Privacy Policy

Thank you for visiting our website mentormorphis.com and for your interest in our company.

The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.

The purpose of this privacy statement is to inform you about the processing of your personal data that we collect from you when you visit our site. Our data protection practice is in accordance with the legal regulations of the EU’s General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). The following data protection declaration serves to fulfil the information obligations resulting from the GDPR. These can be found, for example, in Art. 13 and Art. 14 ff. GDPR.

1. Controller

The controller regarding this website within the meaning of Art. 4 (7) GDPR and other national data protection laws of the Member States and other provisions under the GDPR is:

MentorMorphis – Owned by Nadeela Menges
Platanenstrasse 7
65933 Frankfurt am Main
Germany
E-Mail: [email protected]
Tel.: +49 1765 0496575

2. Logfiles

Each time you access our website, our system automatically collects data and information of your accessing device. The processing of personal data carried out in this context is as follows:

• Which personal data is collected and to what extent it is processed?

            (1)    Information concerning the browser type and the browser version used

            (2)    The operating system of the accessing device

            (3)    The IP address of the accessing device

            (4)    Date and time of access

            (5)    Websites and resources (images, files, additional page content) which were accessed

            (6)    Websites which refers to our website and which directed the user´s device to our web-site (referrer tracking)

            (7)   Message whether the retrieval was successful;

            (8)   Amount of data transferred;

This data is stored in the log files of our system. This data is not stored together with personal da-ta of a specific user in such a way that individual users can be identified.

• Legal basis for the processing of personal data

            Art. 6 (1) (f) GDPR (legitimate interest). Our legitimate interest lies in the following, outlined purpose.

• Purpose of data processing

The temporary (automated) storage of the data is necessary for the course of a website visit in order to enable delivery of the website. The storage and processing of personal data is also carried out to maintain the compatibility of our website for as many visitors as possible and to combat abuse and eliminate malfunctions. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, we use the data to optimise the website and to generally ensure the security of our information technology systems.

• Duration of storage

The aforementioned technical data is erased as soon as it is no longer required to achieve the aforementioned purposes, but at the latest 3 months following the use of our website.

• Possibility to object and demand deletion

You may object to this processing according to art. 21 GDPR and demand deletion of data according to Art. 17 GDPR by following the indications under point 9 of this Privacy Policy.

3. Special functions

Our site offers different functions which collect personal data as follows:

• Rating Possibility

  • Scope of the processing of personal Data

We will process the data you enter in the fields of our evaluation form to fulfil the purpose stated below.

• Legal basis for the processing of personal data

Art. 6 (1) (a) GPDR (consent through clear confirming action or behaviour)

• Purpose of data processing

Acceptance and publication of your rating on our website – and if you explicitly agree to this – also on the internet platforms of our rating service providers.

• Duration of storage

Your rating will be stored and published for an unlimited period of time. We reserve the right to delete your rating without giving reasons and without prior or subsequent information.

• Possibility to object, withdraw consent and demand deletion

You can have your rating deleted at any time. The revocation and deletion options are based on the general regulations on the right of revocation and deletion under data protection law described below in this data protection declaration.

• Characteristics of the provision of personal data

The provision of personal data is neither a statutory nor contractual requirement. It is also not a requirement necessary to enter into a contract. Furthermore, you are not contractually obliged to provide the personal data and it has no contractual consequences if you fail to provide such data. The only consequence is that you are not able to use the rating function on our site.

• Booking request form

  • Scope of the processing of personal Data

We will process the data you enter in our booking request form (date, number of persons, etc.) to fulfil the following purpose.

• Legal basis for the processing of personal data

Art. 6 (1) (b) GDPR (implementation of (pre) contractual measures)

• Purpose of data processing

The pre-contractual exchange of information is necessary in order to check your booking or order so that we can prepare a possible later conclusion of a contract.

• Duration of storage

The data will be deleted as soon as it is no longer required for processing the booking and there are no longer any legal obligations to retain it.

• Possibility to object and demand deletion

You can demand deletion of data in accordance with Art. 17 GDPR. You can find out which rights you have and how to exercise them in the lower section of this data protection declaration.

• Necessity of providing personal data

The information provided in the booking request form is neither contractually nor legally required, but is necessary in order to process your booking properly. If you do not fill in the mandatory fields or do not fill them in completely, we will not be able to process your booking request.

