Privacy Policy

We need to use your personal information for contractual agreements between you and Tom Omnichannel Management bv. In our privacy policy, we explain why we store your personal information and what we do with it. We respect your privacy and only process this information for the purpose for which you provided it.

Who manages your data?

TOM B2C B.V.
Chamber of Commerce no.: 76043118
VAT no.: NL860487118B01

Contact information:
Rootven 16
5531 MB Bladel
the Netherlands
privacy@foris.nl

What do we do with your data

We have legal grounds for using your personal data. This applies to the following cases:

Ordering
Delivering
Returning, warranties and repairs
Contact with customer service
Business orders

We may also use your data if there is a legitimate interest. In this case, we use your information to provide you with a personalised shopping experience, such as adapting our webshops to your interests. We use your data for:

Reviews and customer satisfaction surveys
Contact with customer service
Visits to the TOM-websites
Improving our webshops and service
Your account
Newsletters and email
Promotions
Personal advice
Social media
Security

We may use your e-mail address to send you information about products or services that are the same as or similar to those that you have ordered from us and that we think you may find useful. We will do so only if you have indicated that you do not object to being contacted for these purposes. At any stage you have the right to ask us to stop using personal data for direct marketing purposing by sending an e-mail to marketing@foris.nl.

Recording of data

All our pages use a secure connection. We store as little information from our customers as possible and ensure that no sensitive information is stored in our database, unless there is no alternative.

We keep the camera images of our store no longer than two weeks. Unless the images have to be kept longer because we see something suspicious that we have to investigate further, or because of another legal obligation.

Retention of data

Orders made with customer data are made anonymous after seven years. We delete inactive client accounts after seven years.
The tax authorities require us to keep our administration containing your invoice, payment and order information for seven years. After that retention period, we use your data anonymously for internal reporting.

Data security

We use strict security measures to prevent the loss, unauthorised use or unlawful changes to your personal data. When we transfer or receive your data, we guarantee your privacy by using modern security technology. All systems in which personal data is processed are equipped with powerful firewalls and strict security.

Corporate clients

Of our corporate clients, we store the information of the contact person. We treat it the same as that of our private customers.

Fraud

If we suspect fraud, we may have a legal obligation to use your data. If necessary, we will hand over customer data to the government.

Who can access your information?

We transfer your data to other parties only if that is necessary. For example, to facilitate the delivery of your order. The following parties have access to your information:

Our carriers
Suppliers or repairmen
Product support
Payment partners
IT service providers
The party that collects our reviews

We want to offer you the best possible shopping experience, based on your interests. We share data with parties such as data management platforms, media and advertising agencies and research agencies, to give you personalised advice or show you targeted advertisements.

The parties with whom we share your data may only use it to provide you with a service on behalf of TOM, unless they are responsible for obtaining and protecting your data themselves. We never sell your data to third parties.
You can read how we collect data using cookies in our cookie policy.

Credit check for afterpay

Provided that you gave us your express consent to it, we reserve the right to obtain information about your identity and creditworthiness using the services of specialised service provider Klarna. To this end, we will transfer your personal data needed for the credit assessment to Klarna:

De Ruyterkade 7
1013 AA Amsterdam
(+31) 020-8082852

In this process, we will apply appropriate measures to respect your rights, freedoms and legitimate interests. You can contact us via customerservice@foris.nl to present your standpoint and contest the decision. You may revoke your consent at any time by sending a message via customerservice@foris.nl. The consequence may be that we will no longer be able to offer you certain payment options."

We may also pass on your details to a debt collection agency and/or bailiff who collects unpaid invoices on our behalf.

Change or delete your data yourself

We store your personal data in your account. If you sign in to your account, you can change your details and adjust your preferences. Do you want to receive or delete all data that we have collected of you? Please let us know by post or email using the contact information below. We may request additional information to establish your identity.
If you have subscribed to the newsletter, we use this information to send the newsletter to you and to personalise it. Do you no longer want to receive it? You can unsubscribe by clicking on the link at the bottom of the newsletter.

As a data subject, you have the following rights:

in accordance with art. 15 GDPR, you have the right to request information about your personal data processed by us to the extent described therein;
in accordance with art. 16 GDPR, you have the right to demand the immediate correction of incorrect or complete personal data stored by us;
in accordance with art. 17 GDPR, the right to request the deletion of your personal data stored with us, unless further processing
to exercise freedom of expression and information;
for the fulfilment of a legal obligation;
for reasons of public interest; or
for asserting, exercising or defending legal claims
is required;
in accordance with art. 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as
the correctness of the data is denied by you;
the processing is unlawful, but you refuse to delete it;
we no longer need the data, but you do need it to assert, exercise or defend legal claims, or
you have lodged an objection to the processing pursuant to art. 21 GDPR;
In accordance with art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another person responsible;
the right to complain to a supervisory authority pursuant to art. 77 GDPR. You can also contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.

Questions or complaints

If you have questions or complaints about your data and the protection of it, you can contact us by post or by email.

Rootven 19
5531 MB Bladel
attn. Data protection officer
privacy@foris.nl

If you are not satisfied with how TOM handles your privacy, you can contact the Data Protection Authority.