PRIVACY
POLICY
TOMY UK Co., Ltd. and the other
entities in our European Group (including [Fat Brain Toys UK] TOMY
France SARL and TOMY Deutschland GmbH) take the privacy of your personal data
seriously. This Privacy Policy sets out our privacy practices and describes the
data we collect from you or about you, and the way that we use it. Please read
it in conjunction with our terms and conditions of sale as the terms
incorporate this Privacy Policy.
We are confident that you will find everything you need in
this Privacy Policy, but if you need to know more or anything is unclear you
are welcome to contact us by post at Data Protection Team, Hembury House Pynes
Hill, Rydon Lane, Exeter, Devon, EX2 5AZ, or by email at dataprotection@tomy.com.
1 THE DATA CONTROLLER OF YOUR
PERSONAL DATA
1.1 The "data controller" of your personal data
(in other words the organisation that determines how your personal data is
used) is TOMY UK Co., Ltd (with registered company no. 01634124) Our registered
office is Hembury House Pynes Hill, Rydon Lane, Exeter, Devon, EX2 5AZ. Any
reference to "you" or "your" means any individual whose
personal data we collect and process whether through https://uk.tomy.com/, https://de.tomy.com/, or https://fr.tomy.com/ ("our websites") or
otherwise. Any reference to "data controller", "we",
"us" or "our" is to TOMY UK Co., Ltd.
1.2 Please note that we may update and amend this Privacy
Policy from time to time and any changes will be posted on this website. We
therefore ask that you refer to this website on a regular basis to ensure that
you are aware of our most recent policy.
2 PERSONAL DATA WE COLLECT ABOUT
YOU
2.1 In this Privacy Policy, we refer to the information
below and any other information that could be used to identify you in some way
as "personal data".
2.2 The personal data that we collect from or about you may
include the following:
2.3 In addition, we may use "cookies" or other
devices to store and sometimes track information about you (see the section
entitledplease refer to our "Cookie
Policy" below).
2.4 Although we offer items or services for purchase which
may be relevant to children, we do not intend for any of our sites or services
to be used by children, and we do not intend to collect data from children. If
we become aware that a child under 16 has provided us with personal data, we
will take steps to delete such information.
3 HOW DO WE COLLECT PERSONAL DATA
3.1 We may collect personal data in a variety of ways
including:
Some
personal data is collected when you voluntarily provide this information to us
(for example when you fill out our TOMY customer enquiry form or otherwise make
an enquiry or engage with us in any form such as through our social media
channels or when you send emails to us).
We work
with other organisations such as our suppliers and service providers who
provide us with personal data which you have given them from time to time.
Our site
uses cookies to recognise you when you visit and use the site. This helps us to
provide you with a good experience when you browse our site, other cookies help
us to tailor online advertising based on your interests and behaviour on our
website and across the internet. For more information on the cookies we use
please see the section entitledour
"Cookie Policy" below.
Certain
information is collected by most browsers or automatically through your device,
and we also collect your IP address or other device identifier (this enables us
to recognise your computer or device when you use the site) via our server log
files.
4 OUR USE OF YOUR PERSONAL DATA
AND OUR LEGAL JUSTIFICATION FOR OUR USE
4.1 We use your personal data for a variety of purposes
related to the products and services that we provide. From a legal perspective,
there are various reasons for doing so and we have set out an explanation of
this below:
For purposes related to the provision of the products and
services that we offer to you:
For advertising and marketing purposes, including to
measure how effective our marketing is:
For administrative and internal business purposes:
For security and legal and compliance purposes:
5 HOW WE SHARE YOUR PERSONAL DATA
5.1 Please be assured that except for the reasons listed
below, we will not disclose your personal data to others, but where we do share
your personal data, we will only do this where we have a genuine reason for
doing so and only where we are confident your rights are protected.
We are
part of a group of companies that share various operations and business
processes. Your personal data may be shared with any member of our group
companies in order to fulfil our contractual obligations to you, or because it
is in our legitimate interests to do so.
We engage
various third parties to provide services to us for specific functions such as
to enable us to provide services to you over the website and elsewhere online,
including (but not limited to) the provision of support services and handling
queries, analytics and website management (for statistical analysis only). This
will often mean that we need to share your personal data with them. In almost
all cases, this is because such sharing is necessary in connection with our
performance of our contract with you, and in some other cases it may be in our
legitimate interests to do this.
If we
sell or propose to sell our business or part of it, we may need to disclose
your personal data to prospective buyers.
Similarly,
if there are changes to our group structure or if our ownership changes, we may
need to disclose your personal data to the new owners or operators of our
business as part of that process.
There may
be scenarios where we are subject to a legal obligation to disclose or share
your personal data, such as if we are under a lawful obligation to provide your
personal data to a court, the police, regulatory bodies or legal advisers in
connection with any alleged criminal offence, or otherwise for the prevention
or detection of crime or the apprehension or prosecution of offenders
Sometimes
we will share your personal data (for the reasons set out above) to third
parties outside of Europe. Wherever we send (or permit a third party to send)
your personal data outside of Europe, we will make sure that we take
appropriate steps to ensure that the level of protection for the transfer,
storing and processing of the personal data in these countries is sufficient as
required by applicable laws. For example, we may implement specific contract
terms or we may rely on service providers who adhere to certain compliance
programmes overseas, or we may select service providers based in countries with
strong local laws to protect your personal data.
6 HYPERLINKS TO OTHER WEBSITES
6.1 This website contains hyperlinks to websites owned and
operated by third parties which are beyond our control. These other sites have
their own privacy policies and/or terms and conditions of use and we urge you
to review them – because this Privacy Policy will not apply to other websites,
nor will it apply to our advertisers. We do not accept any responsibility or
liability for the privacy practices of such third party websites and your use
of such websites is at your own risk.
7 COOKIE POLICY
7.1 To find out more about the ways we use
"cookies" please refer to our Cookie Policy which can be found here https://uk.tomy.com/cookie-policy.
8 SECURITY AND RETENTION OF YOUR
PERSONAL DATA
8.1 We take the security of your personal data very
seriously and have put in place appropriate measures to safeguard the personal
data we hold from unauthorized access or improper use, as required by the law
and in accordance with accepted good industry practice. We keep these security
measures under review. Please note, however, that no
internet-based service can be 100% secure, and we cannot guarantee the absolute
security of your data.
8.2 We will only keep your personal data for as long as we
need it for the purposes described above and as permitted by applicable laws.
This means that the retention periods will vary according to the type of the
personal data and the reason that we have the personal data in the first place.
For example, when you submit a query using our TOMY customer enquiry form this
personal data will be kept for a period of one year (unless the query is likely
to involve legal proceedings)..
9 UPDATING YOUR PERSONAL DATA
To the extent that you do provide us with personal data, we
wish to keep it up-to-date. Please help us keep our information current and
accurate by sending the details of any change to your personal data via email
to dataprotection@tomy.com. We will
endeavour to incorporate the changes as soon as practicable.
10 YOUR RIGHTS AND HOW TO CONTACT
US
10.1 The law gives you a number of rights in relation to
your personal data and our use of it. You have the right:
10.2 If you would like to exercise any of the rights listed
above, or if you have any queries or concerns about the way that we use your
personal data (or any questions about this privacy policy), you can contact us
by post at Data Protection Team, Hembury House Pynes Hill, Rydon Lane, Exeter,
Devon, EX2 5AZ, or by email at dataprotection@tomy.com.
10.3 You also have the right to
complain about our use of your personal data. You can contact the Information
Commissioner's Office via their website: https://ico.org.uk/concerns/ or by
calling 0303 123 1113.