Privacy Policy
September 2024
We (i.e., the company providing this privacy notice to you or named in the legal notice as the operator of this site) take the protection of your personal data seriously. This privacy notice describes how we collect and gather, use, disclose, transfer, and store (“process”) your personal data. The personal data collected depends on the context of your interactions with us, the products, services, and features you use, your location and residence, and the applicable law.
1. Processing of personal data in connection with your use of our websites, applications, and online services Data categories and purpose of processing
As part of your use of our external and internal websites, applications, or online services (each an “Online Offer”), we process the following categories of personal data:
- Your contact information, such as first and last name, business address, business phone number, business mobile number, and business email address,
- Organization information, including position and company name,
- Other personal data that you provide in contact and other forms of an Online Offer,
- Information that you provide as part of a support request, survey, comment, or forum post,
- Information that is automatically collected as part of the use of an Online Offer, such as your device and user identity, information about your operating system, pages and services you have used and visited during your visit, as well as the date and time of a user request.
We process your personal data for the following purposes:
- to enable you to use the services and functions of the Online Offers, including to create and administer your online account, as part of updates, security, and bug-fix measures,
- to provide customer support and to improve and further develop our Online Offers,
- to invoice the use of an Online Offer, to establish your identity and enable user authentication,
- to process your request or instruction,
- to handle your order and provide you with related information and offers,
- to contact you with information and offers about our products and services and send you further marketing information or contact you as part of customer satisfaction surveys,
- to enforce our terms of use, assert legal claims or defend against them, and to avert and prevent fraudulent and similar actions, including attacks on our IT infrastructure.
Online Offers provided by your company
In some cases, our Online Offers are provided to you by the company you work for. If you use an Online Offer provided by your company, the processing of personal data provided by you or your company in the content of the Online Offer takes place on behalf of and according to the instructions of your company, within the framework of a service processing agreement between your company and us. In this case, your company is responsible under data protection law. If you have questions about personal data that we process as a processor for your company, please contact your company.
2. Processing of personal data in connection with your use of our marketplaces Data categories and purpose of processing
In connection with your use of our marketplaces (each a “Marketplace”), we process the following categories of personal data:
- Your contact information, such as first and last name, business address, business phone number, business mobile number, and business email address,
- Organization information, including position and company name,
- Payment data, such as information required to process payment transactions or fraud prevention, including credit card information and card verification numbers,
- Other personal data that you provide in contact and other forms of a Marketplace,
- Information you provide as part of a support request, survey, comment, or forum post,
- Information legally required in connection with compliance and export control screenings, such as date of birth,
nationality, residence, ID numbers, information about relevant court proceedings and other legal disputes, and
- Information automatically collected as part of the use of a Marketplace, such as your device and user identity,
information about your operating system, pages and services you visited during your visit, as well as
the date and time of a user request.
We process your personal data for the following purposes:
- Communication with you regarding our services and products, e.g., to process your inquiries or provide technical information about products,
- Planning, executing, and managing the (contractual) business relationship, e.g., to process product and service orders, collect payments, for accounting and billing purposes and to perform deliveries, maintenance tasks or repairs,
- Contacting you with information and offers about our products and services and conducting further marketing activities and customer satisfaction surveys,
- Maintaining and protecting the security of our products and services as well as our websites, preventing and detecting security risks, fraudulent actions, or other criminal or harmful conduct,
- Complying with legal requirements (e.g., tax and commercial retention obligations), existing obligations to conduct compliance screenings (to prevent economic crime or money laundering), as well as our policies and industry standards, and
- Settling legal disputes, enforcing existing contracts, and asserting, exercising, and defending legal claims.
