Mento Labs GmbHPrivacy Policy
1. General

Personal data is processed in the operation of the Mento Labs GmbH (“Mento Labs”) provided websites (mentolabs.xyz, mento.org and app.mento.org domains) and the use of services offered through these websites (the “Website”). This Privacy Policy informs you about the nature, scope and purpose of the processing of your personal data by the data controller pursuant to Art. 13 and 14 of the General Data Protection Regulation (GDPR).

This Privacy Policy is based on the definitions of the GDPR, in particular according to Art. 4.

The controller for the collection, processing and use of personal data is:

  • Mento Labs GmbH
  • Glogauerstraße 6
  • 10999 Berlin, Germany
2. Details of data processing

The type, scope and purpose of the processing of personal data depend on which Mento Labs services are used. We will process specific personal data required for each particular service and depending on the respective group of data subjects (e.g. customers, Website visitors).

2.1. Website Services

The data subjects with regards to the services provided through the Website are all Website visitors.

2.1.1. Provision of the Website

In order to make the Website available, to enable basic functions and trouble-free operation, it is technically necessary to process personal data. Although these are basically device data, with this data it may be possible to link them to the visitors. For example, the IP addresses of the used terminals, identifiers of the used terminals, the operating systems and the browser are processed solely in order to establish a connection between the terminal and the server hosting the Website and to display the contents in the intended layout.

Processing
Website provision
Purpose
  • Establishing the technical connection between the visitor’s terminal device and the Website (conducting the session).
  • Maintaining and improving the functionality of the Website.
  • Maintaining and improving the information security or data security (confidentiality, availability and integrity) of the Website (data storage in log files).
Categories of data
  • IP address of the accessing system
  • Type and browser used by the end device and version
  • Internet service provider of the accessing system
  • Date, time and type of access
  • Third-party websites from which the user’s system accesses the Website
  • Third-party websites that are accessed by the user’s system via the Website
Storage period or its criteria
  • Session: data deletion at the end of the respective session
  • Log files: data deletion after 7 days or anonymization
Legal basis
Art. 6 para. 1b) and f) GDPR (contract performance and legitimate interest)
2.1.2. Web fonts

When a page is requested, the visitor's browser loads the required web font into the visitor's browser cache to display the texts and fonts correctly.

If your browser does not support web fonts, a default font will be used instead.

Processing
Web fonts
Purpose
Present our Website in a uniform and attractive form
Categories of data
IP address of the accessing system
Categories of recipients
  • Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, Unites States (“Google”)
Third-country data transfer
In the US to Google. An agreement has been concluded with Google based on the EU standard data protection clauses, which ensure the transfer of data with appropriate safeguards in accordance with Art 46 GDPR.
Storage period or its criteria
  • CSS requests cached for one day
  • Font files cached for one year
Legal basis
Art. 6 para. 1f) GDPR (legitimate interest)

This Website uses cookies for range measurement and optimization of our offer. The cookies are transmitted either from us or from third-party servers to the visitor's browser.

As a result, a recognition of the used device is potentially possible. The data of the visitor which is collected through the use of cookies is pseudonymized. Thus, the connection between the collected data and a data subject is no longer possible, neither for us nor for third parties. The data will not be collected together with other data of the visitor. In some cases, the data is anonymized before use, so that the conclusion on the visitors is altogether impossible.

These cookies are only set once you have given us your consent. To grant your consent, we will provide you with a communication field at the beginning of the visit to the Website.

Any given consent can be revoked at any time with future effect in the cookie settings on our Website. The cookie settings can be found under “Manage Cookies” on the Website. The set cookies will be deleted.

2.2. Information Services

The data subjects with regards to the information services are all natural persons interacting with Mento Labs, signing up to receive information from Mento Labs, or requesting and downloading information material. Information services might also include invitations and sign-ups to events, links to news and articles regarding Mento Labs, and suggestions to latest podcast episodes and upcoming webinars.

The data subjects with regards to the mailing list are the subscribers.

2.2.1. Contact Form, Mailing List

To learn more about Mento Labs and to receive more detailed information about our services, various contact forms on the Website can be used to request further information or sign up for the mailing list. The mailing list is a separate, free information service that can be used independently of any existing customer relationship.

