Legal Terms

MCM collects certain individually identifiable data that you actively submit through the Site and through cookies, flash cookies, web beacons and other tracking technologies. Additionally, MCM collects some information from our customers who submit a customer information card at one of our stores.
This information may include personal data. Personal data in the meaning of this Privacy Policy is any information relating to an identified or identifiable natural person. Such personal data may include your full name, title, birthday, email address(es), billing address(es), delivery address(es), telephone number(s), password for the access to your Account, credit card information, shopping patterns, and product interests. We use personal data primarily for the purpose for which you originally provided it (i.e., to sell and deliver products, to provide the requested newsletter, or the like), and for purposes of improving our products and services, market research, personalized marketing and customer profiling.

Personal Data also includes information regarding your usage of the Site. In this context we may collect the following personal data from you:

• Your IP address,
• Date and time of your request,
• Time difference to Greenwich Mean Time,
• Content of your request,
• Status of your request/HTTP-status code
• Extent of the transferred data,
• Website from which your request was redirected,
• Browser, operating system and user interface, language and version of your browser,
• Location from which you retrieve data from the Site,
• Other communication data and source, which you retrieve.

This data will be collected through log-files and cookies. Please see below for further information regarding cookies.
We are using this data in order to pursue our legitimate interests to

• Display the Site on your computer,
• Ensure the functionality of the Site,
• Optimise the Site,
• Ensure the security of our IT systems.

The legal basis of such processing is Art. 6 para. 1 lit. f GDPR.
The data will be deleted, as soon as it is no longer required for the fulfilment of the purpose the data has originally been collected for.

You may place orders and purchase products through the Site. In order to enter into a contract with you and to perform this contract, we collect the following information from you:

• Name,
• Shipping address,
• Billing address
• Email address,
• Payment details.
• Further voluntary details, if applicable.

This information is required to process your order and to perform the contract with you. The processing of your personal data is based on Art. 6 para. 1 lit. b GDPR. We may also use such data to carry out fraud checks in order to pursue our legitimate interests to protect you and ourselves from unauthorised usage of your personal information, i.e. your payment details.
Depending on which payment method you chose, we will give your payment details to a payment service provider we engaged to handle your payments or to the payment service of your choice. The transmission is based on Art. 6 para. 1 lit. b GDPR. Some payment services will collect this information independently, if you registered with such payment service. In this case, you will be asked to log into your account of the payment service and the processing of your payment details are subject to the privacy policy of such payment service.
You may also create a customer account, which allows you to view prior purchases, to reorder the products you ordered and to store your personal details and payment details for future orders. When you create a customer account we will store the information you entered into the online form. You may request your customer account be deleted by contacting us on the email address or postal address detailed below in CONTACT US section. Storing your personal information is based on Art. 6 para. 1 lit. b GDPR.
Your address, payment and order details will be stored as long as we are required to according to statutory retention periods.

If you chose Klarna Pay Later or Klarna Slice it, payment services provided by Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden (Klarna), as payment method, we will collect and transmit your name, address, date of birth, gender, email address, IP address and phone number to Klarna. This information is required in order to carry out an identity check and a credit assessment. We will also transmit information regarding your purchase, such as amount, article number, invoice amount, and applicable taxes to Klarna, as this is necessary to process the purchase on account.
The processing this required to offer you these payment methods, to verify your identity and to conduct a credit assessment and to assess Klarna’s risk of non-payment receivables. The processing is based on Art. 6 para. 1 lit. b GDPR. You are entitled to withdraw your consent for the future at any time by contacting us under the contact details provided below.
Klarna will transmit your information to credit agencies to verify your identity and to conduct a credit assessment.
In order to decide about entering into, performing or terminating an agreement with you, Klarna collects and uses information regarding your payment behaviour in the past and probability values for the future (Scoring). The calculation of the score values by Klarna is conducted on the basis of scientifically approved mathematical and statistical procedures and models.
You are entitled to withdraw your consent you gave to Klarna for the future at any time. However, Klarna will still be entitled to process your information that is required to contractually process the payment.
Klarna’s privacy policy may be accessed under https://www.klarna.com/uk/privacy-policy/.

