Data Protection and Privacy Policy

This Data Protection and Privacy Policy explains how Madam Monica d.o.o. collects, uses, stores and protects the personal data of customers and users of the web shop www.madam-monica.hr.

By using the web shop, submitting an inquiry or placing an order, the user confirms that they are familiar with this Data Protection and Privacy Policy.

1. Personal Data Controller

The personal data controller is:

Madam Monica d.o.o.
Kamenarka 16
10000 Zagreb
Croatia

OIB: 56779900843
Web: www.madam-monica.hr
E-mail: info@madam-monica.hr
Phone: +385 99 6374 235

For all questions related to the processing and protection of personal data, users may contact us by e-mail: info@madam-monica.hr.

2. What Personal Data We Collect

Madam Monica d.o.o. collects only the personal data necessary for processing orders, delivering products, communicating with customers, processing payments, resolving complaints and fulfilling legal obligations.

The data we may collect includes:

full name,
delivery and/or billing address,
e-mail address,
phone number when provided by the customer,
order details,
data required for issuing invoices,
communication data with the user,
data required for resolving complaints and returns.

When paying by card, Madam Monica d.o.o. does not collect or store complete payment card details. Card payments are processed through the secure CorvusPay system.

3. Purpose of Data Collection and Use

We use personal data for the following purposes:

processing and confirming orders,
delivery of ordered products via GLS delivery service,
communication with customers regarding orders, payment, delivery, complaints and returns,
issuing invoices and fulfilling legal obligations,
processing bank transfers and card payments,
resolving customer inquiries, complaints and requests,
sending marketing notifications only if the user has given consent.

The provided CorvusPay document states that the merchant must provide customers with a statement on the protection, collection and use of personal data, as well as the option to choose whether to participate in marketing activities.

4. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

performance of a contract, meaning order processing and delivery,
fulfilment of legal obligations, such as issuing and keeping invoices,
legitimate interest, for example responding to inquiries, protecting the business and resolving complaints,
user consent, for example for receiving marketing notifications.

The user may withdraw consent for receiving marketing notifications at any time.

5. Protection of Personal Data

Madam Monica d.o.o. undertakes to protect customers’ personal data by collecting only the necessary and basic data required to fulfil its obligations toward customers.

All users’ personal data is strictly protected and accessible only to persons who need such data to perform their work. Persons and business partners involved in order processing, delivery, payment or technical maintenance of the web shop are obliged to maintain data confidentiality and act in accordance with personal data protection regulations.

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration or destruction.

6. Payment and Security of Card Data

Card payment on the web shop www.madam-monica.hr is processed through the CorvusPay system.

CorvusPay ensures the confidentiality of card and personal data from the moment the customer enters it into the CorvusPay payment form. Payment data is forwarded in encrypted form from the customer’s web browser to the card-issuing bank. Madam Monica d.o.o. does not come into contact with the customer’s complete payment card details.

The CorvusPay system uses security mechanisms and operates in accordance with high security standards of the payment card industry. The provided document states that CorvusPay meets the requirements for secure online payment and operates in accordance with the PCI DSS Level 1 standard.

7. Recipients of Personal Data

Personal data may be made available to third parties only when necessary for fulfilling an order, providing a service or fulfilling legal obligations.

This may include:

GLS delivery service for delivering ordered products,
CorvusPay payment service provider for processing card payments,
banks and financial institutions for payment processing,
accounting service,
providers of technical support and web shop maintenance,
competent authorities when required by law.

Personal data is not sold to third parties.

8. Marketing Notifications

Madam Monica d.o.o. may send marketing notifications, newsletters, promotional offers or product information only to users who have given consent or where another permitted legal basis exists.

The user may unsubscribe from receiving marketing notifications at any time via the unsubscribe link in the message or by sending a request to: info@madam-monica.hr.

If the user withdraws consent, their data will no longer be used for marketing purposes.

9. Cookies

The web shop www.madam-monica.hr may use cookies for the proper functioning of the website, improving user experience, analysing visits and, where applicable, advertising.

Cookies are small text files stored on the user’s device when visiting a website.

The user can manage cookie settings through their web browser or through the consent management tool on the website, if available.

More detailed information about cookies may be provided in a separate Cookie Policy.

10. Personal Data Retention Period

Personal data is stored only for as long as necessary for the purposes for which it was collected, or for as long as required by applicable laws.

Data related to orders, invoices and payments is stored within the periods prescribed by accounting, tax and other relevant regulations.

Data processed on the basis of consent is stored until the consent is withdrawn, unless there is another legal basis for further retention.

11. User Rights

The user has the right to request:

access to their personal data,
correction of inaccurate or incomplete data,
deletion of personal data where legal conditions exist,
restriction of data processing,
objection to data processing,
data portability where applicable,
withdrawal of consent for data processing.

To exercise their rights, the user may contact us by e-mail: info@madam-monica.hr.

Madam Monica d.o.o. will respond to the user’s request within a reasonable period and in accordance with applicable personal data protection regulations.

12. Accuracy of Data

The customer is responsible for the accuracy and completeness of personal data entered when placing an order, registering, submitting an inquiry or using the web shop.

In the event of a change in data, the customer is required to notify Madam Monica d.o.o. in a timely manner or update the data if this is available through the user account.

13. Changes to the Data Protection and Privacy Policy

Madam Monica d.o.o. reserves the right to amend this Data Protection and Privacy Policy at any time.

All changes will be published on the website www.madam-monica.hr and will apply from the date of publication, unless otherwise stated.

14. Contact

For all questions, requests or objections related to personal data protection, users may contact: