For order processing, we use service providers to supply services, in particular for the provision, maintenance and servicing of IT systems.

C. REGISTRATION

Registration is required in order to be able to use the mbeon platform as a client or advisor. The data you provide in this context is only used to facilitate use of the services provided.  The legal basis for collecting data is the performance of the user contract (art. 6 para. 1 lit. b GDPR). The data shall be deleted no later than by the time the statutory limitation periods expire.

For order processing, we use service providers to supply services, in particular for the provision, maintenance and servicing of IT systems.

D. CONTACTING US

You can get in touch with us or the participating organisations electronically via email. The data that you send via e-mail is then transmitted to and saved by us.

When you write us or an organisation an email and have questions about the mbeon platform or the advisory service provided by the organisation, the legal basis for processing data is art. 6 para. 1 lit. b GDPR (initiation or performance of a user or consultancy contract), as well as art. 6 para. 1 lit. f GDPR (legitimate interest in communicating and its documentation).

The data transmitted to us is processed only for the purposes of communication with you.

This data is deleted when it is no longer required for the respective purpose, i.e. when the exchange via email is concluded, your query has been dealt with in full and no further statutory retention requirements apply.

For order processing, we use service providers to supply services, in particular for the provision, maintenance and servicing of IT systems.

E. ADVISORY SERVICES PROCESSING

The advisory services are performed by the respective organisation whose advisor you have selected. The organisation's contact details are provided in the advisor profile.

The privacy notice of the respective organisation applies. If the organisation has not published its own privacy notice, then the following applies:

The organisation retains all information provided by you within the scope of providing the advisory service as well as advisor notes on the advice specifically provided. Data is processed for the purposes of providing advisory services. The legal basis is the performance of the consultancy contract (art. 6 para. 1 lit. b GDPR). After the advisory service is concluded, the organisation may retain the advisory service documentation for verification that proper advice has been given (art. 6 para. 1 lit. f GDPR) for the duration of the statutory limitation period.

If special categories of personal data referred to in art. 9 para. 1 GDPR (e.g. health data, information about ethnic origin or religious belief) are disclosed, you give your consent with this disclosure (art. 9 para. 2 lit a GDPR) that the organisation may process this information for the purposes of providing the advisory service. You can revoke this consent prospectively at any time. Following revocation, the organisation will no longer process the special categories of personal data for the purposes of providing the advisory service, but will continue to retain it for verification that proper advice has been given and for defence against possible claims (art. 9 para. 2 lit. f GDPR) for the duration of the statutory limitation period.

The documentation of the advisory service is deleted on a regular basis three calendar years following the end of the advisory service. The advisory service is considered to have ended no later than when the client deletes his or her account on mbeon.

If there has been a clearly expressed intention of committing suicide, the organisation will inform the responsible authorities and transmit the personal data available. The legal bases for this are art. 6 para. 1 lit. d GDPR and art. 9 para. 2 lit. c GDPR (vital interests of the data subject).

For order processing, the organisations use service providers to supply services, in particular for the provision, maintenance and servicing of IT systems.

F. DATA SUBJECT RIGHTS

If we or the organisation whose advisor you have consulted have processed your personal data according to art. 4 no. 1 GDPR, you are a data subject as defined by the GDPR, and you are entitled to the following rights in relation to the respective data controller:

(1) Art. 15 GDPR - Right of access: You can demand information about the personal data being processed. In particular, you can demand information about the purposes for processing, the categories of recipient to whom your personal data has been or will be disclosed, the planned retention period, the existence of the right to correction, deletion, restriction of processing or objection, the right to lodge a complaint, the origin of your data if it was not directly provided by you as well as information about the existence of automated decision-making, including profiling and, where applicable, meaningful information about the details.

(2) Art. 16 GDPR - Right to correction: You can demand the correction without undue delay of inaccurate, stored personal data or demand the completion of your stored personal data.

(3) Art. 17 GDPR - Right to deletion: You can demand the deletion of your stored personal data so long as its processing is not required for the exercise of freedom of expression and information, the fulfilment of a legal obligation, on grounds of public interest or enforcement, or the exercise or defence of legal claims.

(4) Art. 18 GDPR - Right to restriction of processing: You can demand the restriction of processing of your personal data provided that the accuracy of the data is contested by you, the processing is unlawful and you oppose its deletion and we no longer need the data, but you require it for the establishment, exercise or defence of legal claims or you have objected to the processing pursuant to art. 21 GDPR.

(5) Art. 20 GDPR - Right to data portability: You are entitled to receive the personal data that you have provided us with in a structured, commonly used and machine-readable format, or demand that the data be transmitted to another data controller.

(6) Art. 7 Para. 3 GDPR - Right to withdraw consent: You can withdraw the consent you have given to us at any time. This means that from then on we may no longer continue processing data to the extent this was based on this consent.

(7) Art. 77 GDPR - Right to lodge a complaint: You can lodge a complaint with your supervisory authority. Generally, you can contact the supervisory authority of your usual residence, place of work or our registered office.

(8) Art. 21 GDPR - If your personal data is being processed based on legitimate interests pursuant to art. 6 para. 1 p. 1 lit. f GDPR, you have the right to object to the processing of your personal data if there are grounds justifying this that relate to your particular situation or the objection is against direct marketing. In the latter case, you have a general right to object that will be acted on by us without the need to reference special circumstances. If you would like to exercise your right to withdraw consent or your right to object, you merely need to send an email to info(at)mbeon.de or to the respective organisation whose advisor you have contacted.