privacy policy

Personal Data Protection Policy

Monboli.com

Last updated: [to be completed]

At Monboli.com, we place the utmost importance on the confidentiality of your personal data. This Personal Data Protection Policy (hereinafter the “Policy”) aims to inform you in a clear, transparent, and accessible manner about the terms and conditions of collection, processing, use, storage, and sharing of your personal data in connection with the use of the website www.monboli.com (hereinafter the “Site”), including its Marketplace.

Applicable legal framework

Concerned about the protection of personal data, the company  [Company name of Monboli.com] , acting as  Data Controller , undertakes to comply with the provisions of  Law No. 78-17 of January 6, 1978  , as amended, relating to information technology, files and freedoms (hereinafter the “LIL”), as well as those of  Regulation (EU) 2016/679 of April 27, 2016  relating to the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter the “GDPR”).

1. Fundamental principles

Monboli.com is committed to respecting the following principles:

•  You remain in control of your personal data;

•  Your data is processed in a transparent, secure and confidential manner;

•  No data is collected without necessity or without a clear legal basis.

2. Definitions

Terms beginning with a capital letter have the following meanings:

2. Definitions

•  Personal data  : any information concerning you that allows you to be identified  directly  (surname, first name) or  indirectly  (email address, username, IP address, etc.).

•  Processing  : any operation relating to personal data, whatever the process used: collection, recording, consultation, transmission, deletion, etc.

•  User  : any person accessing the Site, whether a simple Internet user, Buyer or Seller.

•  Buyer  : natural or legal person purchasing products via Monboli.com.

•  Seller  : professional selling their products via the Monboli.com Marketplace.

•  Marketplace  : platform allowing Sellers to offer their products to Buyers.

•  Site  : all pages and services accessible via www.monboli.com .

•  Data controller  : Monboli.com, in its capacity as publisher of the Site.

3. What data do we collect?

a) Identity and contact data

•  Name, first name, title

•  Email address, telephone number

•  Postal address (delivery/billing)

•  Date of birth, sector of activity (if applicable)

•  Login credentials (email + encrypted password)

•  Status (individual or professional)

b) Purchase-related data

•  Order history

•  Products purchased, references, quantities, amounts

•  Billing information, vouchers, discounts

•  Product returns, complaints, after-sales service

•  Exchanges with our customer service

c) Data from the use of the site

•  Pages visited, products viewed, items added to cart

•  Wish lists, preferences

•  Results of surveys, quizzes, competitions

•  Browsing data: IP address, language, terminal, browser, history

d) Data from your interactions

•  Published reviews, comments

•  Requests via contact form or chat

•  Appointments, telephone exchanges

•  Tax refund forms (if applicable)

4. How and when do we collect your data?

Data is collected:

•  When browsing the Site

•  When creating your account

•  When placing an order (including Marketplace)

•  Payment via our approved service provider

•  When you participate in a competition or loyalty program

•  When contacting our customer service

•  When posting reviews or comments

•  When opening our newsletters or advertising campaigns

•  When accepting cookies or tracers

They may also be transmitted to us by a third party, with your consent (sponsorship, business partner, etc.).

5. Sensitive data

Monboli.com does not collect or process sensitive data within the meaning of Article 9 of the GDPR, such as:

•  Racial or ethnic origin

•  Political, philosophical or religious opinions

•  Union membership

•  Health data or sexual orientation

•  Criminal convictions

Please do not enter this type of information  in free text areas (reviews, comments, chat, etc.).

6. Bank details

Your payment data is never stored by Monboli.com.

They are securely managed by our   authorized  Payment Service Provider (PSP) , in accordance with PCI-DSS standards .

7. Legal basis for processing

The processing carried out by Monboli.com is based on the following legal bases:

•  Execution of a contract  (order, delivery, after-sales service)

•  Explicit consent  (newsletter, competitions)

•  Legal obligation  (invoicing, fight against fraud)

•  Legitimate interest  (improving experience, statistics, security)

8. Data of minors

The processing of data of minors under 15 years of age requires  the joint consent of the legal representatives and the minor .

Legal representatives can contact us at contact@monboli.com for any  deletion requests.