3. Processing of personal data of business partners Data categories and purpose of processing
In connection with cooperation with business partners, we process personal data of end consumers and contacts at customers, prospects, distributors, suppliers, and partners (each a “Business Partner”):
- Contact information, such as first and last names, business address, business phone number, business mobile number, and business email address,
- Organization information, including position and company name,
- Payment data, such as information required for processing payment transactions or fraud prevention, including credit card information and card verification numbers,
- Other information whose processing is necessary in connection with a project or executing a contractual relationship with us or voluntarily provided by business partners, e.g., in connection with orders placed, inquiries, or project details,
- Personal data collected from publicly available sources (including corporate or professional social networks and websites), information databases, or credit agencies, and
- Information legally required in connection with compliance and export control screenings, such as date of birth,
nationality, residence, ID numbers, information about relevant court proceedings and other legal disputes involving business partners.
We process personal data for the following purposes:
- Communication with business partners regarding products, services, and projects, e.g., to process business partner inquiries or provide technical information about products,
- Planning, executing, and managing the (contractual) business relationship between the business partner and us, e.g., to process product and service orders, collect payments, for accounting and billing purposes, and to perform deliveries, maintenance tasks, or repairs,
- Creating a personal profile with business-related information about interactions between you and us, with the aim of offering you and the company you work for relevant information and suitable offers for services and products and improving our personal communication with you,
- Conducting market analyses, sweepstakes, competitions, or similar promotions and events,
- Contacting you with information and offers about our products and services and conducting further marketing activities and customer satisfaction surveys,
- Maintaining and protecting the security of our products and services as well as our websites, preventing and detecting security risks, fraudulent actions, or other criminal or harmful conduct,
- Complying with legal requirements (e.g., tax and commercial retention obligations), existing obligations to conduct compliance screenings (to prevent economic crime or money laundering), as well as our policies and industry standards and
- Settling legal disputes, enforcing existing contracts, and asserting, exercising, and defending legal claims.
4. Processing personal data for customer satisfaction surveys and direct marketing
Under applicable laws, we may use your contact information for direct marketing purposes (e.g., trade show invitations, newsletters with information and offers about our products and services) and to conduct customer satisfaction surveys, including by email. You have the right at any time to object to the use of your contact information for these purposes by sending an email to contact@Mentoc or using the objection option in the message you received.
5. Processing of personal data in connection with your application
If you apply for a position with us, we process your personal data as described in the privacy notice of the Mentoc recruiting portal or the application platform you use.
6. Transmission and Disclosure of Personal Data
We only transmit your personal data as described below:
Companies and Distributors
For the purpose and to the extent necessary to maintain our business relationship with you, we transmit your personal data to our companies and other third parties (e.g., distributors and representatives). For example, we distribute certain products and services only through local business relationships, and in this case, we pass your personal data on to our respective local companies or other distributors who handle the business relationship with you.
Transactions on our marketplaces
Through our marketplaces, we also offer products, services, and offers from our companies and other third parties. We transmit personal data of our customers in connection with these transactions to the respective company and/or other third parties.
Service Providers
We commission companies and other businesses to perform tasks on our behalf, such as manufacturers, service providers, IT services, or payment processing. These companies and other businesses process personal data solely for the purpose of the commissioned products and services.
Other Third Parties
We transmit personal data in connection with fulfilling legal obligations or asserting, exercising, or defending rights or claims to other third parties (e.g., for court and arbitration proceedings, to regulatory, law enforcement, and governmental authorities, to lawyers and advisors). Recipients of your personal data may be located outside the country where you reside. Personal data that is published by you on online offers (e.g., in chat rooms or forums) can be accessible worldwide to other registered users of the respective online offer.
7. Storage Periods
Unless expressly stated otherwise at the time of collection (e.g., in a consent declaration), your personal data will be deleted when they are no longer required for the purpose for which they were stored, unless legal retention obligations (e.g., tax and commercial retention obligations) prevent deletion.
8. Your Rights
Under applicable data protection law, you may have the right to:
- Request confirmation as to whether we process personal data about you and obtain information about the personal data we process,
- Request correction of incorrect personal data,
- Request deletion of the personal data we process,
- Request restriction of processing of personal data,
- Request the transfer of the personal data you have actively provided to us,
- Object to processing of personal data for reasons arising from your particular situation, or
- Revoke a stated consent.