The Site also offers a contact form, which allows you to make enquiries, ask questions, give recommendations and make suggestions to us. When you use the contact form, the details you entered into the form, your IP address and the time and date of your enquiry will be transmitted to us.
We will use your email address to contact you when processing your enquiry. If you provided us with voluntary personal information, such information will be used to either address you personally or to facilitate processing your enquiry. Such information will only be used to process your enquiry. We will not use such information for other purposes.

You have the opportunity to apply to us online. In order to use the online application procedure, personal data such as name, e-mail address, postal address, telephone number as well as any other application documents submitted to us (cover letter, CV, certificates, etc.) are collected and processed. In addition, we may process job-related information made publicly available by you, such as a profile on professional social media networks (e.g. LinkedIn).
We use such information to verify your application, to assess, whether you are qualified for a vacant position, to contact you in relation to your application, and to offer you a position at us or one of our affiliated companies. We may also share the information you submitted to us with other members of the MCM affiliated group of companies to process your application properly.
If your application is successful, we use the data provided for administrative matters within the scope of employment. If we are unable to offer you an employment, the information you provide will be retained for up to six months for the purpose of answering questions relating to your application and refusal. If you consented to your data being stored for a longer period, we may further consider your application data for similar job offers or future employment opportunities if your application profile is of fundamental interest to us.
The legal basis for the processing is Art. 6 para. 1 lit. b, f GDPR or, in the case of consent, Art. 6 para. 1 lit. a GDPR. If you apply within Germany, the legal basis is § 26 para. 1 German Federal Data Protection Act (BDSG) or Art. 6 para 1 lit. a GDPR.

We may use your email address to transmit direct marketing communications to you by email, but only in case you have consented in receiving newsletters by registering on the Site.
Besides your email address, we also collect the following information from you:

• IP address,
• Time and date of the registration.

We store and use your email address in order to send email messages with marketing communications on a regular basis. Your email address will not be disclosed to any third party.
The collection of the remaining information is intended to prevent misuse of our services and the email address, which has been entered.
You can opt-out of receiving newsletters or marketing communications at any time by responding to the opt-out instructions within the communication, via email to contact.eu@mcmworldwide.com or via our Customer Service through the ‘CONTACT US’ page on our website.
Your personal data will be stored until you unsubscribe to the newsletter or you withdraw your consent.
Legal basis for the processing is Art. 6 Sec. 1 lit. a GDPR.
Our newsletter also contains a web-beacon or tracking pixel, which represents a one-pixel image that is stored on the Site. We use this technology to analyse your using behaviour. For this analysis, we link the data that is collected by cookies when you use the Site with a unique ID. These data will be collected and analysed using pseudonyms and will not be linked with your personal data. Hence, it is ruled out that the collected data may refer to you directly.
You are entitled to object to the tracking at any time by clicking the link which is provided with every newsletter email or by informing us about your objection via email or letter.
This information will be deleted after you unsubscribed to the newsletter.
The processing is based on Art. 6 Sec. 1 lit. f GDPR.

We may also collect personal data from you when you sign up to our customer card by filling out the application form. The application form may be provided in paper or through an app installed on a device held available in the Stores.
We will store the information you supplied to us in the application form. This includes your name, street address, telephone number, mobile number, date of birth, nationality and email address. Besides your email address, all information you enter is voluntary. With your consent, we will use it in order to personally address you and for internal marketing research and to carry out internal analyses. These analyses may also include your purchase history.
We will use your email address to regularly send you direct marketing communication about the MCM fashion collection, news, events, offers and styles to you via email.
If you consented to receiving marketing communication via postal mail, we will also use your complete postal address to regularly send you marketing communication via postal mail.
If you consented to receiving marketing communication via SMS, we will also use your phone number to regularly send you updates about MCM, its fashion collection, news, offers and styles via SMS.
You consented to such usage when you signed up to the customer card by checking the relevant box in the application form. You are entitled to withdraw your consent at any time for future use by sending us a message to the email address or postal address provided below.
The legal basis for such processing of personal data is Art. 6 para 1 lit. a GDPR.

