Privacy Policy and Cookies

The person responsible for the processing of personal information collected and processed through the use of the MANGO app is PUNTO FA, S.L. ("MANGO"), with N.I.F. B-59.088.948. You can contact MANGO through the following means:

• Postal address: Customer Service, Carrer dels Mercaders 9–11 (Polígono Industrial Riera Caldes), 08184 Palau-solità i Plegamans (Barcelona), Spain.
• Email: personaldata@mango.com

MANGO has appointed a data protection delegate whom you can contact and/or raise any issue related to the processing of your personal information by sending an email to dpo@mango.com or in writing by directing your request to the postal address: DPO Office, Carrer dels Mercaders 9–11 (Polígono Industrial Riera Caldes), 08184 Palau-solità i Plegamans (Barcelona), Spain.

MANGO may collect directly from your relationship with and use of our services, mainly the following data and/or categories of data for the purposes indicated below:

i) Identifying data such as:

ii) Contact data such as: e-mail address and postal address.

iii) Personal data such as:

iv) Financial data such as credit card (PAN+CVV2) in compliance with PCI DSS standards which will be used for:

v) Purchase history at MANGO.

vi) The consumption habits and preferences of our customers and browsing history.

vii) Approximate or precise location data.

viii) Device information:

At MANGO we may process your personal information for the following purposes:  

A) CREATION OF A USER ACCOUNT

• Manage your registration, which will involve the creation of a MANGO user account. This account will allow you to centralise any issue relating to your user status, and give you access to certain functions available and reserved for those with said status. For example, having a user account will allow you to store certain information that may be used in future purchases and/or interactions with MANGO. 

Furthermore, the creation of a user account will allow you to participate in the MANGO Likes You loyalty programme, in countries where it is available.  Registration on this programme may result in discounts and/or benefits in the services of third-party collaborators, as well as discounts on your future purchases at MANGO. In this regard, we inform you that countries that dispose of the MANGO Likes You loyalty programme will publish this on their respective websites. 

• The lawful basis that legitimises the processing of your data for this purpose is the execution of a contract, understood as such the accepted Terms & Conditions.
• At the time of account creation. The processing of your data is necessary to ensure compliance with the obligations and rights provided for in the Terms & Conditions.

B) PURCHASE OF MANGO PRODUCTS

Process the purchase of items via the different purchasing channels enabled by MANGO. This procedure consists of taking all the appropriate steps in order to manage your purchase and, wherever applicable, guarantee the correct delivery of your order, in addition to undertaking any procedure related to the sale of the item such as, for example, the management and issue of proof purchase documents such as the simplified electronic invoice, the sales or Tax Free invoice and, wherever applicable, managing the return of the items.

To do this, we may send you information about the status of the purchase by e-mail, SMS and/or any other channel available at any moment.

• The lawful basis for the processing of your data for this purpose is the execution of a contract understanding as such the Conditions of Sale accepted at the moment of purchasing the items. The processing of your data is necessary to guarantee the fulfilment of the rights and obligations contained in the Conditions of Sale.

Management of the Mango Gift Card

• The lawful basis for the processing of your data for this purpose is the execution of a contract understanding as such the Conditions of Use accepted at the time of purchasing the card. The processing of your data is necessary to guarantee the fulfilment of the rights and obligations contained in the Conditions of Use.

With regard to the processing of online purchases, MANGO, as data controller, will carry out the corresponding actions for the prevention, detection and control of abuse and fraud in the use of our services , which may result in the existence of automated decision making.

Said automated decisions shall consist of the analysis of behaviour in the payment process which, in general terms, will use data relating to the purchasing process and the purchase history, in order to determine whether the transaction may be considered fraudulent. This information will allow us to detect and try to prevent fraudulent practices in payment transactions, allowing us to reject purchases and consequently protect both you, as a data subject (in the case of identity theft), and MANGO as a service provider and data controller.

• The lawful basis for the processing of your data to fulfil this goal is the legitimate interest of MANGO to analyse all the operations that occur in the payment process of the products it sells to ensure that no economic fraud will occur that impact negatively on itself or its customers. In this regard, we consider that there is a general interest for the processing to help generate, improve and maintain public confidence in the financial relationships developed through the payment methods made available by MANGO in its online commerce, in order to prevent public mistrust resulting from fraud or fraudulent activity in the same.
• We inform you that, in this case, MANGO has compelling and legitimate grounds to enable the processing of your data for this purpose, for which your right to opposition in accordance with the provisions of article 21.1 of the General Data Protection Regulation shall not apply.
• You can obtain more information about said evaluation by making a direct request to our Data Protection Officer.

