Last Revised: April 18, 2023
Thank you for your interest in our website. The protection of your personal data is a major concern for Monarx, Inc. (“Monarx,” “we,” or “us”).
A. General Information
Monarx, Inc., 8 East Broadway Suite 700 Salt Lake City, UT 84111, United States of America is the Data Controller in accordance with Art. 4 No. 7 GDPR and other applicable data protection law. We are responsible for the processing of the personal data, the technical provision, administration and distribution of the Website and the Software and Service.
Our EU GDPR Representative is:
Rickert Rechtsanwaltsgesellschaft mbH
Our UK-GDPR Representative is:
Rickert Services Ltd UK
PO Box 1487
2. Data Protection Officer
c/o Monarx, Inc.
8 East Broadway Suite 700
Salt Lake City, UT 84111
3. Legal Basis for the processing
We only process data if there is a legal basis for doing so. You will find the specific legal basis in the sections about data processing, but in general we may process your personal data if one of the following conditions applies.
The consent of the data subject for processing personal data.
For processing personal data that is necessary for the performance of a contract to which the data subject is a party. The same applies to processing procedures that are necessary to carry out pre-contractual duties.
The processing of personal data is necessary to fulfill a legal obligation governing our company.
4. Retention periods
We delete the data we process or restrict processing in accordance with the statutory provisions. Where not explicitly stated within the scope of this data protection declaration, we delete the data stored by us as soon as it is no longer required for its intended purpose. We will only retain the data beyond the point at which it is no longer required for its intended purpose if this is necessary for other legally permissible purposes or if the data must be retained for a longer period of time due to statutory retention obligations. If this occurs, processing will be restricted, i.e. blocked, and the data will not be processed for other purposes. A legal obligation to retain data exists, for example, due to documentation obligations under tax and company law.
Our Service is not meant for children under the age of 18. We will delete all data from children under that age. When you believe we might process personal data from children under the age of 13, please contact us at: firstname.lastname@example.org.
6. Data Processing and recipients of data
In some cases, we use external service providers for the processing of your data and would like to inform you about the third parties and processors to which we transfer data. We use different third-party providers for our Service. These have different purposes, which we discuss in more detail in the individual descriptions. These providers are used to make our service functional, secure and visually appealing, as well as to continuously optimize its content.
Where processors are being used, they are bound by our instructions under data protection law. These service providers are our contractors and assist with processing of your personal data, for example, to provide the Service. We have carefully selected our contractors and approved these contractors, and they are regularly monitored. Approvals are based on agreements for processing.
7. Data Security
We have implemented technical and organizational measures to protect your personal data from accidental loss and from unauthorized access, use, alteration, and disclosure. Our security measures are continuously improved in line with technological developments. Please note that the electronic transmission of information is not completely secure.
To protect your data in transit we use encryption technologies (TLS, SSL).
8. Third country transfers
Monarx is based in the State of Utah in the United States. When we obtain personal data about you, we may transfer, process, and store such information outside of the country in which you reside, including in the United States. We will inform you separately about the recipient and the corresponding legal basis in the event of a cross-border transfer (transfer to a third country or to an international organization).
9. Automatic decision making
No automated decision making, including profiling, is used by us.
10. Data protection when you are based in the EU / EEA or UK
a. Legal basis for data processing
During the use of our Service and Website, we process your personal data. We only process data when there is a legal basis for doing so. We specify the legal basis in the data processing sections, but in general we can process your personal data if one of the following conditions applies:
The data subject has consented to the processing of the personal data, the legal basis is Article 6 (1) (a), Article 7 GDPR.
The processing is necessary for the performance of a contract or for the performance of pre-contractual measures. Article 6 (1) (b) GDPR serves as the legal basis.
Processing is necessary for compliance with a legal obligation to which we are subject, Article 6 (1) (c) GDPR.
Processing is necessary for the purposes of a legitimate interest of our company or a third party, unless such interest is overridden by the interests, fundamental rights and freedoms of the data subject, Article 6 (1) (f) GDPR.
b. Your rights under the GDPR
You have the following rights free of charge against any person responsible for the processing of your personal data:
Right to withdraw your consent (Article 7 GDPR);
Right of access by the data subject (Article 15 GDPR);
Right to rectification and erasure (Article 16 and Article 17 GDPR);
Right to restriction of processing on the processing of your personal data (Article 18 GDPR);
Right to data portability (Article 20 GDPR);
Right to object to the processing of your personal data at any time for reasons relating to your special situation. (Article 21 GDPR).