9. Data Security
We take appropriate technical and organizational measures to protect personal data from accidental or unlawful destruction, use, or alteration as well as unauthorized disclosure or unauthorized access.
10. Contact Person
Our data protection organization supports all matters related to data protection. Complaints can also be made to our data protection organization, and the rights mentioned in this privacy notice can be asserted.
Our data protection organization can be contacted at datenschutz@Mentoc.
Our data protection organization always strives to address and remedy your inquiries and complaints. In addition to contacting the data protection organization, you also have the option at any time to contact the competent data protection supervisory authority.
11. Processing of personal data within the scope of the EU General Data Protection Regulation
This section applies if your personal data is processed by one of our companies located in the European Economic Area.
Data Processing Controller Online Offers
The company named in the legal notice of the Online Offer is the controller within the meaning of the General Data Protection Regulation for the processing activities described in this privacy notice.
Marketplaces
The company designated as the operator of the Marketplace is the controller for data processing.
Personal Data of Business Partners in our Customer Relationship Systems
Contact information of business partners may be shared with other companies within your business relationship with us. We, along with these companies, are jointly responsible for the protection of your personal data (Art. 26 General Data Protection Regulation). To ensure that you can easily and reliably exercise your data protection rights under this joint responsibility, we have agreed with these companies that you can assert the rights described in Section 6 not only against the respective company but also centrally against SCAILE Technologies GmbH. Contact us at: datenschutz@Mentoc.
Legal Basis for Processing
The General Data Protection Regulation requires Mentoc to inform you about the legal basis for data processing. Unless expressly stated otherwise at the time of collection of personal data, the legal basis for data processing is:
- The performance and fulfillment of a contract with you (Article 6 (1) (b) of the General Data Protection Regulation) (“Contract Performance”),
- Compliance with legal obligations we are subject to (Article 6 (1) (c) of the General Data Protection Regulation) (“Compliance with Legal Obligations”), or
- Protection of our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation) (“Legitimate Interest in Processing”).
Our legitimate interest lies in processing your personal data for the purpose of:
(i) Offering and operating the Online Offers and
(ii) Initiating, executing, and managing our business relationship.
As stated in the table below, where our legitimate interest in processing is specified as the legal basis for processing your personal data, we believe your interests, fundamental rights, and freedoms are sufficiently considered because:
(i) We regularly review the processing activities and underlying processes described in this privacy notice,
(ii) We consider the protection of your personal data in our processes, including the binding corporate policy to protect personal data (Mentoc Binding Corporate Rules),
(iii) We ensure transparency in our processing activities, and
(iv) You have the aforementioned rights regarding our processing activities.
If you would like further information about the balancing of interests described, please contact our data protection organization at datenschutz@Mentoc.
If you have expressly given your consent for processing your personal data in an individual case, this consent is the legal basis for processing (Article 6 (1) (a) of the General Data Protection Regulation) (“Consent”).
