Mondu BNPL for B2B

Information pursuant to Article 13 General Data Protection Regulation for Buyers

Compliance with the General Data Protection Regulations is a high priority for our company. We would like to inform you below about the collection of your personal data by us:

Responsible entity

Responsible for the data processing described below is:

Mondu GmbH

Alexanderstrasse 36

10179 Berlin, Germany


Data we process

a) For the fulfillment of contractual obligations (Art. 6 para. 1 b p. 1 lit. b GDPR)

We collect personal data from you that is required for the verification and execution of the requested payment option, the communication in the context of the use of our services and the assignment of receivables. In addition to your company data and, if applicable, data on the owner, this also includes name, address, e-mail address, telephone number, URL, delivery and billing address, order data (such as currency, order details, shopping cart, purchase ID), industry and company form. Failure to provide this data may result in the agreement not being concluded.

b) To protect our legitimate interests (Art. 6 para. 1 p. 1 lit. f GDPR)

Where necessary, we process your data (in particular the name of your company and, where applicable, your contact details) beyond the actual performance of the contract to protect the legitimate interests of Mondu and third parties. This may include consulting credit agencies to determine and continuously monitor creditworthiness or default risks, as well as analyses for fraud prevention and risk assessment. We also process personal data for the purpose of processing your requests. We may also process your data for receivables management and for the assertion or defense of legal claims. In addition, we and the financial institutions cooperating with us may transfer your personal data that we have collected in connection with the purchase of goods, as well as data on your creditworthiness, to banks and insurance companies for the purpose of refinancing.

c) Based on your consent (Art. 6 para. 1 p. 1 lit. a GDPR)

If you have given us your consent to do so, we will process your contact data as well as data about your position in the company for advertising, including to send you advertising relevant to you by e-mail or telephone or for advertising campaigns on social media.

Profiling and automated decision making

We use personal data for automated decision-making, including profiling, in order to be able to make a decision about the conclusion of an agreement with you. Should this lead to an automated rejection of your request, we will inform you thereof. For this purpose, we process company data and, if applicable, data on the owner, as well as name, address, e-mail address, telephone number, URL, delivery and billing address, order data (such as currency, order details, shopping cart, purchase ID), industry and company form. The logic involved matches your data with our risk criteria and third party databases using an artificial intelligence based algorithm.

You have the right to request that the automated decision be reviewed by one of our administrators, and you may also present your own point of view or challenge the decision. To exercise these rights, please send us an email describing your concerns to the following e-mail address:

Data deletion

If there is no legal retention period, the data will be deleted as soon as storage is no longer necessary or the legitimate interest in storage has expired. The duration of storage depends, among other things, on the statutory retention obligations, e.g. from the German Fiscal Code (6 years) or the German Commercial Code (10 years).

If your application has been rejected, we will store your data for a maximum period of 6 months.

Recipients of your data

We share your data to the extent necessary for the provision of our services with financial institutions, insurance companies and credit agencies cooperating with us and, in the event of assignment of the receivable, to the new holder of the receivable. For the purpose of receivables management, personal data may also be transferred to third parties who provide collection and dunning services. If you have given us your consent to do so, we may also transfer your data to companies that support us in our advertising campaigns, e.g. social media.

If necessary, we use service providers who are strictly bound by instructions and who support us, for example, in the areas of platform hosting, marketing or the archiving and destruction of documents and with whom separate contracts for order processing have been concluded.

Your data protection rights

You can request information about your personal data processed by us. If your information is not (or no longer) accurate, you can request that your data be corrected. If your data is incomplete, you can request that it be completed. You have the right to request the deletion of your data. Please note that a claim for deletion depends on the existence of a legitimate reason. In addition, there must be no regulations that require us to retain your data. You have the right to request the restriction of the processing of your data. Please note that a right to restriction of processing depends on the existence of a legitimate ground. If the processing of your personal data is based on consent, you have the right to revoke the consent at any time, without giving reasons, for the future. The processing of the data until the revocation remains unaffected and is considered lawful.

You have the right to object to the processing of your data on grounds relating to your particular situation.

Every data subject has the right to file a complaint with a supervisory authority if he or she believes that the processing of data concerning him or her violates data protection regulations.

Our Data Protection Officer

Our external Data Protection Officer will be happy to provide you with more information about data protection under the following contact details:

datenschutz nord GmbH

Berlin Branch

Kurfürstendamm 212

10719 Berlin, Germany


If you contact our Data Protection Officer, please indicate the responsible person.