For the assertion of claims, please contact the Data Controller or Data Protection Officer (find contact details above). Should you wish to contact us by e-mail, please use an address used to access our system so that we can identify you.
You also have the right to lodge a complaint about the controller's processing of your personal data with a supervisory authority responsible for data protection.
11. Data Protection when you are based in California
a. Legal basis for the data processing
California Civil Code Section § 1798.83 permits users of our Services who are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. For more information please se https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?division=3.&part=4.&lawCode=CIV&title=1.81.5
b. Your Rights
You have the right to ask businesses to disclose what personal information they have about you and what they do with that information, to delete your personal information, to correct inaccurate information that they have about you, to direct businesses not to sell or share your personal information, and to limit businesses’ use and disclosure of your sensitive personal information:
Right to know: You can request that a business disclose to you: (1) the categories and/or specific pieces of personal information they have collected about you, (2) the categories of sources for that personal information, (3) the purposes for which the business uses that information, (4) the categories of third parties with whom the business discloses the information, and (5) the categories of information that the business sells or discloses to third parties. You can make a request to know up to twice a year, free of charge.
Right to delete: You can request that businesses delete personal information they collected from you and tell their service providers to do the same, subject to certain exceptions (such as if the business is legally required to keep the information).
Right to correct: You may ask businesses to correct inaccurate information that they have about you.
Right to opt-out of sale or sharing: You may request that businesses stop selling or sharing your personal information (“opt-out”), including via a user-enabled global privacy control. Businesses cannot sell or share your personal information after they receive your opt-out request unless you later provide authorization allowing them to do so again.
Right to limit use and disclosure of sensitive personal information: You can direct businesses to only use your sensitive personal information (for example, your social security number, financial account information, your precise geolocation data, or your genetic data) for limited purposes, such as providing you with the services you requested.
To make such a request, please contact us through the information mentioned above.
12. Accessing and CHANGING Your Information
You can review and change the personal information associated with your account by logging into your account and visiting your account profile page. You may also send us an email at email@example.com to request access to, correct, or delete any personal data that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.
B. Data processing and collection of your personal data if you use our website
1. Technical Provision of the website, Hosting
In general, it is not necessary for you to actively provide personal data for the informational use of our website. We may collect personal data about you (which is automatically transmitted by your browser), i.e. personal data that can uniquely identify you when you use the website, such as:
Date and time of retrieval of one of our web pages;
your IP address;
host name of the connecting device;
the website from which our website was accessed;
following websites that were accessed via our website;
the page visited on our website;
the transmitted amount of data and the access status (file transmission, file not found etc.);
your browser type and version used;
the operating system used.
It is necessary to temporarily store the data for the course of a website visit in order to enable the delivery of the website. Additional storage of the log files takes place in order to ensure the functionality of the website and the security of the information technology systems (in particular to defend against abusive attacks, so-called DDoS attacks). Except where otherwise stated, your IP address will be shortened as quickly as possible so that identification is no longer possible. The legal basis for the temporary storage is the provision of our website for the fulfillment of a contract or the processing of operations required for the performance of pre-contractual measures. The legal basis for the continued storage with a shortened IP address is our legitimate interest in protecting our information technology systems.
To operate this website, we use a hosting provider to process meta and communication data of our website users, on our behalf and based on our legitimate interests in an efficient and secure provision of this website. For the operation of the website we use the hosting provider Webflow Inc., 398 11th St. Floor 2, San Francisco, CA 94103, USA.
For more detailed information on the terms and conditions of use and data protection, please visit: https://www.intercom.com/legal/privacy.
You can contact us via our contact forms to request a quote or to conduct other correspondence.
In order to process your request, we process your name, e-mail addresses, the names of your company, Comments which are absolutely necessary to create an offer. The processing of your data via the contact form takes place on the basis of our legitimate interest to provide a good customer service or is necessary to fulfil a contract or to process operations necessary for the implementation of pre-contractual measures insofar as the contacts are related to contractual performance obligations.
If you use our contact form, we also process data about your location (country and city based on IP address), data obtained from our tracking system, and data about the browser and device used.
