1. Introduction
LOS TOMASZ AI is committed to respecting your privacy and protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us, place an order or use our products and services.
We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable French data protection legislation.
By using our website, you acknowledge that you have had the opportunity to read this Privacy Policy. Where consent is legally required, we will request it separately.
2. Data Controller Information
The data controller responsible for the processing described in this Privacy Policy is:
Brand name: LOS TOMASZ AI
Registered business name: LOS TOMASZ
SIRET (registered establishment): 13066062400011
Registered address: 46 Rue des Carmes, 45650 Saint-Jean-le-Blanc, France
Website: http://www.lostomasz-ai.com
Email: info@lostomasz-ai.com
For any questions or requests relating to your personal data, please contact us using the email address above.
3. Personal Data We May Collect
Depending on how you interact with our website, we may collect the following categories of personal data.
A. Contact and identification information
This may include your name, email address, telephone number and other information you voluntarily provide when contacting us or creating an account.
B. Order and transaction information
When you purchase products or services, we may process your order reference, purchased items, billing information, transaction amount, order history and information needed to provide customer support.
Payment details may be processed directly by our payment service provider. We do not intentionally retain full payment card details unless this is expressly disclosed and lawfully supported by the payment arrangement used.
C. Technical and usage information
When you visit our website, certain technical information may be collected, such as your IP address, browser type, device information, access timestamps, pages visited, referral information and security logs.
The specific information collected depends on our hosting provider, website configuration and any analytics or security tools we use.
D. Communications
We may retain messages, requests, feedback and other information you provide when contacting our customer support team.
E. Marketing preferences
If you subscribe to marketing communications or interact with promotional messages, we may process your email address, subscription status, consent records and communication preferences.
Providing optional marketing information is voluntary.
4. Purposes and Legal Bases of Processing
We process personal data only where a lawful basis applies under the GDPR.
Depending on the circumstances, we may process personal data for the following purposes:
Order processing and fulfilment: To process purchases, provide access to products, deliver orders and manage customer accounts. The legal basis is the performance of a contract or steps requested before entering into a contract.
Payments and accounting: To process transactions, maintain appropriate financial records and meet legal obligations. The legal bases include contractual necessity and compliance with legal obligations.
Customer support: To respond to questions, investigate complaints and resolve product or order issues. The legal basis may be contractual necessity or our legitimate interest in providing customer service.
Website security and fraud prevention: To protect our website, detect abuse, prevent fraudulent transactions and maintain system integrity. The legal basis may be our legitimate interests, subject to applicable legal requirements.
Website analytics and improvement: To understand website performance and improve user experience. Where required, we will obtain consent before using non-essential analytics cookies or similar tracking technologies.
Marketing communications: To send promotional communications where permitted by law. Depending on the circumstances, the legal basis may be your consent or another lawful basis permitted by applicable marketing rules. You may unsubscribe from promotional emails at any time.
Legal claims and compliance: To comply with applicable law, respond to lawful requests and establish, exercise or defend legal claims where necessary.
We do not intentionally collect more personal data than is reasonably necessary for the relevant purposes.
5. Whether Providing Data Is Required
Some personal data is necessary to complete an order, issue an invoice, provide a requested service or respond to a specific request.
If you do not provide information that is necessary for a transaction, we may be unable to process your order or provide the requested service.
Optional information, such as marketing preferences, is not required to purchase a product unless a particular feature expressly requires it and this is explained to you.
6. Cookies and Similar Technologies
Our website may use cookies and similar technologies to operate correctly, maintain security, remember preferences or measure website performance.
Cookies may fall into the following categories:
-
Strictly necessary cookies: Required for essential website functions, security or checkout operations.
-
Preference cookies: Used to remember settings where applicable.
-
Analytics cookies: Used to measure website traffic and understand how visitors use the website.
-
Advertising cookies: Used, where applicable, to measure or personalise advertising.
Non-essential cookies and tracking technologies will be used only where the required consent has been obtained.
Where a consent mechanism is provided, you can use it to accept, reject or manage optional cookies. You may also change your preferences later through the website's cookie settings, if available.
Disabling certain cookies may affect some website functions.
The actual cookies and tracking technologies used will depend on the website's technical configuration.
7. Sharing Personal Data
We do not sell personal data as a standalone commercial product.
We may share personal data with third parties where necessary for the purposes described in this Privacy Policy, including:
Payment providers: To process payments, refunds and transaction-related security checks.
Website hosting and infrastructure providers: To host the website, maintain its availability and protect its systems.
E-commerce and software providers: To operate the online store, manage orders, provide customer accounts and deliver digital products.
Email and customer support providers: To send transactional messages, respond to enquiries and manage support requests.
Analytics and advertising providers: Where these services are used and their use is lawful, including obtaining consent when required.
Professional advisers: Such as accountants, lawyers or auditors where reasonably necessary.
Public authorities and other parties: Where disclosure is required by law or necessary to establish, exercise or defend legal claims.
Third-party service providers may process personal data on our behalf or act as independent controllers for certain activities. Their role depends on the services they provide.
