Privacy policy
In this document, “Monolithe Studios” refers to the company Monolithe Studios, registered with the Paris Trade and Companies Register under number RCS PARIS 992 466 474, with its registered office located at 1 avenue Ingres, 75016 Paris, France.
Monolithe Studios is the Data Controller responsible for determining both the means and purposes of processing your personal data.
The purpose of this Privacy Policy is to inform you about how Monolithe Studios collects, protects, and uses your personal data.
It is important for you to know that Monolithe Studios makes every effort to ensure that you can unsubscribe from all our communications as easily as you subscribed.
Each email we send for marketing or commercial purposes always includes an unsubscribe link that allows you to request removal from our mailing list.
In this Privacy Policy, you will find the following information:
1. What personal data do we collect?
2. The use of your personal data and the legal basis for such use
3. Do we share your personal data with third parties?
4. Personal data of minors
5. How long do we retain your data?
6. Data profiling
7. Protection of your data
8. Links to other websites
9. Your rights
10. Additional information
1. What personal data do we collect?
When you provide us with your personal data by filling out one of our forms, we indicate with an asterisk the information that is mandatory for processing your request.
We collect your personal data when: you create a user account, place an online order, subscribe to our newsletter, contact us for information or to file a complaint, visit the website https://monolithestudios.com, participate in a satisfaction survey, or enter a competition.
When we collect personal data, the following categories of data may be collected:
Contact and identification information:
When you create an account or subscribe to our newsletter, we will ask you to provide your name, email address, and a password of your choice.
General personal information:
In addition to contact and identification details, when we conduct satisfaction surveys or organise competitions, we may ask you for additional personal information such as your gender, date of birth, marital status, etc.
Payment information:
When you place an order, we ask you, in addition to your contact details, to provide your payment information in order to process payment for our products and services before granting you access to them.
Browsing data:
When you use our website for informational purposes only, meaning when you do not use one of the services offered on the site or place an order with us, we only collect the data that your browser transmits to our server.
When you visit our website, we collect, through your browser:
- identification data of the device from which you connected (IP address and device type), your operating system, browser (language and version), your location at the time of connection, the content of the request (specific page), the access status/HTTP status code, the amount of data transferred;
- browsing data (for example: the pages you have viewed, the duration of your visit).
We retain this data for a short period for technical security reasons, for example to prevent attacks on our web server.
The legal basis for the aforementioned processing is Article 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller).
The collection of this information is carried out by means of files called “cookies”. Cookies are text files containing information about your use of our website (websites visited, number of visits, visit duration, time spent on various pages, browser used, operating system used, etc.), which are stored on your hard drive if you allow it through your browser settings.
Cookies help make our online shop more efficient. They are also used to track visitor preferences, allowing us to optimise the design of our website. This enables us to tailor the content of our online shop to your needs and improve our offerings for you.
When you subscribe to one of our newsletters or participate in one of our surveys, we may collect data relating to your interests.
2. The use of your personal data
We use your data to: allow you to create a user account, enable you to place an online order, send you our newsletter, offer you content or services that may be of interest to you, manage your participation in competitions offered on our websites, and send you offers from our partners, provided that you have consented to receive such offers.
(1) Registration on the online store
You may create a user account on our website, in which your data will be stored for future orders so that you do not have to re-enter your details for subsequent orders. The legal basis for this processing is Article 6(1)(b) GDPR (processing is necessary for the performance of a contract). Creating a user account is not a prerequisite on our online store. You may also place an order as a guest, in which case no user account will be created. You may delete your user account at any time.
Obligation to provide personal data
If you wish to register on our online store, place an order, or subscribe to our newsletter, you must provide the personal data required for the relevant service. If you do not provide these data, we will be unable to create your user account, fulfil your order, or send you our newsletter.
(2) Placing an order on the online store
To place an order on our online store, your first and last name, email address, postal address, and payment details (depending on the payment method chosen) are required. We process this data in order to fulfil your order in accordance with the contract, confirm your order by email, and handle any complaints or customer service requests. Your phone number will only be used to manage issues related to your order and, where applicable, to inform you of delivery, and for no other purpose. The legal basis for this processing is Article 6(1)(b) GDPR (processing is necessary for the performance of a contract).
(3) Newsletter
On our website, you may subscribe to our newsletter. We will regularly inform you by email of new products and promotions for current and upcoming Monolithe Studios collections. To subscribe, you simply need to enter your email address. Providing your title and full name is voluntary and serves only to address you personally in the newsletter. The legal basis for this processing is Article 6(1)(a) GDPR (consent of the data subject). For newsletter registration, we use a so-called double opt-in procedure. This means that after your registration, we will send an email to the address provided, asking you to confirm that you wish to receive the newsletter. You may withdraw your consent to receive the newsletter at any time and unsubscribe.