In cases where you are registered as a user and purchase one of our items via our platforms, we may carry out the following data processing:

• Save your credit card details for use in future purchases.

The lawful basis for the processing of your data is the express consent given by you for us to save this information for use in future purchases, without prejudice to the legitimate use of your credit card data in the execution of a contract, in line with what is indicated in the previous section. This consent may be withdrawn at any time without said withdrawal affecting the lawfulness of the processing based on your consent prior to withdrawal.

C) CONFIGURE YOUR RELATIONSHIP WITH MANGO AS A BRAND

Newsletter: management and sending of commercial information on exclusive promotions and new products adapted to your profile, sending audiences via digital platforms, and notifications relative to pending garments and accessories in your shopping bag via e-mail, SMS, WhatsApp, notifications from the Mango App or any other communication channel and/or digital platform. This includes promotional actions such as, for example, the management of competitions and prize draws organised by MANGO. In cases where you agree to receive commercial notifications via different channels, certain personal information may be used to personalise notifications via online means.

• The lawful basis for the processing of your data is the express consent given by you, which you may withdraw it at any time without said withdrawal affecting the lawfulness of the processing based on your consent prior to withdrawal.

Management of the alerts service to notify the availability of garments and accessories via our Mango App, e-mail, SMS, WhatsApp or any other communication channel and/or digital platform.

• The lawful basis for the processing of your data for this purpose is the express consent given by you, which you may withdraw it at any time without said withdrawal affecting the lawfulness of the processing based on your consent prior to withdrawal.

Garment search service in Mango stores (localisation). Mango will process your personal data in order to indicate the availability of the selected garment in the stores closest to the location provided by your device. We will not subsequently retain this data on our systems.

• The lawful basis for the processing of your data for this purpose is the consent given by you to access the location of your device.

This consent may be withdrawn at any time without said withdrawal affecting the lawfulness of the processing based on your consent prior to withdrawal.

Respond to the exercise of the rights recognised in the data protection legislation.

• The lawful basis for the processing of your data is the fulfilment of a legal obligation with regard to managing the exercise of rights, in accordance with the obligation contained in the General Data Protection Regulation.

Attend to queries, requests and possible complaints that you make via Customer Service channels, such as postal mail, telephone, e-mail, WhatsApp, Social Media, forms in the Mango App/Web, virtual assistant in the App/Web with AI capabilities and any other channel enabled for this purpose. Depending on the reason you are contacting MANGO, the lawful basis for the processing of your data may vary. In this regard:

• We consider that MANGO has a legitimate interest to correctly resolve and respond to the suggestions, queries or requests that you make via Customer Service channels, on the understanding that, under no circumstances, will your rights and/or freedoms be affected or prejudiced by the fact that we are responding to a request initiated by you.
• In cases where this relates to an order that needs to be attended to formalise the purchase, the lawful basis for the processing of your data is the execution of a contract understanding as such the Conditions of Sale.
• In cases where your data is processed to attend to a complaint sent via the Customer Services channel, the lawful basis for the processing of your data is the fulfilment of a legal obligation contained in the General Law for the Defence of Consumers and Users.

After providing any of our services, send you quality surveys aimed at finding out your opinion and degree of satisfaction with your dealings with MANGO. The information collected as a result of the survey will allow us to create and improve our services and procedures, said experience being of considerable interest to us.

• The lawful basis for the processing of your data is the legitimate interest.Our legitimate interest consists of being able to guarantee that our platforms remain secure, as well as to help MANGO understand the needs, expectations and your degree of satisfaction with the brand and, therefore, improve our services at all times. All these actions are carried out in order to improve your degree of satisfaction and ensure a unique browsing and purchasing experience, via aggregated analysis.

Profiling based on behavioral and consumption data collected through your browsing, your interactions with the brand and those derived from your purchase history in order to show you priority recommendations or content on our platform, in accordance with your preferences, as well as sending you commercial notifications adapted to your profile, provided you have given us your consent for this purpose.