9. Recipients of the data

Your data is only accessible to authorized persons or entities:

•  Internal teams (logistics, IT, customer service)

•  Technical service providers (host, PSP, maintenance)

•  Third-party sellers (as part of your orders via the Marketplace)

•  Competent authorities (if legal obligation)

No data is transferred or sold to unauthorized third parties.

10. Cookies and trackers

Monboli.com uses cookies to:

•  Ensure the proper functioning of the site

•  Remember your preferences

•  Analyze the audience

•  Offer you personalized advertisements

In order to optimize the user experience, our site uses cookies, which are small text files saved on your device when you browse.

In accordance with current legislation, only cookies strictly necessary for the proper functioning of the site may be placed without your prior consent. For all other types of cookies, your authorization is required.

We use different types of cookies, some of which may be placed by third-party services present on our pages:

•  Necessary cookies  : essential for the technical functioning of the site (secure access, navigation, etc.).

•  Preference cookies  : allow you to personalize the user interface and improve your browsing comfort.

•  Statistical cookies  : used to analyze site traffic and improve our performance.

•  Marketing cookies  : used to display relevant advertisements based on your interests.

11. Data retention period

12. Your rights regarding personal data

In accordance with the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of access (article 15 of the GDPR)

You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and where it is, to access that data. This includes information about the purposes of the processing, the categories of data concerned, the recipients, the retention period, and the origin of the data if it has not been collected directly from you.

• Right of rectification (article 16 of the GDPR)

If you find that certain personal data concerning you is inaccurate, incomplete or outdated, you have the right to request its rectification or updating as soon as possible.

• Right to object (Article 21 of the GDPR)

You may object, for reasons relating to your particular situation, to the processing of your personal data when such processing is based on our legitimate interest. You may also object at any time to the processing of your data for commercial prospecting purposes.

• Right to erasure (or “right to be forgotten”) (Article 17 of the GDPR)

You can request the deletion of your personal data when:

•  They are no longer necessary for the purposes for which they were collected;

•  You withdraw your consent (where the processing is based on that consent);

•  You object to the processing;

•  The data was processed unlawfully;

•  A legal obligation requires their deletion.

This right may, however, be limited if the data must be retained to comply with a legal obligation or for the establishment, exercise or defense of legal rights.

• Right to portability (Article 20 of the GDPR)

Where the processing of your data is based on your consent or a contract and is carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format. You may also request that these data be transmitted directly to another controller, where technically feasible.

• Right to restriction of processing (Article 18 of the GDPR)

In certain situations, you can request the temporary suspension of the processing of your data, for example:

•  If you contest the accuracy of the data;

•  If the processing is unlawful but you do not want them to be deleted;

•  If you need the data for the establishment, exercise or defense of legal rights;

•  If you have objected to the processing and a verification is in progress on the legitimate grounds pursued.

• Right to define post-mortem directives (article 85 of the amended Data Protection Act)

You have the option to define general or specific guidelines regarding the fate of your personal data after your death (retention, deletion, communication to a designated trusted third party, etc.). These guidelines can be registered with a certified trusted third party or directly with Monboli.

To exercise your rights:

contact@monboli.com

[Monboli.com postal address to be completed]

13. Data security

Monboli.com implements appropriate security measures:

•  Secure data storage

•  Encryption of sensitive data

•  Access restricted to authorized persons only

•  Regular security audits

14. Your rights and remedies

If you have a question, concern or complaint regarding the processing of your personal data, we invite you to contact us so that we can find a suitable solution together.

We are at your disposal to provide you with any additional information on the use of your data, to assist you in exercising your rights (access, rectification, opposition, deletion, etc.), or to respond to any other request related to the protection of your privacy.

You can contact us at any time by email at: contact@monboli.com , or by mail at: [postal address]

In accordance with current regulations, we have one month to respond to your request.

If, after contacting us, you feel that your request has not been dealt with satisfactorily, you have the option of filing a complaint with the competent supervisory authority, in France the CNIL ( www.cnil.fr ).

15. Policy Update

This Policy may be modified at any time.

In the event of major changes, new consent may be requested.

The online version is authoritative.