• Commentary-Function

  • Scope of the processing of personal Data

The personal data you leave in your comment, such as the content of your comment, your name or pseudonym, your e-mail address, etc., will not be passed on to third parties.

• Legal basis for the processing of personal data

Art. 6 (1) (a) GPDR (consent through clear confirming action or behaviour)

• Purpose of data processing

Acceptance and publication of your comment on our website.

• Duration of storage

Your comment will be stored and published for an unlimited period of time. We reserve the right to delete your comment without giving reasons and without prior or subsequent information.

• Possibility to object, withdraw consent and demand deletion

You can have your rating deleted at any time. The revocation and deletion options are based on the general regulations on the right of revocation and deletion under data protection law described below in this data protection declaration.

• Characteristics of the provision of personal data

The provision of personal data is neither a statutory nor a contractual requirement. It is also not a requirement necessary to enter into a contract. Furthermore, you are not contractually obliged to provide the personal data and it has no contractual consequences if you fail to provide such data. The only consequence is that you are not able to use the rating function on our site.

• Contact Form

  • Scope of the processing of personal data

The data entered by you in our contact forms. Especially the data which you have entered in the input mask of the contact form. This includes your name, your e-mail address, the subject of the contact and everything you enter into the message field.

• Legal basis for the processing of personal data

Art. 6 (1) (a) GDPR (consent by clear confirmatory act or conduct)

• Purpose of data processing

We will only use the data that you have entered via our contact form for the processing of the specific contact enquiry received. Please note that in order to fulfil your contact request, we may also send you e-mails to the address provided. The purpose of this is to enable you to receive confirmation from us that your request has been correctly forwarded to us. And to provide you with the proper answer to your request. However, the sending of this confirmation e-mail is not binding on us and is for your information only.

• Duration of storage

After processing your request, the collected data will be deleted immediately, unless there is a legal retention period.

• Possibility to object, withdraw consent and demand deletion

You can withdraw your consent relating to Art. 7 (3) GDPR by following the indications under point 9 of this Privacy Policy.

• Characteristics of the provision of personal data

The provision of personal data is neither a statutory nor a contractual requirement. It is also not a requirement necessary to enter into a contract. Furthermore, you are not contractually obliged to provide the personal data and it has no contractual consequences if you fail to provide such data. The only consequence is that you are not able to communicate with us over the contact form.

• Newsletter registration

  • Scope of the processing of personal data

By registering for the newsletter on our website, we receive the e-mail address entered by you in the registration field and, if applicable, further contact data, provided that you communicate this to us via the newsletter registration form.

• Legal basis for the processing of personal data

Art. 6 (1) (a) GPDR (consent through clear confirming action or behaviour)

• Purpose of data processing

The data entered in the registration mask of our newsletter will be used by us exclusively for sending our newsletter, in which we inform you about all our services and news. After registration, we will send you a confirmation e-mail containing a link that you must click to complete the registration for our newsletter (double opt-in).

• Duration of storage

You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link, which is also included in every newsletter. Your data will be deleted immediately after you unsubscribe, provided that there are no legal obligations to retain it. Likewise, your data will be deleted by us immediately in the event that your registration is not completed. We reserve the right to delete your data without giving reasons and without prior or subsequent information.

• Possibility to object, withdraw consent and demand deletion

You can have your registration to the newsletter deleted at any time by clicking the “unsubscribe” Link. The revocation and deletion options are based on the general regulations on the right of revocation and deletion under data protection law described below in this data protection declaration.

• Characteristics of the provision of personal data

If you would like to use our newsletter, you must fill in the fields marked as mandatory and confirm your e-mail address by clicking on the double opt-in link. The newsletter registration details are neither necessary to enter into a contract with us, nor are they legally binding. They are used exclusively for sending our newsletter. If you do not complete the mandatory fields, we will unfortunately not be able to provide you with our newsletter service.

• Appointment booking

• • Scope of the processing of personal Data

The data you enter on our appointment booking form.

• Legal basis for the processing of personal data

Art. 6 (1) (b) GDPR (implementation of (pre)contractual measures)

• Purpose of data processing

We will only use the data collected via our appointment booking form to process appointment requests received through the appointment booking form.

• Duration of storage

Your appointment booking will be deleted by us immediately after the expiry of 12 months after the last appointment was scheduled, unless there is a legal obligation to keep records. We reserve the right to delete your data without giving reasons and without prior or subsequent information.