(4) Sending recommendations of Monolithe Studios products or similar products and offers
If you place an order on our online store, we will also inform you by email of other products in our range similar to your order. You may object to receiving these emails at any time and free of charge. The legal basis for this processing is Article 6(1)(f) GDPR (legitimate interests pursued by the controller or a third party).
(5) Advertising and market research
If you have expressly consented to the use of your personal data, such as your email address and phone number, for advertising purposes or market and opinion research, you may withdraw your consent at any time. The legal basis for this processing is Article 6(1)(a) GDPR (consent).
(6) Contact
When you contact us by email, postal mail, or telephone using the contact details provided in the legal notice, the data you provide (for example, your email address and name as well as the content of your request) will be stored by us in order to process and respond to your questions or request.
We delete the data collected in this context when their storage is no longer necessary (typically after your request has been fully processed), or we limit the processing if there are legal retention obligations (for example, if the contact relates to a previous order on our online store).
Depending on the content of your request, the legal basis for the aforementioned processing is Article 6(1)(f) GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller).
3. Do we share your personal data with third parties?
We will only share your personal data with third parties if it is necessary for the performance of the contract concluded with you, if we have a legitimate interest, if you have given your consent, and/or if we are required to do so by law or by official or judicial decisions.
In particular, we may share your personal data with our service providers. To the extent that you have placed an order with us, your first and last name as well as your address will be transmitted to our shipping service providers in order to dispatch the ordered goods. The legal basis for this transmission is Article 6(1)(b) GDPR (processing is necessary for the performance of a contract).
In order to offer you a selection of different payment methods on our online store, we use external payment service providers. Depending on the payment method you choose when placing an order, we transmit the data collected for payment processing, such as banking or credit card information, to the bank or credit card company responsible for processing the payment, or to the payment service provider we have appointed. If the relevant payment service providers collect some of the data themselves, they are responsible for the data collected during the payment process, and their own data protection rules also apply. The legal basis for this transmission is Article 6(1)(b) GDPR (processing is necessary for the performance of a contract).
In order to ensure that you receive the goods on the scheduled delivery date and to avoid returned goods due to non-receipt, we also send your email address to shipping service providers so they can inform you of the expected delivery date by email. The shipping service providers use the email exclusively for this purpose. The legal basis for this transmission is Article 6(1)(f) GDPR (processing is necessary to protect legitimate interests).
For sending our emails, such as transactional emails including order confirmations and newsletters you have subscribed to, or, if you have consented, for marketing emails, we use email service providers who, on our behalf and strictly under our instructions, in accordance with Articles 6(1)(f) and 28 GDPR, use your email address to send the relevant message and for no other purposes.
We use service providers who supply web hosting services, and we also use third-party cloud or web-based software solutions that allow us to manage and host personal data with external service providers in order to reduce the load on our own servers and operate efficiently with new software solutions. We have entered into data processing agreements with the respective service providers to ensure that they do not process the data for their own purposes but only under our instructions and on our behalf. The legal basis for using service providers is Articles 6(1)(f) GDPR (processing is necessary to protect the legitimate interests of the controller) and 28 GDPR (data processing: subcontracting).
We also work with service providers for processing your data under our responsibility, particularly to deliver the Monolithe Studios services you have subscribed to and to perform certain tasks on our behalf: analytics, payment processing, marketing, etc.; however, these providers are obliged not to disclose data or use it for purposes other than those for which it was entrusted to them. The processing of data by service providers is subject to security and confidentiality obligations in accordance with this privacy policy and applicable laws and regulations.
Business partners:
Subject to your express consent, we may share your personal data with other partner companies that may send you marketing or commercial offers.
In the case of competitions organized in partnership with an expressly designated sponsor, your personal data will only be shared with the sponsor with your consent.
Marketing research:
We may use anonymous data (such as consolidated statistical data) on users of our products and services and/or participants in our surveys. This use is for the purpose of analyzing our sales, customers, and audiences to present this analysis to our partners, advertisers, or other trusted third parties. These statistics will never include information that allows identification of individuals.
In the event that we proceed with the sale or purchase of a business, we may be required to share your personal data with the potential buyer or seller.
If our business were to be transferred to a third-party company (through merger, acquisition, or any other legal operation resulting in the transfer of our assets), the personal data of our clients held by Monolithe Studios would be part of the transferred assets.
Legal procedures:
In certain cases, we may be required to disclose your personal data upon request by the judiciary or to comply with a legal requirement. In the context of litigation, we also reserve the right to disclose your personal data to the courts, provided that such disclosure is decisive or absolutely necessary for the defense of Monolithe Studios.