We use the "HubSpot" service of the provider HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA as part of the contact form. For this purpose, we have concluded a data processing agreement with HubSpot, in which HubSpot undertakes to process data only in accordance with our instructions. We process your data based on our legitimate interests (efficient processing of requests).
As soon as the contact form is filled out, this information is linked to HubSpot's tracking information if you have consented to this in the cookie settings at the outset. If the email address filled in the form can be linked to an existing contact, we can identify you as an existing contact. The legal basis is your consent, which can be given when you first visit the website. You can withdraw your consent at any time with effect for the future via the cookie settings.
3. Chat option, Support
This Website uses Intercom Inc., 55 2nd Street, 4th Fl., San Francisco, CA 94105, USA, it is a communication platform for direct interaction via chat between website users and Monarx. Intercom Inc. provides a platform for us to host documentation and enable the chat function for you, so you can receive support and engage with our team.
When you use the chat bot on our website or visit the support website, we may collect information such as:
User behavior (accessed pages, clicks and scroll-behaviour)
Session length and if the site was left without any interaction
Approximate location (country and city)
Last contacted (the date you or a teammate last contacted a user).
Last heard from (the last day a user contacted you via message or email).
Last opened email (the date your user most recently opened an email).
Last clicked on link in email (the date your user most recently clicked on a link in an email).
Browser language and Browser version
In addition, you may voluntarily provide:
Signed up day
Messages, comments and conversations in Intercom.
Unsubscribed from Emails
The legal basis is your consent. Upon the first visit to our website, we ask for your consent. Consent may be withdrawn at any time. This can be done by using our consent manager or by deleting the cookies in your browser. This data will be automatically deleted after 9 months.
Please note that Intercom is a third party provider. For more detailed information on the terms and conditions of use and data protection, please visit: https://www.intercom.com/legal/privacy
4. Web-Analytics, Statistics
Unless otherwise stated, the processing described in this section is based on your consent. You can withdraw your consent at any time. Your data will be deleted unless there is a legal obligation to retain the data. Please note that the withdrawal does not affect the previous data processing.
Unless otherwise stated, the processing described in this section is based on your consent.
In order to determine which content on our website is of most interest to you, we continuously measure the number of visitors and the most viewed content. Therefore, we process your personal data
to record the number of visitors to our websites,
to record the respective visiting times of our website visitors, and
to record the order of visits to various websites and product pages in order to optimize our website.
a. Google Analytics
This website uses Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA to analyse the usage of our website. The collected data is used to optimise our website and our advertising effort.
Google Analytics is a web-analysing-service provided by Google. Google processed this data on our behalf and is contractually bound to implicate measures to ensure the integrity and confidentiality of the data.
Upon visiting our website, the following data is processed:
IP-address (in a shortened form. User cannot be directly identified)
Approximate location (country and city)
Technical information like browser, internet provider, device and screen resolution
Origin of your visit (from which website or which advertisement our site was reached)
Session length and if the site was left without any interaction
The legal basis is your consent. Upon the first visit to our website, we ask for your consent. Consent may be withdrawn at any time. This can be done by using our consent manager or by deleting the cookies in your browser. Another possibility is the browser addon provided by google, which deactivates Google Analytics. You can download it here: https://tools.google.com/dlpage/gaoptout?hl=dehttps://tools.google.com/dlpage/gaoptout?hl=de
Google Analytics sets cookies in your browser for the duration of two years from your last visit. These cookies contain a randomly generated User-ID, with which you can be recognised upon your next visit. The recorded data is stored in combination with the randomly generated User-ID, which makes an analysis of pseudonymised user profiles possible. This data will be automatically deleted after 2 months. Other data is stored in aggregated form indefinitely.
b. Google Tag Manager
Together with Google Analytics we use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Holding Company: Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The Tag Manager allows us to place and administrate small code elements called “tags” via an interface. The tool itself does not process any personal data itself. Google Tag Manager enables the activation of tags, which allows other services to collect data, but does not access the data itself.
Further information about the Google Tag Manager can be found here: https://www.google.com/intl/de/tagmanager/faq.html
We use the lead generation service of Leadinfo B.V., Crooswijksesingel 50, 3034 CJ Rotterdam, Netherlands this recognizes visits based on IP addresses. Leadinfo uses the visitor's IP address to obtain company data from public sources, such as the Chamber of Commerce.
