Who is the data controller for the processing of your data?
The data controller for the collection and processing of personal data from the corresponding forms on the MANGO website, app or any of the devices that you will find in our physical stores , as well as the data derived from your relationship with MANGO is PUNTO FA, S.L. (“MANGO”), holding corporate Tax ID B-59.088.948 and PT MITRA FASHINDO ABADI, holding corporate Tax ID 03.271.213.5-022.00.
The MANGO contact details are as follows:
- Postal address: Customer Services, C/ Mercaders 9-11 (Polígono Industrial Riera Caldes), 08184 Palau-Solità i Plegamans (Barcelona).
- e-mail: personaldata@mango.com
The PT MITRA FASHINDO ABADI contact details are as follows:
28th floor, Sahid Sudirman Center,
Jalan Jendral Sudirman Kaveling 86
Central Jakarta
10220 Indonesia
You are hereby informed that MANGO has appointed a Data Protection Officer to deal with any issue relating to the processing of your personal data. In this regard, you may contact the Data Protection Officer via the following contact details: dpo@mango.com; postal address: DPO Office, Carrer dels Mercaders 9-11 (Polígono Industrial Riera Caldes), 08184 Palau-Solità i Plegamans (Barcelona), Spain.
What type of personal information does mango collect?
MANGO and PT MITRA FASHINDO ABADI may collect from your relationship and use of our services, the following data and/or data categories: i) identification and contact data; ii) personal data; iii) financial data, such as credit card data (PAN+CVV2), in compliance with PCI DSS standards, which will be used for payment processing whenever you purchase any of our items or, in the case of returns for transfers, the account number for which we need to process the refund of your purchase; iv) user data of the MANGO website or app and browsing, in accordance with the cookies policy.
For what purpose do we process your personal data?
Your personal data will be processed for the following purposes, whichever apply:
A) CREATION OF A USER ACCOUNT
Manage your registration, which will involve the creation of a MANGO user account. This account will allow you to centralise any issue relating to your user status, and give you access to certain functions available and reserved for those with said status. For example, having a user account will allow you to store certain information that may be used in future purchases and/or interactions with MANGO.
- The lawful basis for processing your data for this purpose is the execution of a contract understanding as such the Conditions of Sale accepted.
B) PURCHASE OF MANGO PRODUCTS
Process the purchase of items via the different purchasing channels enabled by MANGO and PT MITRA FASHINDO ABADI. This procedure consists in taking all appropriate steps in order to manage your purchase and, wherever applicable, guarantee the correct delivery of your order, in addition to undertaking any procedure related to the sale of the item and, wherever applicable, managing the return of items.
To do this, we will be able to send you information about the status of your purchase by e-mail, SMS and/or any other channel available at any moment.
- The lawful basis for processing your data for this purpose is the execution of a contract, understanding as such the Conditions of Sale accepted at the moment of purchasing the items. The processing of your data is necessary in order to guarantee the fulfilment of the rights and obligations contained in the Conditions of Sale.
With regard to the processing of online purchases, MANGO, as Data Controller, will carry out the corresponding actions for the prevention, detection and control of abuse and fraud in the use of our services, which may result in the existence of automated decision making.
Said automated decisions shall consist of the analysis of behaviour in the payment process which, in general terms, will use data relating to the purchasing process and the purchase history, in order to determine whether the transaction may be considered fraudulent. This information will allow us to detect and try to prevent fraudulent practices in payment transactions, allowing us to reject purchases and consequently protect both you, as a data subject (in the case of identity theft), and MANGO as a service provider and data controller.
- The lawful basis for the fulfilment of this goal is the legitimate interest of MANGO to analyse all operations that occur in the payment process of the items it sells, in order to guarantee that no financial fraud occurs that may impact negatively either on itself or its customers. In this regard, we consider that there is a general interest for the processing to help generate, improve and maintain public confidence in the financial relationships developed through the payment methods made available by MANGO in its online commerce, in order to prevent public mistrust resulting from fraud or fraudulent activity in the same.
We inform you that, in this case, MANGO has compelling and legitimate reasons to enable the processing of your data for this purpose, for which your right to opposition in accordance with the provisions of article 21.1 of the General Data Protection Regulation shall not apply.
You can obtain more information about said evaluation by making a direct request to our Data Protection Officer.
