Privacy Policy

General Information

The following information provides a simple overview of what happens with your personal data when you visit this website. Personal data is any data by which you can be personally identified. For detailed information on data protection, please refer to our privacy policy set out below this text.

Data Collected on This Website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find their contact details in the section “Notice regarding the responsible entity” in this privacy policy.

How do we collect your data?

Your data is collected in part by you providing it to us — for example, when you enter data in a contact form.

Other data is automatically collected by our IT systems when you visit the website or after obtaining your consent. This primarily concerns technical data (e.g., Internet browser, operating system, or time of the page view). This data is automatically recorded as soon as you enter this website.

For what purpose do we use your data?

Some of the data is collected in order to ensure error-free provision of the website. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders, or other service requests.

What rights do you have regarding your data?

You have the right at any time to receive free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

For this and for further questions on data protection, please feel free to contact us at any time.

Analysis tools and third‑party tools

When you visit this website, your browsing behavior may be statistically evaluated. This mainly occurs through so‑called analysis programs.

Detailed information about these analysis programs can be found in the following privacy policy.

2. Hosting

We host the contents of our website with the following provider:

WIX

Provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter “WIX”).

WIX is a tool for creating and hosting websites. When you visit our website, WIX analyzes user behavior, visitor sources, the region of website visitors, and visitor numbers. WIX stores cookies in your browser that are required for the display of the website and to ensure security (necessary cookies).

The data collected via WIX may be stored on servers worldwide.

The servers of WIX are located, among other places, in the USA.

Details may be found in the Wix privacy policy:
https://de.wix.com/about/privacy

According to WIX, the transfer of data to the USA and other third countries is based on the Standard Contractual Clauses of the EU Commission or comparable safeguards under Article 46 of the GDPR. Details can be found here:
https://de.wix.com/about/privacy‑dpa‑users

Use of WIX is based on Article 6(1)(f) GDPR. We have a legitimate interest in a reliable presentation of our website. Where consent has been obtained, processing is exclusively based on Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications‑Telemedia Data Protection Act (TDDDG), to the extent that consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting). Consent can be revoked at any time.

The company has certification under the EU‑US Data Privacy Framework (DPF). The DPF is an agreement between the EU and the USA intended to ensure compliance with European data protection standards in data processing activities in the USA. Each DPF‑certified company commits to these standards. More information is available from the provider at:
https://www.dataprivacyframework.gov/participant/5626

Order Processing

We have concluded a data processing agreement (DPA) for use of the above‑named service. This is a contract required under data protection law, ensuring that personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection

The operators of this site take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions as well as this privacy policy.

When you use this website, various personal data is collected. Personal data is data by which you can be personally identified. This privacy policy explains which data we collect and why we use it. It also explains how and for what purpose this happens.

We point out that data transmission over the Internet (e.g., communication by email) may involve security vulnerabilities. Seamless protection of data against access by third parties is not possible.

Notice Regarding the Responsible Entity

The responsible entity for data processing on this website is:
MONÓ. Contemporary Men’s Studio GmbH
Phone: [phone number]
Email: mono.menonlygallery@gmail.com

The responsible entity is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Data Retention Period

Unless a more specific retention period is stated in this privacy policy, your personal data remains with us until the purpose for data processing ceases. If you submit a justified request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for retaining your personal data (e.g., tax or commercial retention periods). In the latter case, deletion occurs after these reasons no longer apply.

Legal Basis of Processing

If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR and Article 9(2)(a) GDPR if special categories of personal data are processed. In the case of explicit consent to transfer personal data to third countries, processing also occurs on the basis of Article 49(1)(a) GDPR. If your data is necessary for contract performance or pre‑contractual measures, we process your data on the basis of Article 6(1)(b) GDPR. Furthermore, we process data where required for legal obligations on the basis of Article 6(1)(c) GDPR. Data processing can also be based on our legitimate interest under Article 6(1)(f) GDPR.

Recipients of Personal Data

Within the scope of our business activities, we work with various external entities. Transmission of personal data to these external entities is only done if necessary for contract performance, if we are legally required (e.g., to tax authorities), if we have a legitimate interest under Article 6(1)(f) GDPR, or if another legal basis permits the data transfer. When using processors, personal data is only shared based on a valid data processing agreement.

Additional Rights

Right to revoke consent, right to object, right to data portability, right to information, correction, deletion, and restriction of processing are detailed here, consistent with Articles 15–21 GDPR.

4. Data Collected on This Website

Our website uses so‑called “cookies.” Cookies are small data packages and do not harm your device. They are either temporary for the duration of a session (session cookies) or permanent cookies. Session cookies are deleted automatically after your visit. Permanent cookies remain until you delete them or they are automatically deleted by your browser.

Cookies can be first‑party (set by us) or third‑party (set by external providers). Cookies have various functions — some are necessary for technical operations (e.g., shopping cart), others for analytics or advertising.

Necessary cookies are stored based on Article 6(1)(f) GDPR unless another legal basis is specified.

Server Log Files

The provider automatically collects and stores information in server log files that your browser transmits automatically, such as browser type, operating system, referrer URL, hostname, request time, and IP address. These data are processed under Article 6(1)(f) GDPR.

Contact by Email, Telephone, or Fax

When you contact us by email, phone, or fax, your request and any accompanying personal data are stored and processed to respond to your inquiry. This processing is based on Article 6(1)(b) GDPR if related to contract performance, or on Article 6(1)(f) GDPR for legitimate interest.

5. Newsletter

For subscription to the newsletter, we require an email address and confirmation that you own the email address and agree to receive the newsletter. Processing is based on consent (Article 6(1)(a) GDPR). You can revoke this consent at any time.

After unsubscribing, your email address may be stored on a blacklist to prevent future mailings under legitimate interest.

6. Plugins and Tools

Google Fonts (local hosting)

This site uses Google Fonts hosted locally. No connection to Google servers occurs.

More information: https://developers.google.com/fonts/faq

Google Maps

This site uses Google Maps provided by Google Ireland Limited. To use Google Maps, your IP address is stored and usually transmitted to Google servers in the USA. The site operator has no influence on this. Use of Google Maps is based on legitimate interest (Article 6(1)(f) GDPR). If consent for cookies or device access has been obtained, processing is also based on consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG). Data transfer to the USA is based on the Standard Contractual Clauses.

More information: https://privacy.google.com/businesses/gdprcontrollerterms

The company is certified under the "EU-US Data Privacy Framework" (DPF).
The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards in data processing activities in the United States.
Each company certified under the DPF undertakes to comply with these data protection standards.
Further information on this can be obtained from the provider at the following link:
https://www.dataprivacyframework.gov/participant/5780

We reserve the right to update this privacy policy at any time in accordance with legal requirements or changes to our website.

Last updated: January 2026