstname.lastname@example.org. The consequence may be that we will no longer be able to offer you certain payment options."
We may also pass on your details to a debt collection agency and/or bailiff who collects unpaid invoices on our behalf.
Change or delete your data yourself
We store your personal data in your account. If you sign in to your account, you can change your details and adjust your preferences. Do you want to receive or delete all data that we have collected of you? Please let us know by post or email using the contact information below. We may request additional information to establish your identity.
If you have subscribed to the newsletter, we use this information to send the newsletter to you and to personalise it. Do you no longer want to receive it? You can unsubscribe by clicking on the link at the bottom of the newsletter.
As a data subject, you have the following rights:
- in accordance with art. 15 GDPR, you have the right to request information about your personal data processed by us to the extent described therein;
- in accordance with art. 16 GDPR, you have the right to demand the immediate correction of incorrect or complete personal data stored by us;
- in accordance with art. 17 GDPR, the right to request the deletion of your personal data stored with us, unless further processing
- to exercise freedom of expression and information;
- for the fulfilment of a legal obligation;
- for reasons of public interest; or
- for asserting, exercising or defending legal claims
- is required;
- in accordance with art. 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as
- the correctness of the data is denied by you;
- the processing is unlawful, but you refuse to delete it;
- we no longer need the data, but you do need it to assert, exercise or defend legal claims, or
- you have lodged an objection to the processing pursuant to art. 21 GDPR;
- In accordance with art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another person responsible;
- the right to complain to a supervisory authority pursuant to art. 77 GDPR. You can also contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.
Questions or complaints
If you have questions or complaints about your data and the protection of it, you can contact us by post or by email.
5531 MB Bladel
attn. Data protection officer
If you are not satisfied with how TOM handles your privacy, you can contact the Data Protection Authority.