In cases where you are registered as a user and purchase one of our items via the website or app, we may carry out the following data processing:
- Save your credit card details for use in future purchases.<ul><li>The lawful basis for the processing or your data is the express consent given by you for us to save this information for use in future purchases, without prejudice to the legitimate use of your credit card data in the execution of a contract, in line with what is indicated in the previous section.
</li>To show you as a priority recommendations of similar content, in accordance with your purchase history or browsing on our website or app.<ul><li>The lawful basis for the processing of your browsing data is the express consent given by you when accepting the cookies. Furthermore, in order to analyse your purchase history, after balancing your interests as the affected data subject, and those of MANGO as the data controller, it has been determined that the lawful basis that legitimises the processing or your data is a legitimate interest, deeming that it is in the interest of all the parties involved that items which may be of interest to the consumer are shown as a matter of priority. In this way, showing items that may reflect the priorities of the user in question as a matter of priority will allow MANGO to offer you a better quality service and a more positive user experience, while giving MANGO a reputational benefit based on the fact that users will have a positive browsing and shopping experience on our website and app.</ul></li></ul>You can obtain more information about said evaluation by making a direct request to our Data Protection Officer.
C) CONFIGURE YOUR RELATIONSHIP WITH MANGO AS A BRAND
Newsletter: management and sending of information on exclusive promotions and new products adapted to your profile, sending of audiences via digital platforms, and notifications relative to pending garments and accessories in your shopping bag via e-mail, SMS WhatsApp, post or any other communication channel and/or online platform. This includes promotional actions, such as, for example, the management of competitions and prize draws organised by MANGO. In cases where receiving commercial notifications via different channels is accepted, personal data may be used to personalise notifications via online means.
- The lawful basis for the processing of your data is the express consent you have given. Under no circumstances will the withdrawal of consent affect the lawfulness of the processing based on consent prior to withdrawal.
Management of the garment and accessory availability alert service through our Mango app, email, SMS, WhatsApp, or any other communication channel and/or digital platform.
- The lawful basis for the processing of your data for this purpose is the express consent given by you, which may be withdrawn at any moment without said withdrawal affecting the lawfulness of the processing based on consent prior to withdrawal.
Respond to the exercise of rights recognised in the data protection legislation.
- The legal basis for the processing of your data is the fulfilment of a legal obligation with regard to managing the exercise of rights, in accordance with the obligation contained in the General Data Protection Regulation.
Attend to queries, requests and potential complaints you may make via the Customer Services channel.
Depending on the reason you are contacting MANGO and/or PT MITRA FASHINDO ABADI, the lawful basis for the processing of your data may vary. Consequently:
- We consider that the controller has a legitimate interest in resolving and correctly attending to any suggestions, queries and requests you may make via the Customer Services channel on the understanding that, under no circumstances, will your rights and/or freedoms be affected or prejudiced by the fact that we are responding to a request initiated by you.
- In cases where this relates to an order that needs to be attended to in order for formalise the purchase, the lawful basis for the processing of your data is the execution of a contact, understanding as such the Conditions of Sale.
- In cases where your data is processed to attend to a complaint sent via the Customer Services channel, the lawful basis for the processing of your data is the fulfilment of a legal obligation contained in the General Law for the Defence of Consumers and Users.
Following the rendering of one of our services, sending you quality surveys aimed at knowing your opinion and degree of satisfaction with your relationship with MANGO and PT MITRA FASHINDO ABADI. The information collected from the survey will allow us to create and improve our services and procedures, said experience being of considerable interest to us.
- The lawful basis for the processing of your data is a legitimate interest. Our legitimate interest consists of being able to guarantee you that our web/app is secure, and to help the controller understand the needs, expectations and your degree of satisfaction with the brand and therefore improve our services at all times. All these actions will be carried out to improve your degree of satisfaction and guarantee a unique browsing and shopping experience, via aggregated analysis.
Mango store search service. In cases where you are registered with your account, Mango will process your personal data in order to provide you this service, indicating the nearest stores to the address you have entered manually in the search engine enabled for this purpose on both the website and the app.
- The lawful basis for the processing your location for this purpose is a legitimate interest. Our legitimate interests consists of being able to provide the requested service in the most precise and speedy manner, and consequently improve the services we provide via our web/app. All of these actions are carried out in order to improve your degree of satisfaction with the products and services offered by MANGO.
How long do we keep your personal data?
