Privacy Policy

Last updated: [09.08.2026]

1. Introduction

Monotides ("we", "us", "our") takes the protection of your personal data seriously. This Privacy Policy informs you about how we collect, process, and use your personal data when you visit our website or place an order. Processing is carried out in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws.

2. Data Controller

Controller responsible for data processing:

Monotides [Monotides / Monotides] [Austria] Email: [business.monotides@gmail.com] Discord: discord.gg/monotides WhatsApp: +43 664 99779941

3. Data We Collect

We collect and process the following categories of personal data:

Automatically collected data

• IP address
• Browser type and version
• Operating system
• Referrer URL
• Pages visited
• Date and time of access

Data you provide voluntarily

• Name (first and last)
• Email address
• Shipping address (street, city, postal code, country)
• Phone number (optional)
• Date of birth (for age verification, 18+)
• Payment information (processed by Stripe — we do not store full card details)

Order-related data

• Order history
• Products purchased
• Communication with customer support

4. Purpose of Data Processing

We process your personal data for the following purposes:

1. Contract fulfillment — processing orders, shipping products, handling returns
2. Payment processing — via Stripe
3. Age verification — ensuring compliance with our 18+ policy
4. Customer communication — responding to inquiries via Discord, WhatsApp, or email
5. Legal compliance — tax, accounting, and regulatory obligations
6. Website optimization — analyzing usage to improve our services
7. Fraud prevention — protecting against fraudulent orders

5. Legal Basis for Processing

Processing is based on the following legal grounds under the GDPR:

• Art. 6(1)(b) GDPR — contract performance and pre-contractual measures
• Art. 6(1)(c) GDPR — legal obligations (e.g., tax retention)
• Art. 6(1)(f) GDPR — legitimate interest (fraud prevention, website security)
• Art. 6(1)(a) GDPR — consent (for cookies, marketing if applicable)

6. Payment Processing — Stripe

All payments are processed via Stripe Payments Europe Ltd., a payment service provider that complies with PCI-DSS standards. We do not store your full credit card details on our servers.

Stripe may process data outside the EU. For more information, see Stripe's Privacy Policy: https://stripe.com/privacy

7. Shipping Carriers

To deliver your order, we share necessary data (name, shipping address, email, phone if provided) with our shipping carriers (e.g., DHL, DPD, UPS). This sharing is limited to what is required for delivery.

8. Cookies

Our website uses cookies to ensure proper functionality and to analyze usage. Cookies are small text files stored on your device.

Types of cookies used

• Strictly necessary cookies — required for the website to function (e.g., shopping cart)
• Functional cookies — remember preferences (e.g., language)
• Analytics cookies — anonymized usage statistics (e.g., Google Analytics, if used)

You can disable cookies in your browser settings. However, this may limit website functionality.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law:

• Order and invoice data: 10 years (tax retention obligation)
• Customer account data: until deletion is requested
• Server logs: 30 days
• Support communications: 2 years

10. Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15) — request information about your data
• Right to rectification (Art. 16) — correct inaccurate data
• Right to erasure (Art. 17) — request deletion ("right to be forgotten")
• Right to restriction (Art. 18) — restrict processing
• Right to data portability (Art. 20) — receive your data in a portable format
• Right to object (Art. 21) — object to processing based on legitimate interest
• Right to withdraw consent (Art. 7(3)) — at any time, where processing is based on consent
• Right to lodge a complaint with a supervisory authority

To exercise your rights, contact us at [business.monotides@gmail.com]. We will respond within 30 days.

11. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• SSL/TLS encryption for all data transmission
• Secure payment processing via Stripe
• Restricted access to personal data (need-to-know basis)
• Regular security reviews

12. Third-Party Services

The following third-party services may process your data:

• Stripe — payment processing
• Shipping carriers (DHL, DPD, UPS) — order delivery
• Hosting provider — website and database hosting
• Discord — customer communication
• WhatsApp — customer communication

13. International Data Transfers

Some of our service providers (e.g., Stripe) may process data outside the European Economic Area (EEA). In such cases, we ensure that adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.

14. Age Restriction

Our services are intended exclusively for users 18 years or older. We do not knowingly collect data from minors. If you believe we have collected data from a minor, please contact us immediately for deletion.

15. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in our practices or applicable law. The current version is always available on our website. Material changes will be communicated via email or a prominent notice on the website.

16. Contact

For questions regarding data protection or to exercise your rights:

Monotides Email: [business.monotides@gmail.com] Discord: discord.gg/monotides WhatsApp: +43 664 99779941

Supervisory authority: You have the right to lodge a complaint with your local data protection authority. In Austria, this is the Österreichische Datenschutzbehörde. In Germany, the respective Landesdatenschutzbehörde of your residence.

Disclaimer: This is a general template and does not constitute legal advice. Monotides recommends consulting a qualified attorney for final review and adaptation to applicable data protection laws.