Privacy policy

In accordance with the provisions of UK GDPR (‘GDPR’), TOSCA SERVICES UK LTD (‘TOSCA’) informs users visiting the website www.toscashop.eu/en-gb (hereinafter the ‘Site’) of the privacy policy adopted regarding the protection of personal data.

In this Privacy Policy, you will find all the information relating to the processing of our users' personal data provided when browsing the Site, registering on it or purchasing any of our products.

1. Responsible for the processing of your personal data

We hereby inform you that the entity responsible for the processing of personal data collected and processed through the Site is TOSCA.

TOSCA SERVICES UK LTD is a company registered, with Tax Identification Number GB754543715 and registered office at 3rd Floor, Castlemill, Burnt Tree, Dudley, DY4 7UF United Kingdom.

2. Categories of personal data processed

You do not need to register to visit the Site and, therefore, you are not required to provide any personal data. However, certain personal data is collected through the use of cookies on the Site. Nevertheless, in order to offer certain services provided by the Site and which you may request, you will need to provide TOSCA with certain personal data. Consequently, failure to provide us with your data may, in certain cases, prevent us from processing the service you have requested.

The categories of data that TOSCA will collect and process about you for the purposes described in section 3 of this Privacy Policy may include:
• Identification and contact details such as your first and last names, date of birth, postal address (billing and shipping), email address and telephone number.
• Bank details such as credit/debit card information or alternative payment methods.
• Details relating to purchases made on the Site, such as the products purchased or amounts paid.
• We may also collect personal data contained in communications you send us in order to make an enquiry, comment or report a problem in relation to our services or products.

3. Legal basis and purpose of processing.

The personal data described in the previous section will be collected and processed on the following legal bases and for the following purposes.
Based on the performance of a contract (including the performance of the terms and conditions governing the use of the Website):
• To enable you to register on the Website by creating a user account, which will allow us to identify you as a user of the Website and give you access to its various features, products and services, as well as to manage your user account.
• To process your purchases, manage the delivery and return of orders you have placed through the online purchase procedure, and manage the payment of the products you purchase or any returns once you have made a purchase. We will also process your data for billing purposes and to provide you with receipts and invoices for purchases you have made on the Site.

Based on our legitimate interest:
• To verify and guarantee the security of payments made in online transactions.
• To manage and resolve, to the extent possible, any queries, claims or complaints you have sent us regarding the purchase of our products or the provision of our services.
• To administer your user account.
• If you purchase our products, to send you commercial communications tailored to your profile and preferences about our products and services, unless you object. We will send you these commercial communications by any means, including electronic means, such as, but not limited to, email, SMS, or instant messaging services.You may opt out of receiving such communications at any time and express your objection to receiving them by using the tools provided for this purpose, or by clicking on the unsubscribe link in these communications, or by sending an email to shop@toscaltd.com. For more information on how to exercise your rights, please read the ‘Rights of Data Subjects’ section of this Privacy Policy carefully.
• To investigate suspicious behaviour or violations of our Terms and Conditions.
Based on compliance with legal obligations, when necessary to:
• Comply with our legal or regulatory obligations or when necessary in accordance with applicable regulations in any other way.

Based on your consent:
• In the event that you have not purchased our products or services, but wish to receive commercial communications about them. We may send you these commercial communications by any means, including electronic means, such as, but not limited to, email, SMS, or instant messaging services.

You may choose to withdraw your consent at any time and stop receiving such communications by using the tools provided for this purpose, or by clicking on the unsubscribe link in these communications, or by sending an email to shop@toscaltd.com. For more information on how to exercise your rights, please read the ‘Rights of data subjects’ section of this Privacy Policy carefully.

4. Communication of your personal data

We may need to communicate some of your personal data to third parties such as tax authorities or other authorities in order to comply with applicable legal requirements or obligations.
We may also disclose your personal data to our suppliers or other companies that cooperate with us (the ‘Partners’) and help us provide the services we offer, such as financial institutions, technology service providers, logistics, transport and delivery service providers and partners, customer service providers, or marketing and advertising service providers and partners.
These Partners will generally act as data processors and will only process your personal data when necessary to provide services on behalf of TOSCA.

5. International transfers of personal data

On certain occasions, we may disclose your personal data to recipients who may be located abroad, including inside and outside the European Economic Area, including in the United States. In the event that your personal data is transferred to countries that are considered not to comply with equivalent security standards, we will ensure that the recipients of your personal data are contractually obliged to comply with European Union data protection standards by signing the standard contractual clauses adopted by the European Commission.
For more information on how your personal data will be disclosed to recipients abroad and the protection measures we implement to ensure adequate protection of personal data, please contact us at shop@toscaltd.com.

6. Data retention period

We will retain your personal data for as long as is strictly necessary to fulfil the purposes for which such personal data was collected and, in any case, in accordance with the principle of data minimisation set out in current legislation.
If you register by creating a user account, we will retain this data for as long as the account remains active. We remind you that you can close your account at any time. In certain cases, legal or regulatory obligations require us to retain data for the applicable limitation period, after which we will delete your personal data.
Payment details, such as credit or debit card details, will be retained for as long as necessary to confirm the order and payment. In the event of any incident with the payment, we will retain this data for the proper management of the incident and subsequently for a minimum period of 5 years after payment.

7. Rights of data subjects

TOSCA will take reasonable steps to keep the personal data collected about you accurate and up to date for the purposes for which it was collected. However, you have the right to exercise the following rights under the conditions and within the limits established in the applicable data protection regulations. You have the right to request:
• Access to your personal data, i.e. the right to obtain confirmation as to whether TOSCA is processing personal data concerning you and, if so, to access it.
• The rectification of your personal data when it is inaccurate.
• The deletion of your data, when (i) the personal data is no longer necessary in relation to the purposes for which it was collected, (ii) in cases where the processing is based on consent, you withdraw your consent, or (iii) the personal data has been processed unlawfully.
• Restriction of processing, allowing TOSCA to store such data without using it if (i) its accuracy is questioned, to allow us to verify its accuracy; (ii) the processing is unlawful, but you do not want the personal data to be deleted; or (iii) it is no longer necessary for the purposes for which it was collected, but is still necessary for TOSCA for the establishment, exercise or defence of legal claims.
• Object to such processing if you consider that there are specific circumstances that could unreasonably affect your fundamental rights and freedoms. TOSCA will stop processing the data, except for legitimate reasons or in the exercise of possible claims.
• When the processing of your personal data is based on your consent, you may withdraw that consent at any time.
• Data portability. Right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, as well as to transmit it to another entity. This right can only be exercised if the processing is based on your consent or on the performance of a contract concluded with you and the processing is automated.
These rights can be exercised directly, and free of charge, by contacting TOSCA at the following email address: shop@toscaltd.com. You can also contact us by post at the following address:Floor 3 Castlemill Burnt Tree, Dudley DY1 4RD United Kingdom.

8. Modifications or changes to the Privacy Policy

TOSCA may modify this Privacy Policy, in which case we will publish the updated version on the Site and, if applicable, inform you of such update by email. We recommend that you periodically review this Privacy Policy to stay informed about our data protection practices.