Privacy Policy and Cookies

The person responsible for the processing of personal information collected and processed through the use of the MANGO app is PUNTO FA, S.L. ("MANGO"), with N.I.F. B-59.088.948. You can contact MANGO through the following means:

• Postal address: Customer Service, Carrer dels Mercaders 9–11 (Polígono Industrial Riera Caldes), 08184 Palau-solità i Plegamans (Barcelona), Spain.
• Email: personaldata@mango.com

MANGO has appointed a data protection delegate whom you can contact and/or raise any issue related to the processing of your personal information by sending an email to dpo@mango.com or in writing by directing your request to the postal address: DPO Office, Carrer dels Mercaders 9–11 (Polígono Industrial Riera Caldes), 08184 Palau-solità i Plegamans (Barcelona), Spain.

MANGO may collect directly from your relationship with and use of our services, mainly the following data and/or categories of data for the purposes indicated below:

i) Identifying data such as:

ii) Contact data such as: e-mail address and postal address.

iii) Personal data such as:

iv) Financial data such as credit card (PAN+CVV2) in compliance with PCI DSS standards which will be used for:

v) Purchase history at MANGO.

vi) The consumption habits and preferences of our customers and browsing history.

vii) Approximate or precise location data.

viii) Device information:

The purposes for which MANGO may process your personal information indicated in the previous point are as follows:

A) CREATION OF A USER ACCOUNT

• To manage your registration, which will entail the creation of an account as a MANGO user. This account will allow you to centralise any question related to your status as a user, as well as giving you access to certain functionalities available and reserved for this consideration. For example, having a user account will allow you to store certain information that may be used in future purchases and/or interactions with MANGO.

Likewise, the creation of your user account, in those countries where the MANGO Likes You loyalty programme is available, will entail your participation in the programme. Registration in this programme may entail discounts and/or benefits in the services of third-party collaborators, as well as discounts for your future purchases in MANGO. In this regard, we inform you that the countries that have the MANGO Likes You loyalty programme advertise it on their respective websites and apps.

• The legal basis that legitimises the processing of your data for this purpose is the execution of a contract, understood as such the accepted Terms & Conditions.
• At the time of account creation. The processing of your data is necessary to ensure compliance with the obligations and rights provided for in the Terms & Conditions.

You can delete your account through this link https://shop.mango.com/gb/account/baja or send the request by e-mail to the following address: personaldata@mango.com

B) PURCHASE OF MANGO PRODUCTS

• To process the purchase of articles made through the different purchase channels provided by MANGO. This management consists of carrying out all the appropriate actions in order to manage your purchase and, where appropriate, guarantee the correct delivery of your order, as well as to carry out any management related to the sale of the article such as, for example, the management and issuing of documents accrediting the purchase and sale such as the simplified electronic invoice, the sales or Tax Free invoice and, where appropriate, managing the return of the articles.

To this end, we may send you information about the status of the purchase by e-mail, SMS and/or any other channel available at any given time.

• The legal basis that legitimises the processing of your data for this purpose is the execution of a contract, this being understood as the Terms & Conditions accepted at the time of purchase of the articles. The processing of your data is necessary to guarantee compliance with the obligations and rights set out in the Terms & Conditions.

• Management of the Mango Gift Card.
• The legal basis that legitimises the processing of your data for this purpose is the execution of a contract, understood as such the Conditions of Use accepted at the time of purchase of the card. The processing of your data is necessary to ensure compliance with the obligations and rights set out in the Conditions of Use.

• In relation to the processing of the online purchase, MANGO, as data controller, will carry out the corresponding actions for the prevention, detection and control of abuse and fraud in the use of our services, for which automated decisions may be taken.

These automated decisions will consist of the analysis of behaviour in the payment process, for which, in general terms, the data of the purchase process and the history of purchases made will be used, in order to be able to check whether the transaction could be considered fraudulent. This information will allow us to detect and try to prevent fraudulent behaviour in payment transactions, and purchases may be denied and, therefore, protect both you as the interested party (in the event of identity theft), or MANGO as the service provider and responsible party.

• The processing of your data for the fulfillment of this purpose is legitimised by MANGO's legitimate interest in analysing all the transactions that take place in the payment process of the products it markets in order to ensure that no economic fraud will take place that could have a negative reputation for itself or its customers. In this sense, we consider that there is also a general interest insofar as the processing helps to generate, improve and maintain public confidence in the economic relations carried out through the means of payment provided by MANGO in its online commerce in order to prevent them from becoming suspicious due to fraud or fraudulent activities.
• We inform you that, in this case, MANGO has compelling legitimate reasons that enable the processing of your data for this purpose, and cannot respond, in this case, to your right of opposition in accordance with the provisions of Article 21.1 of the General Data Protection Regulation.
• You can obtain more information about this assessment by directly requesting it from our data protection officer.