• Possibility to object and demand deletion

You can demand deletion of data in accordance with Art. 17 GDPR. You can find out which rights you have and how to exercise them in the lower section of this data protection declaration.

• Characteristics of the provision of personal data

Although the use of our appointment booking form is neither contractually nor legally required, it is necessary if you wish to book an appointment with us online. You must provide certain mandatory information for online booking. If you do not fill in the mandatory information completely, your appointment booking cannot be accepted or processed.

4. Credit Check / Scoring

If you wish to conclude a contract with us, we reserve the right to carry out an exclusively automated processing of your personal data in order to check your creditworthiness. We are also authorised to make such an automated decision pursuant to Art. 22 (2) (a) GDPR. Whether or not the contract can be concluded depends on the result of the automated credit check. In a credit check, statistical probabilities of a payment default are calculated. The credit report can contain probability values (score values) which are calculated on the basis of scientifically recognised mathematical-statistical procedures. In this process, the customer’s future risk of non-payment is inferred by means of a large number of characteristics, such as income, address data, occupation, marital status and previous payment behaviour. The result is expressed in the form of a payment value (so-called “score”). The information obtained in this way forms the basis of our decision on the establishment, implementation or termination of a contractual relationship. If you believe that you have been wrongly excluded from the conclusion of a contract due to the credit check, you are welcome to explain your point of view to us by e-mail. We will then review the automated decision in accordance with Art. 22 (3) GDPR in the specific individual case. In order to be able to carry out the credit assessment, we may store and process your personal data in accordance with Art. 6(1) (b) GDPR.

• Automatic identity and credit check when selecting the “PayPal” payment method

• • What personal data is collected and to what extent is it processed?

If you have selected “PayPal” as the method of payment, we will forward your personal customer data collected during the order process to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”). If you give your consent, the following data is affected by the data transfer: First name and surname, street, house number, postcode, town, date of birth, telephone number and data relating to your order.

• Legal basis for the processing of personal data

Art. 6 (1) (b) GDPR (implementation of (pre)contractual measures)

• Purpose of data processing

PayPal carries out a creditworthiness check when the payment method “PayPal” is selected. In this process, mathematical-statistical procedures are used to calculate a rating with regard to the probability of a payment default (so-called calculation of a scoring value). PayPal uses the calculated scoring value as a basis for its decision on the provision of the respective payment methods. The calculation of a scoring value is carried out according to recognised scientific procedures. Please also refer to PayPal’s privacy statement: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

• Duration of storage

We will store the relevant data for the processing of the payment as long as it is necessary for the execution of the transaction. If the data is subject to statutory retention obligations, it will be deleted after expiry of the retention obligation. The duration of storage of the data by PayPal can be found in PayPal’s privacy statement: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

• Possibility to object and demand deletion

You can demand deletion of data in accordance with Art. 17 GDPR. You can find out which rights you have and how to exercise them in the lower section of this data protection declaration.

5. Information on the use of cookies

   • Scope of the processing of personal data

On various pages, we and the web services integrate and use cookies to enable certain functions of our website. The so-called “cookies” are small text files that your browser can store on your ac-cessing device. These text files contain a characteristic string of characters that uniquely identify the browser when you return to our site. The process of storing a cookie file is also called “setting a cookie”. Details are given in the table below.

• Legal basis for the processing of personal data

Art. 6 (1) (f) GDPR (legitimate interest) or Art. 6 (1) (a) or Art. 9 para. (1) (a) GDPR (consent).

The relevant legal basis can be seen from the cookie table listed below in the section.

In general, in the case of cookies collected on the basis of a legitimate interest, our legitimate interest is to ensure the functionality of our website and the services integrated into it (technically necessary cookies). It is also possible that the cookies increase their user-friendliness and enable a more individual approach. In this case we have weighed up your interests against ours.

With the help of cookie technology, we can only identify, analyse and track individual website visitors if the website visitor has consented to the use of the cookie in accordance with Art. 6 (1) (a) GDPR.

• Purpose of data processing

The cookies are set by our website or external web services in order to maintain the full func-tionality of our website, to improve the user-friendliness, or for the purpose of cookie technology also enabling us to recognize individual visitors by means of pseudonyms, e.g., an individual or random ID, so that we can offer more individualized services. Details are shown in the following table.