To offer you the best possible customer experience in our Stores, we use a clientelling solution, which allows the sales assistants in the Stores to view your transaction and purchase history and to give you individual recommendations regarding goods that may be of your interest.
The sales assistants can only view your purchase history and possible recommendations, if you have identified yourself as a registered user of our clientelling solution by telling the sales assistant your name, email address or phone number which is associated with your customer account.
By creating a customer account or by enrolling to our customer card, we have asked you to consent to such use of your personal data. Such processing is based on Art. 6 Sec. 1 lit. aGDPR.
The clientelling solution is available in participating stores in certain countries. Please contact us under the contact details below if you want to learn more about the countries, in which our clientelling solution is available and the operators of the respective Stores.

We may share and receive personal data within the MCM affiliated group of companies, so that MCM may inform you of other products that may be of interest to you, improve your shopping experience, and improve our Site design. We may also disclose personal data (such as IP Address, email and phone number) for profiling and marketing purposes. You may opt out of our sharing your personal data with such affiliates and franchisees by contacting us as described below. Your personal data may also be disclosed to companies within the MCM affiliated group of companies which are not established in member states of the European Union. For protecting your personal data, such transfers to recipients established in countries which the European Commission did not recognise as providing adequate data protection, will be subject to the EU Model Clauses for the transfer of personal data in third countries.
We contract with selected third parties that provide services on our behalf to maintain our Site, provide our client communications, and provide other services. The personal data that we obtain through this Site may be accessed by these third parties solely on MCM’s behalf, and we generally do not authorise these service providers to make any other use of your personal data. These service providers operate the following services for us:

• Website hosting,
• External customer services,
• Marketing research,
• Handling orders,
• Shipping orders,
• Organization of email marketing,
• Advertising,
• Analyses of the use of our homepage.

We may also disclose personal data to financial institutions or other third parties in connection with performing payment transactions. We do not otherwise disclose your personal data to third parties unless required by law, necessary in connection with a legal claim or proceeding, or when otherwise necessary to protect the rights or interests of MCM or third parties.

MCM reserves the right to occasionally make changes to our privacy policy or practices. We will post the updated policy on our Site, and thus we encourage you to review this page from time to time, particularly each time you use the Site.
If you are registered with us and would like to delete your registration and personal details from our database, you can contact us by emailing to contact.eu@mcmworldwide.com or via our customer service through the ‘CONTACT US’ page on our website. Please keep your personal data accurate, current, and complete by regularly updating your personal account or by contacting us as specified below.

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration and disclosure.
But the safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Site, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about communicating information in public areas of the Site like message boards. Any information you share in public areas may be viewed by any user of the Site.
Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Site. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures in relation to the Site.

When you visit the Site, we passively collect data through the use of cookies on your computer and Internet connection, such as the IP address of your computer and/or Internet service provider, the date and time you accessed the Site, the Internet address of websites from which you linked to our Site, the computer technology you are using and your movements and preferences on our Site. We may also use such cookies to collect information in connection with future visits to the Site (such as to remember your username and password), to recognise you as a previous visitor, and to track your activity on the Site. You may set your browser to notify you when a cookie is sent or to refuse cookies altogether, but certain features of the Site might not work without cookies.
We reserve the right to use other technologies such as Internet tags, web beacons, and navigational data collection tools. We use such data primarily in order to: administer, protect, and improve our Site and our systems; better understand the preferences of our Site visitors; identify server problems; compile aggregated statistics about Site usage; help to personalise your experience on our Site; advertise on other sites across the Internet; and personalise offers. We may combine data gathered by cookies and other tracking technologies with personal data, although when we do, we treat all such data as personal data for purposes of this privacy policy.
The use of such technologies is based on Art. 6 para. 1 lit. f GDPR.