By submitting the contact form, the subscriber consents to be contacted by us via e-mail with more information regarding Mento Labs and its services.

After submitting the contact form, the subscriber will receive an e-mail. This e-mail has a link with which the subscriber must confirm the registration to the mailing list. We can provide further information on our services only after the conformation has taken place (double opt-in).

The subscriber can unsubscribe from the mailing list and therefore withdraw the consent at any time. Each mailing contains information to unsubscribe from the mailing list with future effects. Alternatively, the request to unsubscribe can be sent via e-mail at any time.

For the distribution, management and statistics of the contact forms, as well as the mailing lists we are using service providers.

Processing
Contact Form, Mailing List
Purpose
  • Customer relationship management
  • Providing company and product related information
  • Informing about events, publications, recordings
Categories of data
  • E-mail address
  • Name
  • Type of browser used by the end device and version
  • IP address of the accessing system
  • Date, time and type of contact
Categories of recipients
Pipedrive Inc., 490 1st Ave South, Suite 800 St. Petersburg, FL 33701, United States (“Pipedrive”)
Third-country data transfer
In the US to Pipedrive; An agreement has been concluded with Google based on the EU standard data protection clauses, which ensure the transfer of data with appropriate safeguards in accordance with Art 46 GDPR.
Storage period or its criteria
Depending on type of request: min. 3 months after ticket was closed / max. 3 years after end of customer relationship
Legal basis
Art. 6 para. 1a) b) and f) GDPR (consent, contract performance or legitimate interest)

If your personal data is being processed, you are data subject as defined by GDPR. Consequently, you have the rights described in Articles 15 to 21 GDPR in relation to the controller. In order to exercise your rights or to obtain further information on data protection regarding Mento Labs, please contact us by sending an e-mail to ….

3. Rights of data subjects

If your personal data is being processed, you are data subject as defined by GDPR. Consequently, you have the rights described in Articles 15 to 21 GDPR in relation to the controller. In order to exercise your rights or to obtain further information on data protection regarding Mento Labs, please contact us by sending an e-mail to ….

3.1. Right of access

Pursuant to Art. 15 GDPR, you have the right to request confirmation from us as to whether we are processing personal data relating to you.

If this is the case, you can request the following information from us:

  1. - Processing purposes;
  2. - Category of personal data being processed;
  3. - Recipients or categories of recipients to whom your data has been or will be disclosed;
  4. - Planned storage period or, if specific information on this is not possible, criteria for determining the storage period;
  5. - Existence of a right to rectification, erasure, restriction of processing or objection;
  6. - Existence of a right to lodge a complaint with a supervisory authority;
  7. - Origin of your data, if it has not been collected by us;
  8. - Existence of automated decision-making including "profiling" and, if applicable meaningful information on their details;
  9. - Transfer of personal data to a third country or to an international organization; appropriate guarantees pursuant to Art. 46 GDPR in connection with the transfer.
3.2. Right to rectification

In accordance with Art. 16 GDPR, you have the right to demand the correction or completion of your personal data stored by us without delay.

3.3. Right to restriction of processing

Pursuant to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR.

3.4. Right to deletion

Pursuant to Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.

3.5. Right to notification

If you have asserted the right to rectification, erasure or restriction of processing against the controller, we are obligated pursuant to Art. 19 GDPR to notify all recipients to whom the personal data has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

3.6. Right to data portability

In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.

3.7. Right of objection

According to Art. 21 GDPR, you have the right to revoke your consent at any time. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If your personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing; this also applies to "profiling" insofar as it is related to such direct marketing. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

3.8. Right to revoke the declaration of consent under data protection law

In accordance with Art. 7 para. 3 GDPR, you have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

3.9. Right to complain to a supervisory authority

In accordance with article 77 GDPR, you have the right to file a complaint with the supervisory authority responsible for the controller:

4. Changes to this Privacy Policy

We reserve the right to make changes to this Privacy Policy from time to time, to the extent permitted by applicable law.

The latest version of this document is permanently available at …

Updated: September 2023