In order to guarantee that the personal data are appropriate, pertinent and limited to what is necessary for the purposes for which they are processed, MANGO and PT MITRA FASHINDO ABADI will keep your personal data only for a period that is reasonably necessary to fulfil the purpose for which they were collected, given the requirements to respond to issues that are raised or to resolve problems, make improvements, activate services and fulfil the requirements of the applicable legislation. This means that we may keep your personal data for a reasonable time, including after you have stopped using the services of MANGO and PT MITRA FASHINDO ABADI and/or have stopped using the web/app. After this period, your personal data will be blocked in all MANGO systems for the sole purpose of making them available to the competent authorities in order to attend to any potential administrative or legal responsibilities and the exercise or defence of complaints. Once the blocking period for personal data has passed, they will be permanently deleted.
Who do we share your personal data with?
Your personal data will only be communicated to third parties in order to comply with any legal obligations that may apply in each case, for example, to Public Authorities and/or Bodies whenever required by the applicable legislation.
In cases where you make a purchase on our website or app, your data may be communicated, wherever applicable, to financial institutions and payment service providers, fraud detection and prevention organisations, and logistics, transport and goods delivery suppliers. Such communications are strictly necessary in order to guarantee the delivery of your order.
You are also informed that MANGO or PT MITRA FASHINDO ABADI may contract third parties that will have access to your data as the result of a service provision we have entered into. Such third parties may provide technology, marketing and advertising services, among others, and in all cases will process your data in accordance with the instructions of MANGO or PT MITRA FASHINDO ABADI and never for their own aims.
MANGO or PT MITRA FASHINDO ABADI shall not, under any circumstances, sell your personal data to third parties.
Data not collected directly from the data subject
In certain services offered via the web/app, such as Gift Cards, the user may provide personal information to the recipient of the same. In this case, MANGO and PT MITRA FASHINDO ABADI will also comply with its obligations in accordance with the provisions contained in the data protection legislation, processing them solely for the purpose for which they have been provided to us.
How do we protect your personal data?
The web/app uses data security technologies such as firewalls, access control procedures and cryptographic mechanisms to prevent any unauthorised access to data and guarantee data confidentiality, and to conduct periodic security audits in order to carry out risk assessments and frequent controls. In order to achieve said aims, users accept that MANGO will obtain data for the purpose of authenticating access controls.
Furthermore, all transactions via the web/app will be made via secure payment systems. Confidential payment details are transmitted directly in encrypted format (SSL) to the corresponding entity.
MANGO declares that it has adopted all the technical and organisational measures necessary to guarantee the security and integrity of the personal data it processes, and to prevent the loss, alteration and/or unauthorised use of the same by third parties.
What are your privacy rights in relation to your personal data?
You have the following privacy rights, which may be exercised via the e-mail address personaldata@mango.com . In order to process your request to exercise your rights, we may ask you to provide proof of your identity.
Right of acces | You have the right to obtain confirmation whether at MANGO or PT MITRA FASHINDO ABADI processing personal data that concern you, or otherwise, and to access the personal data MANGO or PT MITRA FASHINDO ABADI possesses about you. |
Right to rectification | You have the right to request that MANGO or PT MITRA FASHINDO ABADI rectifies personal data when they are incorrect or for them to be completed when they are incomplete. If you are registered in our web/app, it may be simpler for you to correct them directly by modifying your profile. |
Right to erasure/right to be forgotten | You can request that your personal data is erased when, among other reasons, the data is no longer necessary for the purposes for which they were collected. |
Right to restrict processing | You have the right to request the restriction of the processing of your data, in which case we will only keep them for the exercise or defence of legal claims. |
Right to data portability | You have the right to receive personal data in a structured, commonly used and machine readable format, and to transmit them to another controller when the treatment is based on consent or a contract, and is transmitted electronically. |
Right to object | You can object to the processing of your personal details based on the public or legitimate interest pursued by MANGO or PT MITRA FASHINDO ABADI, including the profiling of data. In this case, the controller will stop processing the data, except for compelling legal grounds or the exercise or defence of possible legal claims. You also have the right to object to the processing of data for direct marketing purposes. |
Automated individual decisions | Wherever this applies, you have the right not to be subject to a decision based solely on automated processing, including data profiling, which has a legal or similarly significant effect on you. However, it will not be possible to exercise said right in cases where the decision is necessary for the formalisation or execution of a contract between you and MANGO or PT MITRA FASHINDO ABADI; it is authorised by the law applicable to MANGO or PT MITRA FASHINDO ABADI whenever it establishes the appropriate measures to safeguard your rights, freedoms and legitimate interests; or where it is based on your explicit consent. |
Right to lodge a complaint | You have the right to lodge a complaint before the competent local Supervisory Authority. |
Modifications to the privacy and cookies policy?