• In the event that you are registered as a user and make a purchase of one of our articles via our platforms, we may carry out the following processing:
• Save your credit card details so that they can be used for future purchases.
• The legal basis that legitimates the processing of your data is the express consent given by you in the sense that we store this information so that it can be used in future purchases without prejudice to the fact that the use of your credit card data is legitimated within the framework of the execution of a contract in line with what is indicated in the previous section. Such consent may be withdrawn at any time without the withdrawal affecting the lawfulness of the processing based on the consent prior to its withdrawal.

C) CONFIGURES YOUR RELATIONSHIP WITH MANGO AS A BRAND

• Newsletter: management and sending of commercial information on exclusive promotions and latest news adapted to your profile, sending of audiences through digital platforms, as well as communications relating to pending garments and accessories in your bag via email, SMS, post or any other communication channel and/or digital platform. This includes promotional actions, such as, for example, the management of competitions or draws organised by MANGO. In the event that you agree to receive commercial communications through different channels, certain personal information may be used to personalise communications in digital media.
• The legal basis that legitimises the processing of your data is the express consent given by you, which may be withdrawn at any time without the withdrawal affecting the lawfulness of the processing based on the consent prior to its withdrawal.

• Management of the service of alerts of availability of garments and accessories on our platforms.
• The legal basis that legitimises the processing of your data for this purpose is the express consent given by you, which may be withdrawn at any time without the withdrawal affecting the lawfulness of the processing based on the consent prior to its withdrawal.

• To respond to the exercise of the rights recognised in the personal information protection regulations.
• The legal basis that legitimises the processing of your data is the fulfilment of a legal obligation with regard to the management of the exercise of rights in accordance with the obligation set out in the General Data Protection Regulation.

• To deal with queries, requests and possible claims that you make through the contact channels provided by Customer Service.
• Depending on the reason for your contact with MANGO, the basis that legitimates the processing of your data may be different. In this sense:
• We consider the existence of a legitimate interest of MANGO in correctly resolving and attending to the suggestions, queries or requests that you may make through the channels provided by Customer Service on the understanding that, in no case, are your rights and/or freedoms affected or harmed by the fact that a response is being given to the request initiated by you.
• In the event that we are dealing with questions related to an order and whose attention is necessary for the formalisation of the purchase, the processing of your data is legitimised by the execution of a contract, being understood as such the Terms & Conditions.
• In the event that your data is processed in order to deal with a complaint or claim sent through the channels provided by the customer service department, your data will be processed in order to comply with a legal obligation provided for in the law on consumers and users.

• After the provision of any of our services, to send you quality surveys aimed at finding out your opinion and degree of satisfaction with your relationship with MANGO. The information collected as a result of the survey will allow us to create and improve our services and procedures, being of great interest for us to have experience.
• The legal basis that legitimises the processing of your data is legitimate interest. Our legitimate interest is to ensure that our platforms remain secure, as well as to help MANGO understand your needs, expectations and satisfaction with the brand and, therefore, to improve our services at all times. All these actions are carried out with the aim of improving your degree of satisfaction and ensuring a unique browsing and shopping experience, such analysis being carried out on an aggregate basis.

• Commercial prospecting and promotional action with the subscription of the Mango financial card, in those countries where it is available.
• The legal basis that legitimises the processing of your data for this purpose is the express consent given by you at the time of applying for the card. Such consent may be withdrawn at any time without the withdrawal affecting the lawfulness of the processing based on the consent prior to its withdrawal.

• Creation of profiles based on behavioural and consumption data collected through your browsing, your interactions with the brand and those derived from your purchase history in order to show you in priority recommendations or content on our platform, according to your tastes, as well as to send you commercial communications adapted to your profile as long as you have given us your consent for this purpose.
• Taking into account the characteristics of the profiling and after the corresponding weighing of your interests as the affected subject, as well as MANGO as the party responsible, it has been determined that the legal basis that legitimises the processing of your data is the legitimate interest, as it is considered in the interest of all parties involved that those articles that may be of interest to the consumer are shown as a priority. In this way, by prioritising the display of articles that may reflect the priorities of the user in question, MANGO will be able to offer you a higher quality service and a much more positive user experience while, at the same time, MANGO's reputation will benefit from the fact that users have a good experience when browsing and shopping on our platforms.

