Privacy Policy for MeninWatch.com

Last Updated: [Date]

1. Data Controller

MeninWatch GmbH (referred to as “we”, “us”, or “our”) operates this website and acts as data controller for your personal information under GDPR.

2. Information We Collect

Personal Data:

  • Identity Data (name, date of birth)
  • Contact Data (address, email, phone)
  • Financial Data (payment details via secure processors)
  • Transaction Data (purchase history)
  • Technical Data (IP address, device info)
  • Usage Data (browsing behavior)

Special Categories:

We do not intentionally collect:

  • Biometric data
  • Health information
  • Racial/ethnic origin data
PurposeLegal Basis
Order processingContract fulfillment
Customer serviceLegitimate interest
MarketingConsent
Fraud preventionLegal obligation

4. Data Sharing

We may disclose to:

  • Swiss-made movement manufacturers (for warranties)
  • Luxury packaging suppliers
  • Payment processors (PCI-DSS compliant)
  • Customs authorities (for international shipments)
  • IT security auditors

5. International Transfers

Data may transfer outside EU/EEA to:

  • Swiss watchmakers (under adequacy decision)
  • US service providers (with SCCs)
  • UK repair centers

6. Data Retention

  • Active customers: 10 years
  • Financial records: 7 years
  • Marketing consents: Until withdrawn
  • Website analytics: 26 months

7. Your Rights

You may:

  • Request access to your data
  • Correct inaccuracies
  • Request deletion
  • Restrict processing
  • Object to marketing
  • Request data portability

8. Security Measures

We implement:

  • 256-bit SSL encryption
  • Tokenized payments
  • Secure watch registration system
  • Annual penetration testing
  • Role-based data access

9. Cookies

Essential cookies required for:

  • Shopping cart functionality
  • Watch configuration tool
  • Secure login

Analytics cookies used only with consent.

10. Policy Updates

Will notify customers of material changes via:

  • Website banners
  • Account messages
  • Email (for major revisions)

For GDPR requests, please use our Data Subject Request Portal.