We use the service of the provider HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA on our website to analyze the use of our website and for tracking/marketing measures/usage behavior in order to provide you with advertising that really interests you. The following data may be collected and processed via HubSpot:
Device model and version
HubSpot subscription service credentials
Operating system version
Internet service provider
Duration of visit
5. Content Delivery Network und Web Application Firewall
This website uses CloudFront a content delivery network (CDN) operated by Amazon Web Service 410 Terry Avenue North, Seattle WA 98109, United States, to safeguard our website (Web Application Firewall) and optimise loading times (Content Delivery Network).
When you load our website, your requests are routed by the CloudFront Server and statistical data about your visit is being collected and stored on a cookie on your device. This data includes your IP-address, accessed websites, type and version of your browser, your operating system, the referrer-URL (the site, from where you reached us), the length of your stay and the frequency of requests on our pages. The analysis based on this data is necessary to detect and defend attacks. Cookies are used to recognise your device. An analysis for the purpose of statistical evaluation or for advertising purposes is not performed.
The legal basis is our legitimate interest in safeguarding and optimizing the functionality of our website.
For further details, please see: https://aws.amazon.com/cloudfront/?nc1=h_ls
6. Other plugins and embedded third party content
a. Google Fonts
Our website uses Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Fonts is an interactive register with over 800 fonts, that Google provides free of charge.
Google Fonts is an important tool, to keep the high quality of our website. With Google Fonts we can use fonts without having to upload them to our servers. These fonts are automatically optimised for the web and there save data traffic and result in quicker loading times.
Google Fonts supports all established browsers and works reliantly on most mobile devices.
The legal basis is formed by our legitimate interests in the efficient and secure provision of the website.
Google Fonts does not set any cookies on your device. The data is requested via the google-domains fonts.googleapis.com and fonts.gstatic.com. According to Google, these requests are processed separately from other services Google provides. This includes your Google account, if you have one.
Google captures the usage of CSS (Cascading Style Sheets) as well as the fonts used and saves this data securely. Google stores CSS-requests for a day on their servers. The goal of Google is to improve loading time of websites by caching the fonts once and then using them again on any other website that uses Google Fonts. Next to this data, every Google Fonts request also automatically transmits data like your IP-address, language settings, screen resolution, name, and version of your browser to the Google Servers. In order to ensure a correct graphical display, this is necessary.
b. Font Awesome
Our website uses Font Awesome, to embed fonts and icons into the website to make our website more visually attractive. For this purpose we use the processor Fonticons, Inc. ,6 Porter Road Apartment 3R, Cambridge, MA 02140, USA. Further information on data protection can be found at https://fontawesome.com/privacy.
The legal basis is formed by our legitimate interests in the efficient and secure provision of the website. Font Awesome is an important tool, to keep the high quality of our website. With Font Awesome we can use fonts without having to upload them to our servers. These fonts are automatically optimised for the web and there save data traffic and result in quicker loading times.
Font Awesome supports all established browsers and works reliantly on most mobile devices.
Font Awesome does not set any cookies on your device.
The goal of Font Awesome is to improve loading time of websites by caching the fonts once and then using them again on any other website that uses Font Awesome. Next to this data, every Font Awesome request also automatically transmits data like your IP-address, language settings, screen resolution, name, and version of your browser to the Font Awesome Servers. This is necessary to ensure a correct graphical display.
Our website uses JSDeliver to deliver individual web pages quickly and flawlessly on all different devices. For this purpose, we use the open source service of jsedelivr.com of the company Prospect One, Kólewska 65A/1, 30-081, Kraków, Poland. This is a content delivery network (CDN). A CDN helps to provide content of our online offer, especially files such as graphics or scripts, faster with the help of regionally or internationally distributed servers. In order to provide this service, your browser may send personal data to jsdelivr.
When you visit our website, the following data may be recorded, among others:
Which web page was loaded
Time and date of the visit
The legal basis is our legitimate interests in the efficient and secure provision of the website The data is stored for the duration of the session. Further information can be found at https://www.jsdelivr.com/privacy-policy-jsdelivr-net. To prevent the execution of the Java Script code of jsdeliver.net altogether, you can install a so-called Java Script blocker, such as noscript.net or ghostery.com. However, if you prevent or restrict the execution of the Java Script code, for technical reasons this may mean that not all content and functions of our website are available.