• Taking into account the characteristics of the profiling and after balancing your interests as the data subject, and those of MANGO as the data controller, it has been determined that the lawful basis for the processing of your data is the legitimate interest deeming that it is in the interest of all parties involved that such priority items may be of interest to the consumer. Consequently, by showing items that may reflect the priorities of the user in question as a matter of priority, MANGO will be able to offer you a better quality service and a more positive user experience, while At the same time, the fact that users have a positive experience, while giving MANGO a reputational benefit based on the fact that users will have a positive browsing and shopping experience on our platforms.
• Taking into account the characteristics of the profiling and after balancing your interests as the data subject, and those of MANGO as the data controller, it has been determined that the lawful basis for the processing of your data for consumer profiling, in order to send you commercial notifications adapted to the interests, tastes and preferences of consumers, is the legitimate interest deeming that it is in the interest of all parties involved to send personalised commercial notifications. Consequently, being able to adapt commercial notifications to your user profile will allow MANGO to offer you a better quality service since you will only receive notifications whose content may be of interest to you, thus avoiding the sending of generic notifications which may be excessive or of little interest to the data subjects. This will increase your degree of satisfaction and, in turn, benefit MANGO, since it will be able to send more effective commercial notifications that favour the capture of new customers and gain the loyalty of existing ones, while also improving its commercial image.
• The profiling algorithm does not formulate recommendations on actions to take (neither in terms of segment nor on an individual basis) and does not apply automated decision-making either, but merely analyses the consumer behaviour of customers and potential customers in order to know their interests, tastes and preferences by predicting the future consumer behaviour of the data subject. Based on this information, a Marketing manager will decide what it the best strategy for said segment, customer or potential customer.
• You can obtain more information on the evaluation of legitimate interest by making a request directly to our Data Protection Officer.

In order to guarantee that the personal information is appropriate, pertinent and limited to what is necessary for the purposes for which they are processed, MANGO will keep your personal information only for a period that is reasonably necessary to fulfil the purpose for which they were collected, given the requirements to respond to issues that are raised or to resolve problems, make improvements, activate services and fulfil the requirements of the applicable legislation. This means that we may keep your personal information for a reasonable time, including after you have stopped using the services of MANGO and/or have stopped using its platforms. After this period, your personal information will be held securely in all MANGO systems for the sole purpose of making them available to the competent authorities in order to attend to any potential administrative or legal responsibilities and the exercise or defence of complaints. Once the holding period for personal information has passed, they will be permanently deleted.

Your personal information may be shared with companies of the MANGO Group for internal administrative purposes based on legitimate interest.

Your personal information will be communicated to third parties in compliance with legal obligations that correspond in each case, such as, for example, to Administrations and/or Public Bodies when required by tax, labor, Social Security or any other applicable regulations.

In the event that you make a purchase through our platforms, your data may be communicated, where appropriate, to financial entities and payment service providers, fraud detection and prevention entities such as, for example, Signifyd, logistics, transport and delivery of goods providers. These communications are strictly necessary to ensure the delivery of your order.

On the other hand, please be informed that MANGO may hire third parties who will have access to your data as a result of the provision of services, under a regulated agreement. These third parties may provide us with technological services, customer service or marketing and advertising services, among others, and in any case will treat your data following MANGO's instructions and never for their own purposes.

In no case will MANGO sell your personal information to third parties.

International data transfers may occur in the event that the companies with which MANGO shares your data are located outside the European Economic Area, which will be lawful, as adequate guarantees are established to protect personal information. MANGO, in those cases where the destination country of the data is not considered of adequate level, will regularize the relationship with the third party recipient of the data by subscribing to the corresponding Standard Contractual Clauses adapted by the European Commission, the content of which you can consult at the following link https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

In any case, the third parties with whom certain personal information are shared will have previously accredited the adoption of adequate technical and organizational measures that ensure the correct protection of them.

For some services offered through our platforms, such as Gift Cards, a user may provide personal information of the recipient of the services. In this case, MANGO will also comply with its obligations in accordance with the provisions of the data protection regulations, handling the data exclusively to comply with the purpose for which they have been provided.

Our platforms use information security techniques such as network and application firewalls, automated anti-attack systems, access control procedures, and cryptographic mechanisms, all with the aim of preventing unauthorized access to data and ensuring their confidentiality. Likewise, periodic security audits are carried out to carry out risk assessments and frequent controls. To achieve these purposes, you agree that MANGO obtains data for the purpose of the corresponding authentication of access controls.

Additionally, any transaction carried out through our platforms is carried out through secure payment systems. Confidential payment data is transmitted directly and encrypted to the corresponding entity.

MANGO states that it has adopted all the necessary technical and organizational measures to ensure the security and integrity of the personal information it processes, as well as to prevent its loss, alteration and/or access by unauthorized third parties.

You have the rights detailed below. You can exercise them through the email address personaldata@mango.com. To process your request to exercise rights, we may ask you to prove your identity.

This Privacy Policy will always be available. Even so, in case we proceed to substantially and relevantly modify its content, we will notify you through our platforms or to your email address, thus complying with the duty of information provided for in the GDPR. So, if you consider it necessary, you can exercise your rights as an interested party.