Where a provider processes personal data on our behalf, appropriate contractual and security safeguards will be implemented where required.
8. Third-Party AI Services
Some products offered through LOS TOMASZ AI may use third-party artificial intelligence tools, APIs or software platforms.
If you use a product that connects to an external AI service, certain information may be transmitted to that provider to deliver the requested functionality.
Depending on the product, this information may include prompts, uploaded content, account identifiers, technical information or other data submitted by the user.
Before using an AI-enabled product, please review its product description and any applicable third-party privacy information.
Do not submit sensitive personal information or confidential material to an AI tool unless you have verified that doing so is appropriate and adequately protected.
The privacy practices of independent third-party AI providers are governed by their own terms and privacy policies. Where we determine the purposes and means of processing, we remain responsible for our own processing activities.
We will disclose additional information about relevant AI providers where necessary for transparency and compliance.
9. International Data Transfers
Some of our service providers may process personal data outside the European Economic Area (EEA).
Where personal data is transferred to a country without an applicable adequacy decision, we will implement an appropriate transfer mechanism where required, such as the European Commission's Standard Contractual Clauses, together with any additional safeguards required by applicable law.
Information about relevant international transfers and safeguards can be requested by contacting info@lostomasz-ai.com.
The countries involved and the safeguards used depend on the third-party providers and services actually implemented on the website.
10. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, taking account of applicable legal, accounting and contractual obligations.
Retention periods depend on the category of data and the reason for processing.
-
Order and transaction records: Retained for the period required to manage the transaction and comply with applicable accounting and tax laws.
-
Customer support communications: Retained for as long as necessary to resolve requests and maintain appropriate records.
-
Account information: Retained while the account remains active and for an appropriate period afterward where necessary or legally required.
-
Marketing preferences: Retained while communications remain permitted and for as long as necessary to demonstrate and respect your preferences.
-
Technical and security logs: Retained for a period proportionate to security, troubleshooting and legal requirements.
-
Consent records: Retained for as long as necessary to demonstrate compliance with applicable legal requirements.
When personal data is no longer needed, we will delete it or anonymise it where appropriate, subject to lawful retention requirements.
Specific retention periods should be established and applied according to the actual data and systems used by our business.
11. Your Data Protection Rights
Subject to the conditions and limitations established by applicable law, you may have the right to:
-
Access your personal data and obtain information about how it is processed.
-
Rectify inaccurate or incomplete personal data.
-
Request erasure of personal data where the legal requirements are met.
-
Restrict processing in certain circumstances.
-
Object to processing based on legitimate interests, including direct marketing.
-
Data portability for eligible data processed by automated means on the basis of consent or a contract.
-
Withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
-
Lodge a complaint with the competent data protection supervisory authority.
To exercise your rights, contact:
Email: info@lostomasz-ai.com
Postal address: 46 Rue des Carmes, 45650 Saint-Jean-le-Blanc, France
We may need to verify your identity before responding to a request. We will respond within the applicable legal deadline.
Where French data protection law applies, you may lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL), through its official website: https://www.cnil.fr/.
12. Data Security
We take reasonable technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, disclosure, alteration or destruction.
Depending on the services used, these measures may include access controls, secure connections, restricted permissions, provider security features and appropriate backups.
No method of internet transmission or electronic storage is completely secure. We therefore cannot guarantee absolute security.
If a personal data breach occurs, we will assess and respond to it in accordance with applicable legal obligations, including notification requirements where applicable.
13. Children's Privacy
Our website is not intentionally directed at children where parental authorisation or additional protections are required by applicable law.
We do not knowingly collect children's personal data in violation of applicable legal requirements.
If you believe that a child has provided personal data unlawfully, please contact us so that we can assess the situation and take appropriate action.
14. Third-Party Websites
Our website may contain links to third-party websites, applications or services.
We are not responsible for the privacy practices of independent websites that we do not control.
When visiting an external website or using an external service, we recommend reviewing its privacy policy before providing personal data.
15. Automated Decision-Making and Profiling
We may use automated technical processes for routine activities such as fraud detection, website security or service delivery.
Where we carry out processing that falls within the GDPR rules on decisions based solely on automated processing that produce legal or similarly significant effects, we will provide the required information and safeguards.
We will not claim that such processing does or does not occur without considering the actual systems and services used by the business.
16. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business, products, technology, service providers or legal obligations.
The latest version will be published on this page with its updated date.
Where required by law, we will provide additional notice or seek consent before introducing new processing activities that require it.
17. Contact Us
For questions about this Privacy Policy or the handling of your personal data, please contact:
LOS TOMASZ AI
Registered business name: LOS TOMASZ
SIRET: 13066062400011
46 Rue des Carmes
45650 Saint-Jean-le-Blanc
France
Email: info@lostomasz-ai.com
Website: http://www.lostomasz-ai.com
This Privacy Policy is a general template and must be adapted to the actual data processing activities, website technologies, service providers, retention periods and legal obligations of LOS TOMASZ AI before publication.