Information pursuant to Article 13 General Data Protection Regulation for Merchants

Compliance with the UK General Data Protection Regulations is a high priority for our company. We would like to inform you below about the collection of your personal data by us:

Responsible entity

Responsible for the data processing presented below is:

Mondu UK Ltd.
Cannon Place
78 Cannon Street
EC4N 6AF London
United Kingdom

Data we process

  1. a) For the fulfillment of contractual obligations (Art. 6 para. 1 b p. 1 lit. b UK GDPR)

We collect personal data from you that is required for the preparation and execution of the platform service agreement, the factoring framework agreement and the communication in the context of the use of our services. In addition to your company data and data on the owner structure, this also may include full name, residential address, e-mail address, telephone number, date of birth, place of birth and the tax identification number of the management and owners. Failure to provide this data may result in the inability to conclude the contract.

  1. b) To protect our legitimate interests (Art. 6 para. 1 p. 1 lit. f UK GDPR)

Insofar as necessary, we process your data (in particular the name of your company and, if applicable, your contact details) beyond the actual performance of the contract in order to safeguard Mondu’s legitimate interests. This may include the consultation of credit agencies to determine creditworthiness or default risks as a pre-contractual measure as well as the processing of your inquiries.

  1. c) Based on your consent (Art. 6 Abs. 1 S. 1 lit. a UK GDPR)

If you have given us your consent to do so, we will process your contact data as well as data about your position in the company for advertising, including to send you advertising relevant to you by e-mail or telephone or for advertising campaigns on social media.

Data deletion

If there is no legal retention period, the data will be deleted as soon as storage is no longer necessary or the legitimate interest in storage has expired. The duration of storage depends, among other things, on the statutory retention obligations, for example, from the Value Added Tax Act 1994 (6 years).

Recipients of your data

We forward your data to financial institutions cooperating with us to the extent necessary for the provision of our services. If you have given us your consent to do so, we may also transfer your data to companies that support us in our advertising campaigns, e.g. social media.

Where applicable, we use service providers who are strictly bound by instructions and who support us, for example, in the areas of platform hosting, marketing or the archiving and destruction of documents, and with whom separate contracts for order processing have been concluded.

The servers of some of the service providers used by Mondu are located in other countries outside the United Kingdom . Companies in these countries are subject to data protection laws that do not generally protect personal data to the same extent as they do in the United Kingdom. To the extent that your data is processed in a country that does not have a recognized high level of data protection like the European Union, Mondu will ensure that your personal data is adequately protected through contractual arrangements or other recognized instruments.

Your data protection rights

You can request information about your personal data processed by us. If your information is not (or no longer) accurate, you can request that your data be corrected. If your data is incomplete, you can request that it be completed. You have the right to request the deletion of your data. Please note that a claim for deletion depends on the existence of a legitimate reason. In addition, there must be no regulations that require us to retain your data. You have the right to request the restriction of the processing of your data. Please note that a right to restriction of processing depends on the existence of a legitimate reason.

You have the right to object to the processing of your data on grounds relating to your particular situation.

Any data subject has the right to file a complaint with a supervisory authority if he or she believes that the processing of data concerning him or her violates data protection regulations.

ICO Registration

Registration reference: ZB573853

Mondu UK Ltd.
Cannon Place
78 Cannon Street
London EC4N 6AF