Privacy Policy

September 2024

We (i.e., the company providing you with this privacy policy or named in the imprint as the operator of this site) take the protection of your personal data seriously. This privacy statement describes how we collect, use, disclose, transfer, and store your personal data ('process'). The personal data collected depends on the context of your interactions with us, the products, services, and features you use, your location and residence, as well as the applicable law.

1. Processing of personal data related to your use of our websites, applications, and online services Data categories and purpose of processing

In connection with your use of our external and internal websites, applications, or online services (each an 'Online Offering'), we process the following categories of personal data:

- Your contact information, such as first and last name, business address, business phone number, business mobile number, and business email address,

- Organizational information, including position and company name,

- Other personal data you provide in contact forms and other forms within an Online Offering,

- Information you provide as part of a support request, a survey, a comment, or a forum post,

- Information automatically collected during the use of an Online Offering, such as your device and user ID, information about your operating system, pages and services you used and visited during your visit, as well as the date and time of a user request.

We process your personal data for the following purposes:

- To enable you to use the services and functions of the Online Offerings, including creating and managing your online account, within the framework of updates, security, and troubleshooting measures,

- To provide customer support and to improve and further develop our Online Offerings,

- To bill the use of an Online Offering, to establish your identity, and to enable user authentication,

- To process your request or instruction,

- To process your order and make related information and offers accessible to you,

- To contact you with information and offers about our products and services and to send you further marketing information or contact you as part of customer satisfaction surveys,

- To enforce our terms of use, assert legal claims or defend against them, and to prevent and combat fraudulent and similar actions, including attacks on our IT infrastructure.

Online Offerings provided by your employer

In some cases, our Online Offerings are provided to you by the company you are employed with. When you use an Online Offering provided by your company, the processing of personal data included by you or your company in the content of the Online Offering takes place on behalf and according to your company's instructions and within the framework of a data processing agreement between your company and us. In this case, your company is legally responsible. If you have questions about personal data that we process as a data processor for your company, please contact your company.

2. Processing of personal data in relation to your use of our marketplaces Data categories and purpose of processing

In connection with your use of our marketplaces (each a 'Marketplace'), we process the following categories of personal data:

- Your contact information, such as first and last name, business address, business phone number, business mobile number, and business email address,

- Organizational information, including position and company name,

- Payment data, such as information required for processing payment transactions or fraud prevention, including credit card information and card verification numbers,

- Other personal data you provide in contact forms and other forms within a Marketplace,

- Information you provide as part of a support request, a survey, a comment, or a forum post;

- Information legally required as part of compliance and export control screenings, such as date of birth,

nationality, residence, identification numbers, information about relevant court proceedings and other legal disputes, and

- Information automatically collected during the use of a Marketplace, such as your device and user ID,

information about your operating system, pages and services you used and visited during your visit, as well as

the date and time of a user request.

We process your personal data for the following purposes:

- Communicating with you about our services and products, e.g., to process your inquiries or provide technical information about products,

- Planning, executing, and managing the (contractual) business relationship, e.g., to process product and service orders, collect payments, for accounting and billing purposes, and to carry out deliveries, maintenance, or repairs,

- Contacting you with information and offers about our products and services and conducting further marketing activities and customer satisfaction surveys,

- Maintaining and protecting the security of our products and services as well as our websites, preventing and detecting security risks, fraudulent activities, or other criminal or harmful actions,

- Complying with legal requirements (e.g., retail and tax retention obligations), existing compliance screening duties (to prevent financial crime or money laundering) as well as our policies and industry standards and

- Settling legal disputes, enforcing existing contracts, and asserting, exercising, and defending legal claims.

3. Processing of personal data of business partners Data categories and purpose of processing

In collaboration with business partners, we process personal data of end consumers and contact persons at customers, prospects, distributors, suppliers, and partners (each a 'Business Partner'):

- Contact information, such as first and last names, business address, business phone number, business mobile number, and business email address,

- Organizational information, including position and company name,

- Payment data, such as information required for processing payment transactions or fraud prevention, including credit card information and card verification numbers,

- Further information whose processing is required within the framework of a project or to process a contractual relationship with us, or that are voluntarily provided by business partners, e.g., in the context of orders, inquiries, or project details,

- Personal data obtained from publicly available sources (including corporate or professional social networks and websites), information databases, or by credit agencies, and

- Information legally required as part of compliance and export control screenings, such as date of birth,

nationality, residence, identification numbers, information about relevant court proceedings and other legal disputes in which business partners are involved.

We process personal data for the following purposes:

- Communicating with business partners about products, services, and projects, e.g., to process inquiries from the business partner or provide technical information about products,

- Planning, executing, and managing the (contractual) business relationship between the business partner and us, e.g., to process product and service orders, collect payments, for accounting and billing purposes, and to carry out deliveries, maintenance, or repairs,

- Creating a personal profile with business-related information about interactions between you and us with the aim of providing you and the company you work for with relevant information and suitable offers for services and products and to improve our personal communication with you,

- Conducting market analyses, competitions, or similar activities and events,

- Contacting you with information and offers about our products and services and conducting further marketing activities and customer satisfaction surveys,

- Maintaining and protecting the security of our products and services as well as our websites, preventing and detecting security risks, fraudulent activities, or other criminal or harmful actions,

- Settling legal disputes, enforcing existing contracts, and asserting, exercising, and defending legal claims.