• Taking into account the characteristics of the profiling and after the corresponding weighing of your interests as the affected subject, as well as MANGO as the responsible party, it has been determined that the legal basis that legitimates the processing of your data for the elaboration of your consumer profile in order to be able to send you commercial communications adapted to the interests, tastes and preferences of consumers is the legitimate interest, as it is considered in the interest of all parties involved that personalised commercial communications are sent to you. In this way, the fact of being able to adapt commercial communications to the user's profile will enable MANGO to offer you a higher quality service, as you will only receive communications whose content may be of interest to you, avoiding the sending of generic communications which could be excessive or unattractive to the interested parties, thus increasing your degree of satisfaction while, in turn, it will bring benefits for MANGO, allowing it to send more effective commercial communications that favour the acquisition of new customers and the loyalty of those it already has, as well as improving its corporate image.

• The algorithm used for profiling does not make recommendations on actions to be taken (neither at a segment level nor at an individual level), nor does it apply decisions in an automated way, but is limited to analysing the behavioural and consumption data of customers and potential customers to find out their interests, tastes and preferences, inferring the behaviour of the interested party in the future. Based on this information, a marketing manager will decide on the best strategy for that segment, customer or potential customer.

• You can find out more about the assessment of legitimate interest by contacting our data protection officer directly.

• Search service for garments in Mango shops (localisation). Mango will process your personal information in order to provide you with the service by indicating the availability of the garment in the shops closest to the address that you have indicated in the option that the app has enabled for this purpose.
• The legal basis that legitimises the processing of your data for this purpose is the consent you give us to access the location of your device. This consent may be withdrawn at any time without the withdrawal affecting the lawfulness of the processing based on the consent prior to its withdrawal.

In order to guarantee that the personal information is appropriate, pertinent and limited to what is necessary for the purposes for which they are processed, MANGO will keep your personal information only for a period that is reasonably necessary to fulfil the purpose for which they were collected, given the requirements to respond to issues that are raised or to resolve problems, make improvements, activate services and fulfil the requirements of the applicable legislation. This means that we may keep your personal information for a reasonable time, including after you have stopped using the services of MANGO and/or have stopped using its platforms. After this period, your personal information will be held securely in all MANGO systems for the sole purpose of making them available to the competent authorities in order to attend to any potential administrative or legal responsibilities and the exercise or defence of complaints. Once the holding period for personal information has passed, they will be permanently deleted.

Your personal information may be shared with companies of the MANGO Group for internal administrative purposes based on legitimate interest.

Your personal information will be communicated to third parties in compliance with legal obligations that correspond in each case, such as, for example, to Administrations and/or Public Bodies when required by tax, labor, Social Security or any other applicable regulations.

In the event that you make a purchase through our platforms, your data may be communicated, where appropriate, to financial entities and payment service providers, fraud detection and prevention entities such as, for example, Signifyd, logistics, transport and delivery of goods providers. These communications are strictly necessary to ensure the delivery of your order.

On the other hand, please be informed that MANGO may hire third parties who will have access to your data as a result of the provision of services, under a regulated agreement. These third parties may provide us with technological services, customer service or marketing and advertising services, among others, and in any case will treat your data following MANGO's instructions and never for their own purposes.

In no case will MANGO sell your personal information to third parties.

International data transfers may occur in the event that the companies with which MANGO shares your data are located outside the European Economic Area, which will be lawful, as adequate guarantees are established to protect personal information. MANGO, in those cases where the destination country of the data is not considered of adequate level, will regularize the relationship with the third party recipient of the data by subscribing to the corresponding Standard Contractual Clauses adapted by the European Commission, the content of which you can consult at the following link https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

In any case, the third parties with whom certain personal information are shared will have previously accredited the adoption of adequate technical and organizational measures that ensure the correct protection of them.

For some services offered through our platforms, such as Gift Cards, a user may provide personal information of the recipient of the services. In this case, MANGO will also comply with its obligations in accordance with the provisions of the data protection regulations, handling the data exclusively to comply with the purpose for which they have been provided.

Our platforms use information security techniques such as network and application firewalls, automated anti-attack systems, access control procedures, and cryptographic mechanisms, all with the aim of preventing unauthorized access to data and ensuring their confidentiality. Likewise, periodic security audits are carried out to carry out risk assessments and frequent controls. To achieve these purposes, you agree that MANGO obtains data for the purpose of the corresponding authentication of access controls.

Additionally, any transaction carried out through our platforms is carried out through secure payment systems. Confidential payment data is transmitted directly and encrypted to the corresponding entity.

MANGO states that it has adopted all the necessary technical and organizational measures to ensure the security and integrity of the personal information it processes, as well as to prevent its loss, alteration and/or access by unauthorized third parties.

You have the rights detailed below. You can exercise them through the email address personaldata@mango.com. To process your request to exercise rights, we may ask you to prove your identity.

This Privacy Policy will always be available. Even so, in case we proceed to substantially and relevantly modify its content, we will notify you through our platforms or to your email address, thus complying with the duty of information provided for in the GDPR. So, if you consider it necessary, you can exercise your rights as an interested party.