Privacy and Cookie Statement
This Privacy and Cookie statement applies to the processing of personal data in the context of our services and (the use of) the website www.monari.com. BBG Fashion GmbH is the controller within the meaning of the General Data Protection Regulation (‘GDPR’).
Unless stated otherwise below, providing personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract. Not providing personal data will have no consequences. This only applies as long as the clauses in this statement below do not state otherwise.
“Personal data” is any information relating to an identified or identifiable natural person: an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Contact
Controller
The person responsible for data processing is: BBG Fashion GmbH (“Monari”), Jöbkesweg 19-23, 48599 Gronau Deutschland, +49 800/4448765, onlineshop@monari.com
Contact us at any time.
Data protection officer
You can contact our data protection officers directly at: datenschutz@sila-consulting.de
SILA Consulting GmbH, Weseler Straße 9, 46325 Borken
Proactive contact of the customer by e-mail
If you make contact with us proactively via e-mail, we shall collect your provided personal data (name, e-mail address, message text). The purpose of the data processing is to handle and respond to your contact request.
If the initial contact serves to implement pre-contractual measures (e.g. consultation in the case of purchase interest, order creation) or concerns an agreement already concluded between you and us, this data processing takes place on the basis of Article 6(1)(b) GDPR.
If the initial contact occurs for other reasons, this data processing takes place on the basis of Article 6(1)(f) GDPR for the purposes of our overriding, legitimate interest in handling and responding to your request. In this case, on grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you and carried out on the basis of Article 6(1)(f) GDPR. You may submit your objection by email to onlineshop@monari.com.
We will only use your e-mail address to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.
Collection and processing when using the contact form
When you use the contact form we will only collect your personal data (name, e-mail address, message text) in the scope provided by you. The data processing is for the purpose of making contact.
If the initial contact serves to implement pre-contractual measures (e.g. consultation in the case of purchase interest, order creation) or concerns an agreement already concluded between you and us, this data processing takes place on the basis of Article 6(1)(b) GDPR. If the initial contact occurs for other reasons, this data processing takes place on the basis of Article 6(1)(f) GDPR for the purposes of our overriding, legitimate interest in handling and responding to your request. In this case, on grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you and carried out on the basis of Article 6(1)(f) GDPR. You may submit your objection by e-mail to onlineshop@monari.com.
We will only use your e-mail address to process your request. Finally your data will be deleted, unless you have agreed to further processing and use.
Customer account and Orders
Customer account
When you open a customer account, we will collect your personal data in the scope given there. The data processing is for the purpose of improving your shopping experience and simplifying order processing. The processing will be carried out on the basis of art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. In that case, your customer account will be deleted.
Collection, processing, and transfer of personal data in orders
When you submit an order we only collect and use your personal data insofar as this is necessary for the fulfilment and handling of your order as well as processing of your queries. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of Article 6(1) b) GDPR and is required for the fulfilment of a contract with you.
Your data is transferred here for example to the shipping companies and dropshipping providers, payment service providers, service providers for handling the order and IT service providers that you have selected. Where necessary, we will also provide your e-mail address or telephone number to the shipping service provider so that they can send you shipment information (e.g. regarding tracking or estimated delivery). We will comply strictly with legal requirements in every case. The scope of data transmission is restricted to a minimum.
For the processing of deliveries and logistics operations, we transfer certain personal data (e.g. name, delivery address, if applicable, telephone number and e-mail address) to our group-internal logistics company, monari Logistik GmbH. As part of the internal division of responsibilities within the group, this company provides logistics services such as warehousing, shipping, and transportation. This transfer is carried out on the basis of Art. 6(1)(f) GDPR, as we have a legitimate interest in efficient and centralized logistics processing within our corporate group. This interest does not override the rights and freedoms of the data subjects, particularly because the processing is strictly limited to this purpose and appropriate security measures have been implemented. The monari Logistik GmbH does not use the data for any other purpose.
Advertising
Use of your e-mail address for mailing of newsletters
We use your e-mail address outside of contractual processing exclusively to send you a newsletter for our own marketing purposes and to participate in competitions, if you have explicitly agreed to this. The processing will be carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. You can unsubscribe from the newsletter at any time using the relevant link in the newsletter or by contacting us. Your e-mail address will then be removed from the distributor.
Merchandise management
Use of an external merchandise management system
We use a merchandise management system in the course of order processing for the purposes of contractual processing. For this purpose your personal data as collected in the course of the order will be sent to Monari GmbH, Jöbkesweg 19 - 23, 48599 Gronau.