• Duration of storage

Our cookies are stored in your browser until they are deleted or, in the case of a session cookie, until the session has expired. Details are given in the table below:

• Possibility to object, withdraw consent and demand deletion

You can adjust your browser according to your wishes so that the setting of cookies is generally prevented. You can then decide on the acceptance of cookies on a case-by-case basis or accept cookies in principle. Cookies can be used for various purposes, e.g., to recognise that your accessing device has already been connected to our website (permanent cookies) or to save recently viewed offers (session cookies). If you have given us express permission to process your personal data (Art. 6(1) (a) GDPR or Art. 9(2) (a) GDPR), you can withdraw it at any time. Please note that the lawfulness of the processing carried out on the basis of the consent up to the revocation is not affected by this.

6. Data security and data protection, communication via e-mail

Your personal data is protected by technical and organisational measures during collection, storage and processing such that they are not accessible to third parties. In case of unencrypted communication via e-mail, we cannot guarantee complete data security on the transmission path to our IT systems, so that we recommend encrypted communication or mail for information with a high confidentiality requirement.

7. Right to access and correct data – deletion of data – limitation of processing -withdrawal of consents – right to object

   • Right of access

You have the right to request confirmation as to whether we process your personal data. If this is the case, you have a right of access and information specified in Art. 15 (1) GDPR, provided that the rights and freedoms of other persons are not infringed (Art. 15 (1) GDPR). We will also be happy to provide you with a copy of the data.

• Right to correction

Pursuant to art. 16 GDPR, you have the right to have incorrectly stored personal data (such as address, name, etc.) corrected by us at any time.

• Right to erasure

Pursuant to Art. 17 (1) GDPR, you have the right to demand that we delete the personal data collected about you in the following cases:

o     the personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed

o     the processing is based according to point (a) of Article 6 (1), or point (a) of Article 9 (2) GDPR, and there is no other legal ground for the processing

o     you have objected to the processing pursuant to Article 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21 (2) GDPR

o     the personal data has been unlawfully processed

o     the personal data has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject

o     the personal data has been collected in relation to the offer of information society services referred to in art. 8 (1) GDPR

Pursuant to Art. 17 (3) GDPR, the right does not exist insofar as the processing is necessary for the exercise of the right to freedom of expression and information. Moreover, it does not exist if it has been collected on the basis of a legal obligation, or if the data serve the assertion, ex-ercise or defence of legal claims.

• Right to limitation of processing

According to art. 18 (1) GDPR you have the right in individual cases to demand the restriction of the processing of your personal data.

This is the case if:

o     the accuracy of the personal data is disputed

o     the processing is unlawful

o     the data are no longer required for the processing purpose but are used for the assertion, exercise or defence of legal claims

o     an objection has been filed against the processing pursuant to art. 21 (1) GDPR and it is still unclear which interests predominate.

• Right to withdraw consent

If you have given us express permission to process your personal data (Art. 6 (1) a GDPR or art. 9 (2) (a) GDPR), you can withdraw it at any time. Please note that the lawfulness of the pro-cessing carried out on the basis of the consent up to the revocation is not affected by this.

• Right to object to data processing

Pursuant to Art. 21 GDPR, you may at any time object to the processing of your personal data if such processing is carried out on the basis of Art. 6(1) (f) GDPR e.g., where the processing is carried out on the basis of the legitimate interests.

• How can I obtain my rights?

You can obtain your rights, if you inform us:

MentorMorphis UG
Platanenstrasse 7
65933 Frankfurt am Main
Germany
E-Mail: [email protected]
Tel.: +49 1765 0496575

8. Data Portability

You have the right to receive the personal data that you have transmitted to us in a structured, common and machine-readable format and transfer it to another data controller provided that:

• the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or a contract pursuant Art. 6 (1) (b) GDPR; and
• the processing is carried out by automated means.

You can also request your personal data to be directly transferred to another controller, insofar as this is technically feasible. The exercise of this right shall not adversely affect the rights and free-doms of others.

9. Right to lodge a complaint to the competent supervisory authority

If you suspect that your data has been illegally processed on our site, you can take legal action in order bring the problem to a judicial clarification. This option does not interfere with any other legal option you might have.

Regardless of this, you have the option of contacting any other competent supervisory authority. You have the right to lodge a complaint to the competent supervisory authority in the EU Member State of your place of residence, workplace and/or place of alleged infringement, i.e., you can choose the supervisory authority to which you will be lodging a complaint in the above places. The supervisory authority to which the complaint was submitted will then inform you of the status and results of your complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

Drafted by:

© DURY LEGAL – www.dury.de