This privacy policy will be available at all times. However, in cases where we modify the content of the same in a substantial and significant way, we shall notify you via the web/app or to your e-mail address, in order to comply with the duty of information contained in the GDPR and the Personal Data Protection Law in Indonesia.
Consequently, if you wish, you may exercise your rights as a data subject.
Cookies Policy
What are cookies and how are they used?
Cookies are files installed on the computer, telephone, tablet or any other device of the user designed to record its activity during the browsing session on the present webpage and/or mobile application of MANGO (“Web/App”).The use of cookies allows the server in which the Web/App is located to recognise the browser used by the user, granting the registered user, for example, access to the areas and services without having to register in each visit and record his/her preferences with regard to language, country, etc. in future visits.Cookies are also used to measure the audience and traffic parameters, monitoring the progress and number of entries.
What are cookies on this webpage not used for?
We do not store sensitive personal identification information such as your address, password, etc. in the cookies we use.
Who uses the information stored in the cookies?
The information stored in the cookies of the Web/App is used by Punto Fa, S.L.(“MANGO”), with Corporate Tax ID no.B-59.088.948:
- Postal address: C/Mercaders, 9-11 (Polígono Industrial Riera Caldes) 08184 Palau-solità i Plegamans (Barcelona, Spain).
- Telephone no.: 0800 026 0028
- e-mail: personaldata@mango.com
What type of cookies does Mango use?
Below we indicate the types of cookies used in the MANGO Web/App according to their use and the organisation that manages them (first and third-party cookies).
Purpose | Description |
Performance Cookies | These allow us to count the visits to the Web/App and traffic sources, quantify the number of users, and therefore measure and conduct statistical analysis on the use made by users. |
Functional Cookies | These allow you to access the service with predefined characteristics in accordance with a series of criteria, for example, the language, the type of browser used to access the service, the regional configuration where the service is being accessed from, etc. |
Strictly Necessary Cookies | These are necessary for the browsing and the optimal performance of our Web/App.For example, they make it possible to monitor the traffic and communication of data, access restricted areas, perform the purchasing procedure for an order, use security elements, store content in order to broadcast videos or share content via social networks. |
Targeted Cookies | These cookies store information on the behaviour of users obtained through their browsing on the Web/App so that we can show you advertising related to your browsing profile. |
Social Media Cookies | These consist of a series of social media services we have added to the webpage to allow you to share our content with your friends and networks. |
Management |
|
First-party cookies | These are cookies that are created or managed by MANGO, with responsibility for the Web/App. |
Third-party cookies | These are cookies that are managed by service providers external to MANGO.The third parties are listed in the "Set cookies" panel. |
How to disable cookies in the most commonly-used web browsers
You can allow, block or delete the cookies installed on your computer in the settings options of your web browser.If you block them, certain services that require their use may not be available to you.
Below, we provide some links to information on how to enable your preferences on the most commonly-used web browsers:
If you have accepted the third-party cookies, you can delete them from your web browser options or from the system offered by the third-party itself.
Conservation periods
MANGO will keep the personal data only for a period that is reasonably necessary given the requirements to respond to issues that are raised or to resolve problems, make improvements, activate its services and fulfil the requirements of the applicable legislation.This means that it may keep the personal data for a reasonable time, including after the interested party has stopped using the services of MANGO or has stopped using the WEB/APP.After this period, the personal data will be blocked on all MANGO systems.
The validity of the consent given will not have a duration in excess of 13 months and once this period has elapsed it will request a new consent when you visit our WEB/APP.
Data transfers to third countries
In general, the data processing will be carried out by service providers located in the European Economic Area or in countries that have been declared to offer an adequate level of protection.
International data transfers may also occur between the communications hubs of the same to third countries, in which case MANGO shall use the Standard Contractual Clauses adapted by the European Commission as a safeguard for transfers made to countries that are not covered by an adequacy decision of the European Commission.In all cases, third parties sharing certain personal data will have previously accredited the adoption of suitable technical and organisational measures for the correct protection of the same.
MANGO does not, under any circumstances, sell customer data to third parties.
The third countries to which international data transfers are made are Russia, the UnitedStates and Canada.
You can find out more information about transfers to third countries made by the third parties identified in this Cookies Policy, wherever applicable, in their corresponding policies.
How to manage your consent preferences
You can configure the categories of optional cookies by clicking on the cookie settings button below: