Compliance with the General Data Protection Regulations is a high priority for our company. We would like to inform you below about the collection of your personal data by us:
Responsible entity
Responsible for the data processing described below is:
Mondu GmbH
Alexanderstrasse 36
10179 Berlin, Germany
E-mail: contact@mondu.ai
Data we process
a) For the fulfillment of contractual obligations (Art. 6 para. 1 b p. 1 lit. b GDPR)
We or the merchant with whom you wish to enter into a purchase or service agreement (“Merchant“) collect personal data from you that is required for the verification and execution of the requested payment option, the communication in the context of the use of our services and the assignment of receivables. In addition to your company data and, if applicable, data on the owner, this also includes name, address, e-mail address, telephone number, URL, delivery and billing address, order data (such as currency, order details, shopping cart, purchase ID), industry and company form. Failure to provide this data may result in the agreement not being concluded.
b) To protect our legitimate interests (Art. 6 para. 1 p. 1 lit. f GDPR)
Where necessary, we process your data (in particular the name of your company and, where applicable, your contact details) beyond the actual performance of the contract to protect the legitimate interests of Mondu GmbH and third parties. This may include consulting credit agencies to determine and continuously monitor creditworthiness or default risks, as well as analyses for fraud prevention and risk assessment. We also process personal data for the purpose of processing your requests. We may also process your data for receivables management and for the assertion or defense of legal claims. In addition, we and the financial institutions cooperating with us may transfer your personal data that we or the Merchant have collected in connection with the purchase of goods, as well as data on your creditworthiness, to banks and insurance companies for the purpose of refinancing.
c) Based on your consent (Art. 6 para. 1 p. 1 lit. a GDPR)
If you have given us your consent to do so, we will process your contact data as well as data about your position in the company for advertising, including to send you advertising relevant to you by e-mail or telephone or for advertising campaigns on social media.
Profiling and automated decision making
We use personal data for automated decision-making, including profiling, in order to be able to make a decision about the conclusion of an agreement with you. Should this lead to an automated rejection of your request, we will inform you thereof. For this purpose, we process company data and, if applicable, data on the owner, as well as name, address, e-mail address, telephone number, URL, delivery and billing address, order data (such as currency, order details, shopping cart, purchase ID), industry and company form. The logic involved matches your data with our risk criteria and third party databases using an artificial intelligence based algorithm.
You have the right to request that the automated decision be reviewed by one of our administrators, and you may also present your own point of view or challenge the decision. To exercise these rights, please send us an email describing your concerns to the following e-mail address: dataprotection@mondu.ai.
Buyer account
We offer you the possibility to store your personal data in a buyer account. In this way, you can store your data once and access it in the context of orders without having to enter the information again, and instead use our “instant checkout” service. For this purpose, we require the following data as mandatory information: Company, first name, last name, address, e-mail address, birthday if applicable, account details, device data and password.
We use this data to create the buyer account and to confirm this to you, as well as to address you personally in the process. In addition, we also store your order history in your buyer account. You also have the option in your buyer account to manage your data, for example to update your contact details.
Data deletion
If there is no legal retention period, the data will be deleted as soon as storage is no longer necessary or the legitimate interest in storage has expired. The duration of storage depends, among other things, on the statutory retention obligations, e.g. from the German Fiscal Code (6 years) or the German Commercial Code (10 years).
If your application has been rejected, we will store your data for a maximum period of 6 months.
Recipients of your data
We share your data to the extent necessary for the provision of our services with financial institutions, insurance companies and credit agencies cooperating with us and, in the event of assignment of the receivable, to the new holder of the receivable. We may transmit your data to these credit agencies for the purpose of credit risk assessment:
- Creditsafe Deutschland GmbH further details on their privacy information can be found here
- SCHUFA Holding AG further details on their privacy information can be found here
- CRIF GmbH, further details on their privacy information can be found here
- Dun & Bradstreet B.V. further details on their privacy information can be found here.
For the purpose of receivables management, personal data may also be transferred to third parties who provide collection and dunning services. If you have given us your consent to do so, we may also transfer your data to companies that support us in our advertising campaigns, e.g. social media.
If necessary, we use service providers who are strictly bound by instructions and who support us, for example, in the areas of platform hosting, marketing or the archiving and destruction of documents and with whom separate contracts for order processing have been concluded.
Your data protection rights
You can request information about your personal data processed by us. If your information is not (or no longer) accurate, you can request that your data be corrected. If your data is incomplete, you can request that it be completed. You have the right to request the deletion of your data. Please note that a claim for deletion depends on the existence of a legitimate reason. In addition, there must be no regulations that require us to retain your data. You have the right to request the restriction of the processing of your data. Please note that a right to restriction of processing depends on the existence of a legitimate ground. If the processing of your personal data is based on consent, you have the right to revoke the consent at any time, without giving reasons, for the future. The processing of the data until the revocation remains unaffected and is considered lawful.
You have the right to object to the processing of your data on grounds relating to your particular situation.
Every data subject has the right to file a complaint with a supervisory authority if he or she believes that the processing of data concerning him or her violates data protection regulations.
Our Data Protection Officer
Our external Data Protection Officer will be happy to provide you with more information about data protection under the following contact details:
datenschutz nord GmbH
Berlin Branch
Kurfürstendamm 212
10719 Berlin, Germany
E-mail: office@datenschutz-nord.de
If you contact our Data Protection Officer, please indicate the responsible person.
