Privacy Policy

Mr. Cyrille Vanhulle is committed to the protection of personal data. He implements a continuous improvement approach to comply with the General Data Protection Regulation (GDPR), the ePrivacy Directive, as well as Law No. 78-17 of January 6, 1978, known as the Data Protection Act, to ensure the highest level of protection for your personal data. This policy informs you about the type of personal data we collect, how your personal data is used, and the rights you have to control its use. According to the GDPR:
- "Personal data" refers to any information that concerns you and can directly or indirectly identify you.- "Processing of personal data" encompasses any operation or set of operations applied to personal data.For any information regarding the protection of personal data, you can also refer to the website of the Commission Nationale de l'Informatique et des Libertés (CNIL) at www.cnil.fr.

Article 1,- Person in Charge of Personal Data ProcessingThe person responsible for the processing of personal data is Mr. Cyrille Vanhulle. Personal data is collected on the website www.tosma.org and processed by Mr. Cyrille Vanhulle, located at 1 avenue de la Devinière, 2nd floor, 44000 Nantes.

Article 2 - Legal BasisThe collection of personal data is justified by various legal bases:
- Consent: especially when you respond to our questions and provide feedback on our products.
- Contract: the processing of personal data is necessary for the performance of the contract between Mr. Cyrille Vanhulle and you.
- Legal obligation.
- Legitimate interests of Mr. Cyrille Vanhulle, to ensure the proper functioning of the website www.tosma.org and to combat fraud.

Article 3 - Why Are My Data Collected?- Customer relationship management, primarily requiring identification data such as your name and contact details.- Order placement, payment, and delivery, necessitating data such as your name, email address, billing address, delivery address, phone number, your product selection, or payment-related information.
- Improving website navigation by personalizing our services and the messages we send you, including offering products similar to those you have already purchased or viewed. This requires the collection of data on your browsing and purchases.
- Customizing online advertisements and communication campaigns, requiring information on your website browsing and purchases.
- Loyalty through our loyalty program, requiring the collection of identification data and data related to your purchases.
- Sending commercial communications, if you choose to subscribe to the newsletter, requiring data when creating your customer account, such as your email address and mobile phone number.
- Responding to inquiries about our products or brand at www.tosma.org.
- Managing product reviews, for which we need at least your email address.
- Understanding customers and performance statistics of our site, requiring data collection to better understand our customers.

Article 4 - Personal Data Collected and TimingWe collect and process the following data, including but not limited to: name, first name, email address, phone number, postal address, IP address, connection data, navigation data, order history, products viewed, delivery incidents, and complaints. These data are generally collected when:
- You log in and browse our website www.tosma.org.
- You select products and create a shopping cart.
- You confirm and pay for an order.

Article 5 - Data Retention PeriodThe personal data of users are not kept beyond the strictly necessary duration for the purposes pursued, in accordance with the Applicable Regulations. Data related to an active customer are retained:
- For the entire duration of the contractual relationship, or
- Until a request for deletion is sent, or
- Up to three years after a period of inactivity.When you contact us for information about our products or brand, data is kept for the duration necessary to process your request.

Article 6 - Data ProtectionWe use SSL (Secure Sockets Layer Software) software that encrypts your information.

Article 7 - Data Sharing with Third PartiesThe data we collect is transmitted to service providers we use to perform our services, including carriers, online payment services, and outsourced loyalty program services, etc. Your data will not be transmitted outside the European Union.

Article 8 - MinorsOur website is not intended for minors, and we do not sell products to them. Consequently, we do not process data concerning them.


Article 9 - Your RightsIn accordance with the "Data Protection Act" of January 6, 1978, as amended, and Regulation (EU) 2016/679 of April 27, 2016, you have rights concerning your personal data that you can exercise at any time:
- Right of access.
- Right to rectification.
- Right to limit data processing (especially if you dispute the accuracy of the data; processing will be limited during the verification of their accuracy).
- Right to erasure, also known as the "right to be forgotten." However, we may be required to retain certain data for legal or compelling legitimate reasons.
- Right to data portability, meaning the right to receive the personal data you have provided to us in a structured, commonly used format and the right to transmit this data to another data controller.
- Right to object to any commercial prospecting.
- Finally, you can issue directives regarding the retention, erasure, and communication of your personal data after your death.You can exercise your rights with Mr. Cyrille Vanhulle at the following address: tosma.org@gmail.com.

For any request or in the event of a dispute between Mr. Cyrille Vanhulle and users regarding the processing of their personal data, users can send their request or complaint to Mr. Cyrille Vanhulle at the following address: tosma.org@gmail.com. Mr. Cyrille Vanhulle will make every effort to find a satisfactory solution to ensure compliance with applicable regulations. In the absence of a response from Mr. Cyrille Vanhulle or if the dispute persists despite Mr. Cyrille Vanhulle's proposal or at any time, users have the option to file a complaint with the CNIL on its website www.cnil.fr or with the supervisory authority of the European Union Member State in which the user usually resides.

Article 10 - CookiesBrowsing the website www.tosma.org may result in the installation of cookies on the user's computer.Definition
- A cookie is a small file that does not allow the identification of the user but records information about a computer's browsing on a site. The data obtained in this way aims to facilitate subsequent navigation on the site and is also intended to enable various visitor statistics.Duration
- Data collected through cookies issued are kept for a maximum period of thirteen months.Information Banner
- An information banner is visible during your first connection to our site. It allows you to accept cookies, customize cookie management, or refuse them.How to Block Cookies?
- Users can configure their computer as follows to refuse the installation of cookies:
- In Internet Explorer: Go to the Tools tab (gear icon in the upper right corner) / Internet Options. Click on Privacy and select Block all cookies. Confirm with OK.
- In Firefox: At the top of the browser window, click the Firefox button, then go to the Options tab. Click on the Privacy tab. Set the Retention Rules to: Use custom settings for history. Finally, uncheck it to disable cookies.
- In Safari: Click the menu icon (represented by a gear) at the top right of the browser. Select Settings. Click on Advanced Settings. In the "Privacy" section, click on Content Settings. In the "Cookies" section, you can block cookies.
- In Chrome: Click the menu icon (represented by three horizontal lines) at the top right of the browser. Select Settings. Click on Advanced Settings. In the "Privacy" section, click on Preferences. In the "Privacy" tab, you can block cookies.Deletion
- Users can delete cookies in their browser settings. However, deleting these cookies may cause some disruptions in the use of the site.For More Information
- For a better understanding and control of cookies from all sources and not just those of the Site, users are invited to consult the Youronlinechoices website, published by the Interactive Advertising Bureau France (IAB), and the specific page of the CNIL: http://www.youronlinechoices.com/fr/controler-ses-cookies/ http://www.cnil.fr/vos-droits/vos-traces/les-cookies/conseils-aux-internautes