Payment service providers / Credit check
Use of PayPal
On our website we use the PayPal payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A., Luxembourg. The data processing serves the purpose of offering you payment via the payment service. By selecting and using payment via PayPal, the data required for processing the payment will be transmitted to PayPal in order to enable us to fulfil the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 (1)(b) GDPR. All PayPal transactions are subject to PayPal Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Data collection and processing as part of a credit check
When paying in advance, e.g. by invoice or direct debit, we reserve the right to obtain a credit report on the basis of mathematical and statistical processes using SCHUFA Holding AG, Wiesbaden. For this purpose we transmit the personal data required for a credit assessment to the company and use the information received on the statistical likelihood of a payment default for a balanced decision on the contractual relationship. Processing is carried out on the basis of Art. 6(1) lit. f GDPR. You have the right to object to this processing: onlineshop@monari.com.
Use of Klarna payment options
On our website we use the payment service of Klarna Bank AB (publ), Sweden. Data required for payment processing is transmitted to Klarna. Processing is carried out on the basis of Art. 6(1)(b) GDPR. Cookies may be stored for browser recognition. You can object at any time: onlineshop@monari.com.
For individual payment methods such as "Pay Later" (invoice), "Pay Now" (direct debit), "Financing" (hire purchase), Klarna may obtain a credit report. Data required for the credit assessment is transmitted to a credit agency. Data processing serves the purpose of credit assessment for contract initiation, based on Art. 6(1)(f) GDPR. Your data is necessary for contract conclusion.
Cookies
Our website uses cookies. Cookies are small text files saved by your browser on your computer. Cookies allow our systems to recognize your browser and offer services. You can manage cookies through your browser settings. Deleting cookies may reduce website functionality.
Technically necessary cookies are used to ensure optimal website functionality, user-friendly services, and secure usage. Processing is carried out on the basis of Art. 6(1)(f) GDPR. You may object to this processing: onlineshop@monari.com.
Use of Usercentrics
Our website uses the consent management tool Usercentrics GmbH. The tool documents consent for cookies and processing of personal data. Data is processed based on Art. 6(1)(c) GDPR. More info: https://usercentrics.com/privacy-policy/
Analysis / Advertising tracking
Use of Google Analytics 4
We use Google Analytics 4 to analyse website use, marketing and advertising. Data may include IP address, page views, clicks, location data, purchase activity. Google Signals enables cross-device tracking. Opt-out info: link, data processing.
Use of Hotjar
Hotjar records visitor behavior (heat maps, scrolling, clicks) for website optimization. Data is pseudonymized and may be transferred to the USA with protective measures. Consent required: Art. 6(1)(a) GDPR. More info: Hotjar Privacy
Use of Microsoft Clarity
Microsoft Clarity tracks website usage for optimization (heatmaps, session recordings). IP anonymized. Data may be processed in the USA under TADPF. Consent required: Art. 6(1)(a) GDPR. More info: link, link
Use of Meta Pixel & Custom Audiences
Meta Pixel collects data for interest-based advertising on Facebook/Instagram. Meta Custom Audiences creates target groups. Consent required: Art. 6(1)(a) GDPR. Data may be transferred to the USA under EU-US Data Privacy Framework. More info: Meta Privacy
Use of the Meta Conversions API (CAPI)
• Event data (e.g. pages visited, purchases or form submissions)
• HTTP header information (e.g. IP address, browser type)
• Device and browser identifiers
• Hashed values of personal data (e.g. hashed email address or phone number, if provided)
Use of Google Ads / AdSense / Remarketing
Google Ads & AdSense display targeted ads, track conversions, remarketing. Data may be transferred to USA under EU-US DPF. Consent required: Art. 6(1)(a) GDPR. Opt-out info: link, privacy
Use of Microsoft Advertising
Microsoft Advertising tracks conversions and ad clicks. Data may be transferred to USA under TADPF. Consent required: Art. 6(1)(a) GDPR. More info: link
Use of Criteo
Criteo displays personalized banner ads. Data is pseudonymized and may be transferred to third parties. Consent required: Art. 6(1)(a) GDPR. More info: Criteo Privacy
Plug-ins
Use of SizeKick
On this website, users have the option of using the size recommendation solution from sizekick GmbH (Rosa-Bavarese-Str. 3, 80639 Munich) to receive personalised size advice. This creates size measurements to determine clothing sizes based on the data provided by you. For this purpose, the following personal data is processed:
- Biological gender
- Age
- Weight
- Height
- Selected body shape from suggested options
- Size recommended by the solution
- Size actually added to the shopping basket by the user
- Size actually purchased by the user
- Sizekick Unique User ID
The use of Sizekick's size recommendation solution is entirely voluntary and it is a conscious decision by the user to provide Sizekick with personal data that will be used to provide the user with the best possible size recommendation. The legal basis for this processing is therefore your consent in accordance with Art. 6 (1) ( a) GDPR.