Processing of personal data in connection with the use of our Online Offers - purpose and legal basis
- Enabling the use of the services and features of Online Offers, including creating and administrating your online account, as part of updates, security, and bug-fix measures, providing customer support, and improving and further developing our Online Offers
- Contract Performance (Article 6 (1) (b) of the General Data Protection Regulation)
- Legitimate Interest in Processing (Article 6 (1) (f) of the General Data Protection Regulation)
- Invoicing the use of an Online Offer
- Contract Performance (Article 6 (1) (b) of the General Data Protection Regulation)
- Legitimate Interest in Processing (Article 6 (1) (f) of the General Data Protection Regulation)
- Establishing identity and user authentication
- Contract Performance (Article 6 (1) (b) of the General Data Protection Regulation)
- Legitimate Interest in Processing (Article 6 (1) (f) of the General Data Protection Regulation)
- Processing your request or instruction
- Contract Performance (Article 6 (1) (b) of the General Data Protection Regulation)
- Legitimate Interest in Processing (Article 6 (1) (f) of the General Data Protection Regulation)
- Handling your order and making related information and offers available
- Contract Performance (Article 6 (1) (b) of the General Data Protection Regulation)
- Legitimate Interest in Processing (Article 6 (1) (f) of the General Data Protection Regulation)
- Sending marketing information or contacting you as part of customer satisfaction surveys, as described in Section 3
- Consent, if voluntarily provided (Article 6 (1) (a) of the General Data Protection Regulation)
- Legitimate Interest in Processing (Article 6 (1) (f) of the General Data Protection Regulation)
- Enforcing our terms of use, asserting and defending legal claims, preventing and stopping fraudulent and similar actions, including attacks on our IT infrastructure
- Compliance with Legal Obligations (Article 6 (1) (c) of the General Data Protection Regulation)
- Legitimate Interest in Processing (Article 6 (1) (f) of the General Data Protection Regulation)
- Processing of personal data in connection with your use of our marketplaces and business partners
- Communication about products, services, and projects, e.g., to process business partner inquiries or provide technical information about products
- Contract Performance (Article 6 (1) (b) of the General Data Protection Regulation)
- Legitimate Interest in Processing (Article 6 (1) (f) of the General Data Protection Regulation)
- Planning, executing, and managing the (contractual) business relationship between us, e.g., to process product and service orders, collect payments, for accounting and billing purposes, and to perform deliveries, maintenance tasks, or repairs
- Contract Performance (Article 6 (1) (b) of the General Data Protection Regulation)
- Compliance with Legal Obligations (Article 6 (1) (c) of the General Data Protection Regulation)
- Creating a personal profile with business-related information about interactions between you and us, with the aim of offering you and the company you work for relevant information and suitable offers for services and products, and improving our personal communication with you
- Legitimate Interest in Processing (Article 6 (1) (f) of the General Data Protection Regulation)
- Conducting market analyses, sweepstakes, competitions, or similar actions and events
- Consent, if voluntarily provided (Article 6 (1) (a) of the General Data Protection Regulation)
- Legitimate Interest in Processing (Article 6 (1) (f) of the General Data Protection Regulation)
- Conducting customer satisfaction surveys and direct marketing as described in Section 4
- Consent, if voluntarily provided (Article 6 (1) (a) of the General Data Protection Regulation)
- Legitimate Interest in Processing (Article 6 (1) (f) of the General Data Protection Regulation)
- Maintaining and protecting the security of our products and services, as well as our websites, preventing and detecting security risks, fraudulent actions, or other criminal or harmful conduct
- Legitimate Interest in Processing (Article 6 (1) (f) of the General Data Protection Regulation)
- Complying with legal requirements (e.g., tax and commercial retention obligations), existing obligations to conduct compliance screenings (to prevent economic crime or money laundering), as well as our policies and industry standards
- Compliance with Legal Obligations (Article 6 (1) (c) of the General Data Protection Regulation)
- Legitimate Interest in Processing (Article 6 (1) (f) of the General Data Protection Regulation)
- Settling legal disputes, enforcing existing contracts, and asserting, exercising, and defending legal claims
- Compliance with Legal Obligations (Article 6 (1) (c) of the General Data Protection Regulation)
- Legitimate Interest in Processing (Article 6 (1) (f) of the General Data Protection Regulation)
- Processing your contact information for direct marketing purposes (e.g., trade show invitations, newsletters with further information and offers about our products and services) and conducting customer satisfaction surveys
- Consent, if voluntarily provided (Article 6 (1) (a) of the General Data Protection Regulation)
- Legitimate Interest in Processing (Article 6 (1) (f) of the General Data Protection Regulation)
International Data Transfers
When we transfer your personal data to a recipient who is located outside of the European Economic Area, we ensure that your data is adequately protected in accordance with the General Data Protection Regulation. In this context, we, insofar as legally required, take the following measures:
- To companies in such countries, we only pass on your personal data if they have implemented the Binding Corporate Rules for the protection of personal data (Binding Corporate Rules,