4. Processing of personal data for customer satisfaction surveys and direct marketing

Under applicable law, we may use your contact details for direct marketing purposes (e.g., trade fair invitations, newsletters with information and offers about our products and services) and to conduct customer satisfaction surveys, each also by email. You have the right to object to the use of your contact details for these purposes at any time by sending an email to contact@Mentoc or by using the opt-out option in the message you received.

5. Processing of personal data related to your application

If you apply for a job with us, we process your personal data as described in the privacy policy of the Mentoc Recruiting Portal or the application platform you used.

6. Transmission and disclosure of personal data

We only transmit your personal data as described below:

Companies and distributors

For the purpose and to the extent necessary to carry out our business relationship with you, we transmit your personal data to our companies and other third parties (e.g., distributors and agents). For example, we only distribute certain products and services through local business relationships, and in this case, we transmit your personal data to our respective local companies or other distributors managing the business relationship with you.

Transactions on our marketplaces

Through our marketplaces, we also provide products, services, and offers from our companies and other third parties. We transmit personal data of our customers related to these transactions to the respective company and/or other third parties.

Service providers

We engage companies and other entities to perform tasks on our behalf, e.g., manufacturers, service providers, IT services, or payment processing. These companies and other entities process personal data solely for the purpose of the entrusted products and services.

Other third parties

We transmit personal data related to compliance with legal obligations or the establishment, exercise, or defense of rights or claims to other third parties (e.g., for court and arbitration proceedings, to regulatory, law enforcement, and government authorities, to lawyers, and consultants). Recipients of your personal data may be located outside the country where you reside. Personal data you publish via online offerings (e.g., in chatrooms or forums) can be accessible to other registered users of the respective online offering worldwide.

7. Retention periods

Unless a specific retention period is specified at the time of collection (e.g., as part of a consent declaration), your personal data will be deleted as soon as it is no longer necessary to fulfill the purpose of storage, unless legal retention obligations (e.g., commercial and tax retention requirements) preclude deletion.

8. Your rights

Under applicable data protection law, you may have the right to:

- Request confirmation whether we process personal data about you and obtain information about the personal data we process,

- Request the rectification of inaccurate personal data,

- Request the deletion of the personal data we process,

- Request the restriction of the processing of personal data,

- Request the transfer of personal data that you have actively provided to us,

- Object to the processing of personal data for reasons arising from your particular situation, or

- Revoke any consent given.

9. Data security

We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, use, or alteration, as well as unauthorized disclosure or access.

10. Contact person

Our data protection organization assists with all questions related to data protection. Complaints can also be made to our data protection organization, and the rights described in this privacy statement can be asserted.

Our data protection organization can be contacted at datenschutz@Mentoc.

Our data protection organization is always committed to addressing your inquiries and complaints and remedying them. In addition to contacting the data protection organization, you also have the option of contacting the relevant data protection supervisory authority at any time.

11. Processing of personal data within the scope of the EU General Data Protection Regulation

This paragraph applies if your personal data is processed by one of our companies based in the European Economic Area.

Controller for data processing Online Offerings

The controller within the meaning of the General Data Protection Regulation for the processing activities described in this privacy statement is the company named in the imprint of the Online Offering.

Marketplaces

The company named as the operator of the marketplace is the controller for data processing.

Personal data of business partners in our customer relationship systems

We may share contact information of business partners within the framework of your business relationship with us with other companies. We and these companies are jointly responsible for the protection of your personal data (Art. 26 General Data Protection Regulation). To ensure that you can exercise your rights under data protection law in the context of this joint responsibility simply and reliably, we have agreed with these companies that you can assert your data subject rights described in section 6 not only with the respective company but also centrally with SCAILE Technologies UG. Please contact us for this at: datenschutz@Mentoc.

Legal basis for processing

The General Data Protection Regulation requires Mentoc to inform you about the legal basis for data processing. Unless otherwise explicitly stated at the time of collection, the legal basis for data processing is:

- The execution and fulfillment of a contract with you (Article 6 (1) (b) of the General Data Protection Regulation) ('Contract execution'),

- Compliance with legal obligations to which we are subject (Article 6 (1) (c) of the General Data Protection Regulation) ('Compliance with legal obligations'), or

- Safeguarding our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation) ('Legitimate interest in processing').

Our legitimate interest lies in processing your personal data for the purpose of:

(i) Offering and operating the Online Offerings and

(ii) Initiating, executing, and managing our business relationship.

To the extent that our legitimate interest in processing is specified as the legal basis for processing your personal data below, we believe that your interests, fundamental rights, and freedoms are adequately taken into account because:

(i) We regularly review the processing activities and underlying processes described in this privacy statement,

(ii) We incorporate the protection of your personal data into our processes, including the Binding Corporate Rules for the protection of personal data (Mentoc Binding Corporate Rules),

(iii) We ensure the transparency of our processing activities and

(iv) You are entitled to the aforementioned rights concerning our processing activities.

If you would like more information about the described balancing of interests, please contact our data protection organization at datenschutz@Mentoc.

If, in an individual case, you have expressly consented to the processing of your personal data, this consent is the legal basis for processing (Article 6 (1) (a) of the General Data Protection Regulation) ('Consent').

Processing of personal data in connection with the use of our Online Offerings - Purpose and legal basis

- Enabling the use of the services and functions of the Online Offerings, including creating and managing your online account, within the framework of updates, security, and troubleshooting measures, to provide customer support, and to improve and further develop our Online Offerings

- Contract execution (Article 6 (1) (b) of the General Data Protection Regulation)