Privacy policy

This English translation is provided for your convenience. In the event of any discrepancy, the German version shall prevail.

Privacy Policy

Last updated: October 2026

MoNature, owner: Mona Espinoza López (hereinafter “we” or “MoNature”), operates this online shop at monature-cosmetics.com. The shop runs on the Shopify platform.

This privacy policy explains how we process personal data when you visit our shop, place an order with us or contact us.

The legal bases are in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and – for cookies and similar technologies – the German Telecommunications Digital Services Data Protection Act (TDDDG).

1. Controller

MoNature
Owner: Mona Espinoza López
Oberstraße 3
47829 Krefeld
Germany
Email: shop@monature-cosmetics.com
Phone: 015734340031

A data protection officer is not required by law and has not been appointed.

2. What data we process

  • Contact data: name, billing and delivery address, email address, phone number if provided
  • Order and payment data: products ordered, payment method, transaction data (card details are processed exclusively by the payment providers, not by us)
  • Customer account data: if you create an account, e.g. order history
  • Communication data: the content of your messages by email, contact form or chat
  • Technical data: IP address, browser and device information, time of access

3. Purposes and legal bases

  • Order, payment, shipping, returns and customer service – Art. 6(1)(b) GDPR (contract)
  • Retention under tax and commercial law – Art. 6(1)(c) GDPR (legal obligation)
  • Secure and stable operation of the shop, fraud prevention – Art. 6(1)(f) GDPR (legitimate interest)
  • Newsletter and non-essential cookies – Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent)

You may withdraw any consent you have given at any time with effect for the future.

4. Shopify

Our shop is provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes the data from your shop visit and your order on our behalf (Art. 28 GDPR). Data may also be transferred to Shopify Inc. in Canada or to service providers in the USA. For Canada, there is an adequacy decision of the EU Commission; for transfers to the USA, Shopify relies on the EU-US Data Privacy Framework or EU Standard Contractual Clauses.

For certain purposes of its own (e.g. fraud detection), Shopify is itself the controller. More information: Shopify privacy policy.

5. Payment and shipping

To process payments, we pass the necessary data to the payment provider you have chosen (Shopify Payments for card, Apple Pay, Google Pay and Shop Pay; PayPal; Klarna). For delivery, we pass your name and delivery address to the shipping company we use (e.g. DHL or Hermes). The legal basis is Art. 6(1)(b) GDPR.

Klarna: If you pay with Klarna, we pass your contact and order data to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna may carry out an identity and credit check, particularly for invoice or instalment purchases, and is itself responsible for this. You can find more information in Klarna’s privacy notice: klarna.com/de/datenschutz

6. Cookies and cookie banner

We set technically necessary cookies (e.g. for the cart and checkout) on the basis of § 25(2) TDDDG. All other cookies – for example for statistics or marketing – are only set if you consent via our cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your choice at any time via the cookie settings in the shop.

7. Newsletter

If you subscribe to our newsletter, we use your email address to send you information about products, offers and news. Registration takes place via the double opt-in procedure: you receive an email in which you confirm your registration. We store the time of registration and confirmation as proof. The newsletter is sent via Shopify Email. You can unsubscribe at any time via the unsubscribe link in every email. The legal basis is your consent (Art. 6(1)(a) GDPR).

If you abandon a purchase, you may receive a reminder email about your cart, provided you have consented to this.

8. Contact and chat

If you write to us by email, via the contact form or via the chat in the shop (Shopify Inbox), we process your details in order to answer your enquiry (Art. 6(1)(b) or (f) GDPR).

9. Product reviews

We use a review app integrated into Shopify to display and collect product reviews. If you submit a review, your name or the initials you provide, your review and any photos are stored and published in the shop (Art. 6(1)(a) GDPR).

10. Online withdrawal function

For our online withdrawal form (“Withdraw from contract”) we use the app “EU Widerruf Button” by 401layers UG (haftungsbeschränkt), Hilden, Germany. If you use the form, your name, email address, order number and your withdrawal details are processed in order to handle your withdrawal and send you a confirmation of receipt. The legal basis is Art. 6(1)(b) and (c) GDPR.

11. Storage period

  • Order and invoice data: until the statutory retention periods expire (up to 10 years)
  • Newsletter data: until you unsubscribe
  • Enquiries: until fully processed, then within the statutory periods

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent you have given (Art. 7(3)).

Right to object: Where we process data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). You may object to the use of your data for direct marketing at any time without giving reasons.

Simply contact us at shop@monature-cosmetics.com.

You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

13. Data security

The connection to our shop is SSL/TLS encrypted. We take appropriate technical and organisational measures to protect your data.

14. Changes

We update this privacy policy when our shop or the legal situation changes. The version published here applies.