We may also share your data with third parties, which may, where applicable, be located in third countries, for the purpose of preventing fraud. In the event of transferring your data to third countries, Monolithe Studios takes the necessary measures to ensure an adequate level of protection as required by European Union regulations.
4. Personal data of minors
We do not knowingly collect data from individuals under the age of 16. If you are under 16 years old, we ask that you do not use our services or applications without the consent of your parents or guardians.
If you are a parent or guardian of a child under 16 and you believe that your child is using one of our websites or applications, or has subscribed to one of our services, or has provided personal data without your consent, please contact us at the following address: contact@monolithestudios.com and we will delete your child’s personal data within a reasonable timeframe.
5. How long do we retain your data?
The retention period of your data may vary depending on the purpose of collection.
We retain your data for the period necessary to provide the services you have requested, also taking into account our legal obligations, particularly with regard to accounting record-keeping.
Beyond the duration of service provision, we retain certain contact data for a defined period in order to offer you new services or offers. You may object to this retention (see § 10 below).
We regularly review the data we have recorded and delete or aggregate it (for statistical purposes) when its retention is no longer justified.
6. Data profiling
We may use your data to personalize the services we offer you or to send you marketing and advertising offers related to your interests, requesting your consent whenever necessary.
You may object at any time to the sending of these offers by clicking on the unsubscribe link that is always included.
7. Data protection
Monolithe Studios attaches particular importance to the protection of your personal data.
We have implemented security policies to protect your data against unauthorized access, illegal use, accidental loss, corruption, or destruction. We use appropriate technical and/or operational measures to protect your data and the systems in which they are stored. We ensure that these security measures are regularly reviewed and aim for the highest standards to implement best practices. We require our service providers to adhere to security measures at least equivalent to ours.
Regardless of the rigor of the protective measures we have implemented, we cannot guarantee absolute security, particularly in the event of a malicious or fraudulent intrusion. Should such an event occur, we will inform you as promptly as possible.
Data transfers outside the European Union:
Our data is stored and processed within the European Union. Exceptionally, we may transfer, store, or process your data outside the European Union. In such cases, we take all necessary measures to ensure that these operations are conducted under adequate security conditions and in compliance with European Union data protection legislation.
8. Links to other websites
Our websites may contain links to other websites operated by entities other than Monolithe Studios. This Privacy Policy applies only to our website, so we recommend that you review the privacy statements of any other websites you visit. Monolithe Studios cannot be held responsible for the privacy policies and practices of other websites, even if you access these third-party sites by clicking on a link available on one of our websites.
9. Your rights
Pursuant to Articles 49, 50, 51, 53, 55, and 56 of French Law No. 78-17 of January 6, 1978 on Information Technology, Data Files and Civil Liberties (“Informatique & Libertés”) and the European Regulation 2016/679 (“GDPR”), you may, in particular, request information on the processing of your Personal Data as well as a copy of your Personal Data and require, as applicable, that your Personal Data be corrected, completed, updated, locked, or deleted if it is inaccurate, incomplete, ambiguous, outdated, or if its collection, use, disclosure, or retention is unlawful.
In accordance with Article 18 of the GDPR, you may also, where applicable, request the restriction of processing (for example, when you contest the accuracy of your Personal Data – for a period allowing Monolithe Studios to verify the accuracy of your Personal Data, or when Monolithe Studios no longer needs your Personal Data for processing purposes but you still require it for the establishment, exercise, or defense of legal claims).
In accordance with Article 20 of the GDPR, you may also, within the limits of the technical means used by Monolithe Studios, request to receive your Personal Data in a structured, commonly used, and machine-readable format and have it transmitted to another data controller, for processing carried out using automated means for which you have given your consent.
To exercise your rights, you may:
Request access to your personal data, exercise your right to object or withdraw consent to the sending of all or part of the emails you may receive from Monolithe Studios, by writing to the postal address Monolithe Studios, 1 avenue Ingres, 75016 Paris, indicating the subject of your request. The request must be signed and accompanied by a photocopy of an identity document bearing your signature. The request must specify the address to which our response should be sent. We will respond within one (1) month of receiving your request.
10. For further information
To exercise your rights or obtain further information regarding the protection and use of your personal data by Monolithe Studios, please contact us by writing to the following email address: contact@monolithestudios.com or to the postal address: Monolithe Studios, 1 avenue Ingres, 75016 Paris.
You may also contact the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés, CNIL) at the following address: https://www.cnil.fr/fr/vous-souhaitez-contacter-la-cnil.