This Site also uses Google Analytics, a web analytics service provided by Google, Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies to help us analyse your use of the Site, compiling reports on Site activity and providing other services relating to Site activity and Internet usage. The information generated by the cookie about your use of the website (including your IP address) may be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on the Site, Google will shorten your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases the unshortened IP address will be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
Google will use this information for the purpose of evaluating your use of the Site, compiling reports on website activity for us on our behalf and providing other services relating to website activity and internet usage. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is Art. 6 para. 1 lit. f GDPR. The data sent by us and linked to cookies, user-identifiers (e.g. User-IDs) or advertising-identifiers are automatically deleted after the data is not required for the analysis anymore. Data whose retention period has been exceeded are automatically deleted once a month. Google will not associate your IP address with any other data held by Google. MCM does not tie the data to any personally-identifiable information. For more information on terms of use and data protection, please visit https://www.google.com/analytics/terms/gb.html or https://policies.google.com/
You may refuse the use of cookies by selecting the appropriate settings on your browser, however, as mentioned above please note that if you do this, you may not be able to use the full functionality of the website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the Site (including your IP address) and from processing this data by downloading and installing the browser Add-on under the following link: https://tools.google.com/dlpage/gaoptout?hl=en
Opting out of cookies prevent the future collection of your data when you visit this website. To prevent Google Analytics from collecting data across several devices, you must opt out on all devices you use. If you click here, the opt-out cookie will be set: https://tools.google.com/dlpage/gaoptout?hl=en

SaleCycle is used to track the use of the website in order to understand which products and services are of interest to you and to collect certain personal information such as name, email address, phone number, and a unique identifier associated with your device. This information is then used to assist you in the buying process including contacting you from time to time (either by email or SMS) or to personalise advertising displayed to you online. Please see the SaleCycle Service Privacy Notice for more details regarding the data used by SaleCycle - please visit: http://www.salecycle.com/privacypolicy/

We are using the social media plugins of the social networks Facebook and X on the Site.
The Facebook plugin is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The X plugin is operated by Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA („X“).
The operator of the plugin will receive the information that you have visited the Site and the information included in the logfiles as described above, regardless if you are registered with the relevant operator. By activating the plugin, personal data will be transmitted to the operator of the relevant plugin and stored on servers located in the USA.
We neither have influence on which data will be transmitted to the operator of the respective plugin, nor do we have full knowledge to what extent the operator collects personal data, for which purpose this data will be used and how long it will be stored.
The operator of the respective plugin uses such data in order to compile user profiles, which are used for advertising, market research and/or for optimising his website. Such use of personal data occurs in particular for presenting advertising to you which matches your interests and to inform other users about your activities on the Site. You are entitled to object to such creation of profiles. In order to exercise this right, you are required to file an enquiry with the operator of the relevant plugin.
You consent in the transmission of personal data to the operator of the relevant plugin by clicking on and activating the relevant plugin. Processing the personal data is based on Art. 6 para 1 lit. a GDPR.
The personal data will be transmitted to the operator of the relevant plugin regardless whether you are registered with the operator of the relevant plugin or if you are logged into your account. If you are logged into your account, the operator of the relevant plugin will be able to associate your visit of the site with your personal account. If you interact with the relevant plugins, this information will also be stored in your personal account and published to your contacts.
For further information regarding the use of your personal data please check the privacy policy of the operator of the relevant plugin:
Facebook: Transfers of personal data to third countries as defined in the EU GDPR are subject to the applicable EU model clauses. The relevant Facebook policies including the privacy policy are accessible under: http://www.facebook.com/policy.php; further information regarding the collection of personal data: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications,http://www.facebook.com/about/privacy/your-info#everyoneinfo.
X: Transfers of personal data to third countries as defined in the EU GDPR are subject to the applicable EU model clauses. The X privacy policy is accessible under the following link: https://twitter.com/privacy.

