top of page

Privacy Policy

This privacy policy outlines how M by Monica uses and protects the information you provide when using the website www.mbymonica.com.

​

Data Controller

The data controller is M by Monica, and you can contact us via:

​

Scope of the Privacy Policy

This Privacy Policy applies to data directly provided by the respective data subject or collected through their access to our website.

​

What Information We Collect

  • Name: To identify you as our customer and/or website user.

  • Email Address: For all communications related to your orders.

  • Address: For sending your orders or accounting documents.

  • Mobile Number: For order-related matters if email contact is not possible for some reason.

  • Tax Identification Number: For billing purposes.

  • Order History: For consulting in your customer area and for statistical sales analysis.​

​

Personal Data Processing and Consent

By providing your personal data to M by Monica, you consent freely, informed, specific, and unequivocally that they be processed for the purposes described in this Privacy Policy. Consent is given by filling out a checkbox.

​

Purpose of Data Collection

We need this information to understand your needs and provide you with better service, particularly for the following purposes:

  • Order Processing: Including sending, billing, and returns, based on the legal basis of executing a purchase and sale contract.

  • Historical Data: Recording purchased products, amounts paid, payment methods, dates, and delivery addresses.

​

Data Retention Period

The period during which personal data is stored and kept varies according to the purpose for which the information is processed. There are legal requirements obliging data to be kept for a minimum period. Where no specific legal requirement exists, data will be stored and retained only for the minimum period necessary for the purposes that motivated its collection or subsequent processing, in terms defined by law.

​

Data Sharing with Third Parties

We share your data with partner companies for specific purposes. We ensure that these companies comply with the GDPR and this privacy policy. We may share shipping data (name, address, and phone) with:

  • CTT – Correios de Portugal, S.A.: Contact via phone 210471616 or email informacao@ctt.pt

​

Security

We are constantly committed to ensuring your information is secure. To prevent unauthorized access or disclosure, we have put in place appropriate physical, electronic, and administrative procedures to safeguard and secure the information we collect online, limiting access to stored data to specifically authorized employees.

​

Rights of Data Subjects

M by Monica, in compliance with the GDPR, guarantees data subjects the following rights:

  1. Right of Access: Right to obtain information about which of your personal data is being processed, the purposes of the processing, and the conservation periods, among others.

  2. Right to Rectification: Right to request the rectification of your personal data that is inaccurate or request that incomplete personal data be completed, such as address, VAT number, email, telephone contacts, or others.

  3. Right to Erasure: Right to obtain the erasure of your personal data, provided there are no valid grounds for its retention, such as cases where M by Monica is obliged to keep the data to comply with a legal obligation or because a judicial process is ongoing.

  4. Right to Portability: Right to receive the data you have provided in a current digital format and of automatic reading.

  5. Right to Restriction: Right to request the restriction of the processing of your personal data, in the form of (i) suspension of processing or (ii) limitation of the processing scope to certain data categories or purposes.

  6. Right to Withdraw Consent or Right to Object: Right to object or withdraw your consent, at any time, to data processing based solely on that consent, such as in the case of data processing for marketing purposes, provided there are no legitimate interests overriding your interests, rights, and freedoms, such as the defense of a right in a judicial process.

  7. Right to Complain: Right to lodge a complaint with the national supervisory authority, the CNPD.

These rights can be exercised through the following contacts:

Responses to your requests can be provided in writing or by telephone.

​

Links to Other Sites

Our site may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over those other websites. Therefore, we cannot be responsible for the protection and privacy of any information you provide whilst visiting such sites, and such sites are not governed by this privacy statement. You should look at the privacy statement applicable to the website in question.

​

Personal Data Breach

In case of a personal data breach, the controller shall notify the supervisory authority without undue delay and, where feasible, not later than 72 hours after having become aware of it, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons.

​

CNPD Contact Information:

Métodos de Pagamento
bottom of page