You can find more information about Sizekick's privacy policy here.
Application process via d.vinci
For the management of applications, we use the applicant management system of d.vinci HR-Systems GmbH, Nagelsweg 37-39, 20097 Hamburg. The application data you provide (e.g. master data, contact details, documents such as CV, certificates, qualifications) is processed solely for the purpose of handling your application.
Legal basis
The legal basis is Art. 6 (1) ( b) GDPR (pre-contractual measures), if applicable Art. 6 (1) ( a) GDPR (consent, e.g. inclusion in a talent pool) as well as Art. 6 (1) ( f) GDPR (legitimate interests, such as the defense against legal claims).
Retention period
As a rule, the data will be deleted no later than 6 months after completion of the application process, unless statutory retention periods apply or consent to longer storage (e.g. in the talent pool, max. 2 years) has been given.
Order processing & server location
d.vinci acts as a processor on our behalf and ensures GDPR-compliant processing in accordance with Art. 28 GDPR. Processing takes place exclusively on servers in Germany.
Your rights
You have the following rights towards us:
- Access
- Rectification
- Erasure
- Restriction of processing
- Objection
- Data portability
- Withdrawal of consent
Use of the Google Tag Manager
Our website uses the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). This application manages JavaScript tags and HTML tags which are used in particular to implement tracking and analysis tools. The data processing serves to facilitate the needs-based design and optimisation of our website. The Google Tag Manager itself neither stores cookies nor processes personal data. It does, however, enable the triggering of further tags which may collect and process personal data. You can find more detailed information on the terms and conditions of use and data protection at Google Tag Manager.
Use of Google invisible reCAPTCHA
Our website uses the invisible reCAPTCHA service by Google Ireland Limited to distinguish human input from automated bots. Google collects and analyses usage data, including IP address, to provide this service. Data may be processed in the EU and, if necessary, in the USA under the Trans-Atlantic Data Privacy Framework (TADPF). Consent required: Art. 6(1)(a) GDPR. More info: Google reCAPTCHA and Google Privacy.
Use of Smoxy
On our website, we use the Content Delivery Network, Smoxy CDN of Smoxy GmbH (Horstweg 24, 14059 Berlin, Germany) to optimise loading times. Data may include IP address, system configuration, and traffic data. Data may be transferred to the USA under TADPF. Processing is based on Art. 6(1)(f) GDPR. You may object at any time: onlineshop@monari.com. More info: Smoxy Privacy.
Use of Google Maps
Our website embeds Google Maps (Google Ireland Limited). Google collects data of visitors, which may also be transferred to the USA under TADPF. Consent required: Art. 6(1)(a) GDPR. More info: Google Privacy Policy.
Use of YouTube
Our website embeds YouTube videos (Google Ireland Limited). Advanced privacy mode is enabled. Data may be transferred to the USA under TADPF. Consent required: Art. 6(1)(a) GDPR. More info: YouTube Privacy.
Sharing personal data with third parties
We only share your personal data with third parties to the extent necessary for the provision of services, and if required by law with public authorities. Third parties processing data on our behalf are bound to GDPR obligations.
Rights of persons affected and storage duration
Duration of storage
After contractual processing has been completed, the data is initially stored for the duration of the warranty period, then according to legal retention periods, and then deleted unless consent for further processing exists.
Rights of the affected person
You have rights under Art. 15–20 GDPR: access, correction, deletion, restriction, data portability, and objection against processing under Art. 6(1) GDPR or for direct marketing (Art. 21(1) GDPR). Requests to: onlineshop@monari.de. Response within four weeks.
Right to complain to the regulatory authority
You can complain under Art. 77 GDPR at www.autoriteitpersoonsgegevens.nl.
Right to object
If processing is based on legitimate interests (Art. 6(1)f) GDPR), you may object at any time for reasons related to your situation. If objection is successful, processing ceases unless compelling grounds exist.
Changes
We reserve the right to change our Privacy and Cookie statement and will post updates on our website.
Questions and contact
If you have questions, comments, or complaints regarding this privacy statement or your personal data, please contact us.