We have embedded content from the social network Instagram, operated by Instagram, Inc., 1601 Willow Road, Menlo Park, CA, 94025 USA (“Instagram”) in the Site. If you are logged into your personal Instagram account and you click on the embedded content, you may link the content to your personal Instagram account. This allows Instagram to associate your visit of the Site with your personal Instagram account. As the operator of the Site, we do not know, which data is transmitted to Instagram when you click on the embedded content.
For further information regarding data protection at Instagram, please see the Instagram privacy policy: http://instagram.com/about/legal/privacy/.

We may embed videos in the Site which are hosted on www.youtube.com and which may be played directly on the Site. Youtube is a service operated by Youtube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (“Youtube”). All videos are embedded using the privacy-enhanced mode.
Youtube receives the information that you visited the relevant page of the Site where the video is embedded when you click on play. Further, Youtube uses cookies in order to collect information about the visitor of the Site and transfers these data to Youtube, regardless if you are registered with Youtube or if you are logged into your personal account. If you are logged into your personal account, Youtube will be able to associate your visit to the Site with your personal account. Youtube saves your personal data as user profile and uses such information for marketing, research and/or optimising its website. This information is particularly used to provide advertising that matches your interests, regardless, whether you are registered with Youtube. You are entitled to object to such creation of profiles. In order to exercise this right, you are required to file an enquiry with Youtube.
Further information with regard to collection and use of personal data by Youtube and your rights related to such use may be taken from the Youtube privacy policy: www.youtube.com/privacy
We use videos hosted on Youtube in order to pursue our legitimate interests to present you contents in an appealing and optimized form. The basis for the processing is Art. 6 para 1 lit. f article 6 (1)(f) GDPR.

The Site uses the online marketing tool DoubleClick by Google. DoubleClick uses cookies to place ads which match your interests, to improve reports about campaign performances or to avoid that ads will be presented to you several times. Google uses a cookie ID to record which ads have been already presented to you in which browser and is able to avoid that ads will be presented to you several times. Furthermore, DoubleClick allows to capture so called conversions which are associated with requests to our ads using the cookie ID. For instance, this is the case when you see a DoubleClick Ad and you access the site of the advertiser with the same browser at a later time. According to Google, DoubleClick Cookies do not contain personal data.
Because we use DoubleClick, your browser will automatically establish a direct connection to the Google servers. We do not have influence which personal data Google collects to what extent. According to Google, Google will be notified when you have accessed a site on which DoubleClick is implemented or that you clicked on a DoubleClick ad. If you are logged into your Google account, Google may be able to associate your visit of the Site with your Google account. Even if you are not registered with Google or logged into your account, it is likely that Google will receive your IP address and store this information.
You may opt out of such tracking by using one of the following procedures:

• By setting the appropriate preferences to your browser, i.e. by not allowing third party cookies,
• By deactivating cookies for conversion tracking when you configure your browser in a way that cookies from the domain www.googleadservices.com will be blocked. In order to do that, please visit https://www.google.de/settings/ads and make the appropriate settings. In case you delete your cookies, you may be required to renew your opt-out.
• By deactivating behavioural advertising from providers which are certified under the self regulation campaign “about ads” by visiting the link http://www.aboutads.info/choices. In case you delete your cookies, you may be required to renew your opt-out.
• By permanent deactivation if you use Firefox, Internet Explorer or Google Chrome: when you download and install a browser plugin under http://www.google.com/settings/ads/plugin

We use DoubleClick in order to pursue our legitimate interest to show you advertisements that match your interests and to measure the effectiveness of our advertising. Processing your personal data is based on Art. 6 para. 1 lit. f article 6 (1) (f) GDPR.

In order to make geographical information visible, the Site uses the Google Maps API. When using Google Maps, Google will process information of your use of the maps and functionalities provided by Google. Further information regarding processing personal data at Google can be found in the Google privacy policy: http://www.google.com/policies/privacy.

