In general, your personal data will be used to interact with you and provide you with our services.

Your personal data is necessary for us to communicate with you and provide you with our
money transfer services. In this regard, we will provide you with a series of checkboxes
that will allow you to make clear and simple decisions regarding the use of your personal
information.

Generally, only authorized personnel within our organization will have access to the information we request from you.
Similarly, your personal information may be accessed by third parties that require it to provide the services we offer. For example, our payment correspondents will need your data to complete the payment at the destination, or the bank will access your data if the payment for our services is made via card or bank transfer.
Additionally, your information may be disclosed to public or private entities when we are legally obliged to do so. For instance, the Anti-Money Laundering Law requires us to provide the competent authorities with specific information about economic transactions that exceed certain thresholds or are considered risky.
Your data may also be shared if requested by competent public bodies such as Tax Authorities, Law Enforcement Agencies, Judges, and Courts, whenever MONTY is legally required to provide such information.
If, beyond these situations, we need to disclose your personal data to other entities, we will first request your consent through clear options that will allow you to make an informed decision.

We will protect your data with effective security measures according to the risks involved in the use of your information.
At MONTY, we maintain the highest levels of security required by law to protect your personal data against accidental loss, as well as unauthorized access, processing, or disclosure, considering the state of technology, the nature of the data stored, and the risks involved. When we receive your data, we use rigorous procedures and security features to prevent any unauthorized access.

Due to the provision of services to companies or individuals outside the European Economic Area or in countries deemed inadequate under Article 45 of the GDPR (you can consult the list of approved countries here), we are required to transfer your personal data to such parties in order to provide the requested services.

It may occur that we collaborate with providers who may have access to your data and will process such data on behalf of and under the instructions of MONTY. The selection of these providers follows a rigorous compliance verification process to ensure adequate data protection controls. Furthermore, a contract will be signed in which these providers commit to implementing appropriate technical and organizational measures and to processing personal data solely in accordance with the documented instructions of the joint controllers.

If any of the data processors are located outside the European Economic Area, the joint controllers will enter into Standard Contractual Clauses with them, which provide adequate safeguards and ensure that any third-party access to your data is fully protected at all times.

At any time, you may contact us to find out what information we hold about you, correct it
if it is inaccurate, and delete it once our relationship has ended, provided that this is legally
possible.
You also have the right to request the transfer of your information to another entity. This
right is known as “data portability” and may be useful in certain situations.
To exercise any of these rights, you must submit a written request to our email address
(dpo@mgpsa.com) or by postal mail to Calle Miguel Ángel, 22, 7th floor, along with a
photocopy of your ID in order to verify your identity.
Our agents’ offices have specific forms to request these rights, and we offer assistance to
help you complete them.
For more information about your data protection rights, you can visit the website of the
Spanish Data Protection Agency (www.agpd.es).