Last review: 01/12/2022
INTRODUCTION
This privacy policy describes the processing of personal data carried out by Mango on the company website with the personal data of our visitors.
1. Who IS THE DATA CONTROLLER FOR YOUR DATA?
The data controller of the personal data collected and processed through the use of MANGO’s website, the MANGO app or the devices found in our physical stores, as well as those derived from your relationship with MANGO, is PUNTO FA, S.L. (“MANGO”), with Tax Identification Number B-59.088.948. You can contact MANGO through the following channels:
• Postal address: Atención al Cliente, carrer dels Mercaders 9-11 (Polígono Industrial Riera Caldes), 08184 Palau-solità i Plegamans (Barcelona), Spain.
• Telephone number: (+34) 900 150 543
• Email address: personaldata@mango.com
MANGO has appointed a data protection officer who is responsible for the processing of personal data. Should you have any questions or concerns regarding your personal data, please contact the data protection officer directly by email (dpo@mango.com) or at the following postal address: Oficina DPO, carrer dels Mercaders 9-11 (Polígono Industrial Riera Caldes), 08184 Palau-solità i Plegamans (Barcelona), Spain.
2. WHAT TYPE OF PERSONAL INFORMATION DOES MANGO COLLECT AND PROCESS?
In particular, MANGO may collect the following data and/or categories of data directly from your relationship and use of our services: i) identification and contact data; ii) data regarding the use of MANGO's company website and browsing in accordance with the provisions outlined in the Cookies Policy.
3. FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA AND WHAT IS THE LEGAL BASIS FOR THIS?
MANGO may process your personal data for the following purposes:
A) PROFESSIONAL CONTACT RELATED TO COMMUNICATION, COMPLIANCE AND SUSTAINABILITY
• Managing your contact for any enquiry or question you may send us via the emails published on the company website or the postal address provided.
o The legal basis that legitimises the processing of your data for this purpose is MANGO’s legitimate interest in properly resolving and processing the proposals, requests or enquiries that you make through the channels available on the MANGO company website, whereby neither your rights nor freedoms are in any way affected by responding to said enquiries.
4. HOW LONG DO WE STORE YOUR PERSONAL DATA?
In order to ensure that the personal data is adequate, relevant and limited to what is necessary for the purposes for which it is processed, MANGO will only retain your personal data for the period necessary to fulfil its purpose, taking into account the need to respond to issues or problems that may arise, to make improvements, to activate services and to comply with the relevant legal requirements. This means that we may retain your personal data for a reasonable period of time, even after the processing has ended. After this period, your personal data will be blocked in all MANGO systems for the sole purpose of making it available to the competent authorities, to comply with any administrative or judicial obligations and to assert or defend claims. Once the personal data blocking period has expired, it will be permanently deleted.
5. WHO DO WE SHARE YOUR PERSONAL DATA WITH?
Your personal data will only be disclosed to third parties in compliance with the applicable legal obligations, such as Public Administrations and/or Public Bodies, should it be required by tax, labour, social security or other applicable regulations.
Please note that MANGO may engage third parties who have access to your data resulting from the provision of services after our relationship has been settled. These third parties may provide technical services to us.
Under no circumstances will MANGO sell your personal data to third parties.
6. INTERNATIONAL TRANSFERS
International data transfers may take place if the companies with which MANGO shares your data are located outside the European Economic Area. These are lawful, as adequate safeguards are in place to protect the personal data. In cases where the country of destination is not considered appropriate, MANGO regulates the relationship with the third party recipient of the data by signing the relevant Standard Contractual Clauses adapted by the European Commission, the content of which can be consulted at the following link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.
These countries, which do not have an adequacy decision from the European Commission, may be, mainly: the United States.
In any case, other countries with which certain personal data is exchanged have previously confirmed the adoption of adequate technical and organisational measures to ensure the correct protection of said data.
7. HOW DOES MANGO PROTECT YOUR PERSONAL DATA?
The MANGO company website uses information security techniques such as firewalls, automated systems to defend against attacks, access control procedures and cryptographic mechanisms to prevent unauthorised access to data and ensure its confidentiality. Security audits are also conducted regularly in order to carry out risk assessments and frequent checks. You, therefore, agree that MANGO may receive data for the purposes of the appropriate authentication of access controls.
MANGO declares that it has taken all necessary technical and organisational measures to ensure the security and integrity of the personal data it processes and to prevent its loss, alteration and/or access by unauthorised third parties.
8. WHAT ARE YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA?
You are entitled to the rights set out below. You may exercise these rights by sending an email to personaldata@mango.com. In order to process your request to exercise your rights, we may ask you to prove your identity.
Right of access:
You have the right to obtain confirmation as to whether or not MANGO is processing personal data concerning you, as well as the right to access any personal data that MANGO may have about you.
Right to rectification:
You have the right to ask MANGO to correct your personal details if they are inaccurate or to complete them if they are incomplete. If you have a user account, you must correct your data directly by accessing the “My Data” section of your profile.
Right of deletion:
You may ask us to delete your personal data if, among other things, it is no longer necessary for the purposes for which it was collected.
Right of restriction:
You have the right to request the restriction of the processing of your data. In this case, we will only retain the data for the purpose of asserting or defending claims.
Right of portability:
You have the right to receive your personal data in a structured, common and machine-readable format and to transfer it to another data controller if the processing of your data is based on consent or results from the performance of a contract, provided that it is carried out by automated means.
Right to object:
You may object to the processing of your personal data on the basis of the public or legitimate interest pursued by MANGO, including profiling. In this case, MANGO will stop processing the data, unless there are compelling legitimate grounds or the processing is necessary to assert or defend legal claims. You also have the right to object to the processing of data for direct marketing purposes.
Automated individual decisions:
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. However, it is not possible to exercise this right if the decision is necessary for the conclusion or performance of a contract between you and MANGO; is permitted by the law applicable to MANGO, provided that it employs reasonable measures to safeguard your rights, freedoms and legitimate interests; or is based on your express consent.
Right to lodge a complaint:
You have the right to lodge a complaint with the competent local supervisory authority, which in Spain is the Spanish Data Protection Agency (www.aepd.es).
9. CHANGES TO THE PRIVACY POLICY?
This privacy policy will always be available. However, if we make any material and relevant changes to its content, we will notify you via the Web/App or via your email address, thereby complying with the duty to inform under the GDPR. This will allow you to exercise your rights as a data subject if you so wish.