We cooperate with Rakuten Marketing Europe Ltd. as a partner to create a unique customer experience. To improve this experience, prevent fraud and process affiliate transactions, we assign a unique user identifier and exchange the respective transaction data. Information may be processed by Rakuten in the US or the UK based on corporate binding rules and standard contract clauses. Legal Basis of our disclosure of data to Rakuten is your consent (Art. 6 sec. 1 a) GDPR), where applicable, and your order, where we have to process data for performance of the contract (Art. 6 sec. 1 b) GDPR), legal obligation (Art. 6 sec. 1 c) GDPR), or legitimate interest, where the requirements of Art. 6 sec. 1 f GDPR are met. For more details on the processing by Rakuten please refer to https://rakutenadvertising.com/en-uk/legal-notices/website-privacy-policy/.

MCM will take all precautionary measures to protect the personal information that is shared on our website. MCM [and hired third parties related to transaction and fulfilment only] store information internally in controlled, secure environments. MCM occasionally hires other companies to provide limited services on our behalf, including packaging, dispatching and delivering purchases, sending postal mail and processing event registrations. MCM will provide those companies only the information they need to deliver the respective service, and they are prohibited from using that information for any other purpose.
If MCM requests general demographic information, this information is limited to reporting purposes only; users remain anonymous. Phone numbers, e-mail addresses, and postal addresses are never shared for demographic reports with entities outside MCM.

You can help MCM maintaining the accuracy of your personal information by updating the settings in My Account where you may change your name, billing & shipping addresses, title, date of birth, phone number, email address, view your order history, or your content preferences. If at any time you wish to update your information or preferences or you prefer to stop receiving communication from MCM, feel free to update your preferences in My Account. For technical concerns and troubleshooting your personal information, please contact our customer service at contact.eu@mcmworldwide.com at any time.

MCM must keep personal information for no longer than necessary for us to fulfil the purposes for which the personal information was collected, unless we are specifically required to keep your personal information longer by applicable law.
Our website contains links to other websites. When following a link to one of these websites, please be aware that MCM assumes no responsibility for content or privacy policies and practices of such websites.
MCM encourages you to read the privacy statements of these linked sites; their privacy practices may differ from ours.

Upon request, we will provide you with details of any of your personal data we store, where we collected the data, the recipients or categories of recipients of the data to which these data has been transferred to and the purpose of the collection. You can also have your personal data rectified, deleted or restricted from further processing by us at any time.
If the processing is based on our legitimate interests, you are entitled to object to the processing of data at any time. In this case, we will only execute the processing if demonstrate compelling legitimate grounds which override your interest regarding the exclusion of your data from the processing or the processing is carried out to establish, exercise or defend legal claims.
If the processing of your data is based on your consent, you are entitled to revoke your consent at any time. In this case, we will cease processing your data, unless we are entitled to further processing your data by law. Your revocation will not affect the lawfulness of the processing of your data carried out prior to your revocation.
If you supplied personal information to us, we will, upon request, provide you with them in a machine readable form in order to use such data with other service providers.
If you believe that the processing of your data infringes data protection laws, you are entitled to lodge a complaint with a supervisory authority.

To execute your rights or if you have any questions, comments or suggestions regarding the information practices described in this Privacy Policy, please contact us by contact.eu@mcmworldwide.com or via post at: MCM Global AG, Baarerstrasse 137, 6300 Zug, Switzerland. You may also contact our representative in the European Union at: MCM Lederwaren & Accessoires GmbH, Brienner Str. 1, 80333 Munich, Germany.
If you believe that the processing of your data infringes data protection laws, you are entitled to lodge a complaint with a supervisory authority.

If you have any inquiries in the context of the protection of your personal data, you may also contact our data protection officer by email: dpo.eu@mcmworldwide.comor via post at: MCM Global AG, Baarerstrasse 137, 6300 Zug, Switzerland.

January 2021