We use your personal data to send you our newsletters and to inform you about news from our company, new services, new products, and events tailored to your interests. This includes information on current or future range of services and products as well as functions and events with participation of our company or group companies (e.g., trade fairs). To send you the newsletter, we need your e-mail address. The legal basis for the processing is your consent. We will use the personal data you provided exclusively for correspondence with you, including sending our newsletter. After you entered your email address in the sign-up form on our website, you may receive an e-mail from us asking for you to confirm that you wish to receive the newsletter. We are also entitled to keep your IP addresses, and times of registration and confirmation times to verify your registration and to appropriately clarify any possible misuse of your personal data.
To contact you by e-mail, we need your e-mail address to be able to reply to you. The legal basis for the processing is our legitimate interests in efficient processing of requests.
When you receive an email from us, we also track and analyze your behavior. We are able to analyze our newsletter campaigns. When you open an e-mail, a file contained in the e-mail (so-called web beacon) connects to our newsletter server. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked. Moreover, technical information is recorded (e.g. time of retrieval, IP address, browser type and operating system). However, this information cannot be attributed to the respective newsletter recipient. It will be used exclusively for the statistical analysis of the newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients. Should you not wish to receive an analysis, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.
The legal basis for this processing is your consent. You can withdraw your consent to the processing of your personal data at any time by sending us an email stating your request to firstname.lastname@example.org. If you have received a promotional email from us, you can also opt out of receiving future promotional emails from us by following the unsubscribe instructions contained in such email. Please note that we may still contact you regarding your purchases, orders, services, etc.
We will delete your requests immediately after processing unless legal retention periods require continued retention.
We use for the dispatch of our newsletter Mailchimp from The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE Suite 5000, Atlanta, GA 30308 USA (Mailchimp) to communicate with you. This allows us to contact you directly i.e. for request/ password resets or sign up questions. In addition, we analyze your usage behavior in order to optimize our offer.
For more detailed information on the terms and conditions of use and data protection, please visit: https://mailchimp.com/legal/prior-privacy-policy/
C. Data processing and collection of your personal data during account registration and Login
1. Account registration
We may collect personal data about you, meaning personal data that can uniquely identify you, when you register for an account, such as:
Time and Date;
Duration of the use of the Service including whether you are a repeat or first-time visitor);
Information about the devices you use to access the Services (such as the IP address and the type of the device, operating system, and web browser);
Personal information: Name, email address, and company
When your register for an account, we may also collect certain information by automated means, such as cookies. A “cookie” is a text file that websites send to a visitor’s computer or other Internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. We may also use third-party analytics tools that collect information about use of the Services and user traffic.
We may also collect personal data about you, meaning personal data that can uniquely identify you, when you login for your account, such as:
Information about the devices you use to access the Services (such as the IP address and the type of the device, operating system, and web browser)
Time and Date
When you login for your account, we may also collect certain information by automated means, such as cookies. A “cookie” is a text file that websites send to a visitor’s computer or other Internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser.
We may also use third-party analytics tools that collect information about use of the Services and user traffic.
3. Direct Marketing
We have a legitimate interest (direct advertising) in advertising to our customers (persons with whom we have or have had a business relationship) by e-mail or post. In particular, we may send you news about our company or group companies, information on events and invitations to review our services and products.
For this purpose and for sending the newsletter, we use the processor mentioned above (“Newsletter”), which processes data on our instructions. To send you advertising by post, we use a post service partner.
You can object to the sending of advertising at any time by sending an e-mail at email@example.com or by following the instructions at the end of a promotional e-mail. If possible, please send your e-mail from the same e-mail address you used for registration, so that we can assign you more easily.
D. Data Storage
For the data storage we use the hosting service AWS of the hosting provider Amazon Web Services (AWS) 410 Terry Avenue North, Seattle WA 98109, United States. We use this service to host our MySql instance for storage of registered user account data and to host our website. When you visit our website and use our service, your personal data is processed on AWS servers.
When you use our service, your personal data, such as display name, email, IP address are processed on AWS servers. The use of AWS is based on a legitimate interest in the most accurate and reliable delivery of our services.