Effective date: 25 May 2018
At MentSpot we're committed to your privacy. In this privacy section, we offer transparency on how and why we process your data, and give you the tools to control it.
Browse through the 'Data Policies' tab to get more information about your personal data and how it is used. If you have an account, make sure you're logged in first; this will allow you to perform many actions by yourself without needing to contact us.
General points:
Click on each section to get detailed information. All network communication between you and the website or other mobile apps is always protected by a secure connection (SSL).
| Purpose of data processing: | The main purpose of MentSpot is to help you find a connection with a mentor or mentee that can provide you with help in getting further in business or improving your life. To do this, a potential mentor/mentee needs to know more about your situation and what you're looking for. The amount of personal details you provide in explaining your situation and what brought you to look for a mentor/mentee is up to you, so make sure that you don't disclose information that you are not willing to share. Anyone visiting the MentSpot platform can look up your profile and read what you've written about yourself and your situation on your profile page. All of this data is stored within the MentSpot platform. |
| Types of personal data processed: | Everything written in the 'About me/What brought you here?', and 'What you expect from a Mentee/Mentor' fields on your profile. Email, current IP address, account 'Nickname', timestamp of last login, timestamp of last request. And optionally if given, your Facebook, LinkedIn or Twitter handles. |
| Who is this data collected from: | Everyone that has signed up for an account on MentSpot. |
| How long will this data be kept: | For as long as you have your account and keep it active during a period of 4 years. If you haven’t used your account in more than 4 years, your account and all related data will be removed automatically. |
| How to delete/modify this data: | You first need to log in to your account. You can then visit your Profile Page and update your details. To remove your account including any related data visit your Profile Page and click the remove account option at the bottom. |
| What security measures are there to protect this personal data: | The data is stored in the database on our web-server (hosted by Vultr). The server and database are only accessible with an encryption key that only our data protection person holds. |
| This data is transferred to these 3rd parties: | This data is stored and collected on a server rented from Vultr USA |
| Which of these 3rd parties are located outside the EU: |
|
| Purpose of data processing: | Before you can connect with a potential mentor/mentee, you can send messages back and forth first, to see if they are a good match. Once you have found a mentor/mentee, you can create a connection with them. Goal lists are used to make the mentoring process easier by giving you a framework to work within. All this data is stored within the MentSpot platform. |
| Types of personal data processed: | For chat messages: their content, timestamp and recipient. For connections: the status of connection, invitation message, timestamp of accepted/denied connection. For goal lists: the todo items for each goal and their timestamp of creation. |
| Who is this data collected from: | Everyone requesting to connect with a mentor/mentee, or who has a connection with a mentor/mentee. |
| How long will this data be kept: | For as long as you have your account and keep it active during a period of 4 years. If you haven’t used your account in more than 4 years, your account and all related data will be removed automatically. |
| How to delete/modify this data: | You first need to log in to your account. You can then visit your Profile Page and update your details. To remove your account including any related data visit your Profile Page and click the remove account option at the bottom. To remove an individual chat message, you can contact us here, and mention the recipient’s name and date of the message. To remove goal lists, you can do that from the goal page here. |
| What security measures are there to protect this personal data: | The data is stored in the database on our web-server (hosted by Vultr). The server and database are only accessible with an encryption key that only our data protection person holds. |
| This data is transferred to these 3rd parties: | This data is stored and collected on a server rented from Vultr USA |
| Which of these 3rd parties are located outside the EU: |
|
| Purpose of data processing: | To restore the latest copy of 'User Account Data, Chat Messages, Goal Lists and Mentor/Mentee Connections' for the purpose of disaster recovery or in case of a server malfunction. |
| Types of personal data processed: | Same as for sections 'User Account' and 'Chat Messages, Goal Lists and Mentor/Mentee Connections'. |
| Who is this data collected from: | Everyone that has signed up for an account on MentSpot. |
| How long will this data be kept: | Backups that are more than 6 months old are automatically removed. |
| How to delete/modify this data: | No changes are possible because of legal and disaster recovery requirements. However, in case of a (disaster) recovery from the backup, we have the necessary procedures in place to make sure that data from users that was removed or requested to be removed, is not restored from the backup. |
| What security measures are there to protect this personal data: | Backups are always encrypted. First they are put on our web-server (hosted by Vultr), after which they are encrypted and backed-up with our storage provider Amazon Web Services (AWS). Only the data protection person has access to and can unencrypt these backups. |
| This data is transferred to these 3rd parties: | Backups are transferred to Amazon Web Services (AWS) after being created on a server rented from Vultr USA. |
| Which of these 3rd parties are located outside the EU: |
|
| Purpose of data processing: | To inform you about potentially interesting mentees/mentors and other account related statuses, such as unread messages or completing all of your account details. |
| Types of personal data processed: | E-mail. |
| Who is this data collected from: | Everyone who signs up for an account on MentSpot. |
| How long will this data be kept: | For as long as you have your account and keep it active during a period of 4 years. If you haven’t used your account in more than 4 years, your account and all related mailings will be removed automatically. |
| How to delete/modify this data: | You first need to log in to your account. You can then visit your Profile Page and uncheck the boxes that indicate you want to receive account related e-mails. You can also follow the unsubscribe links from the e-mails themselves. |
| What security measures are there to protect this personal data: | This data is stored in the database on our web-server (hosted by Vultr). The server and database are only accessible with an encryption key, which is held by our data protection person. |
| This data is transferred to these 3rd parties: | This data is stored and collected on a server rented from Vultr USA. E-mails are sent using a 3rd party e-mail sending provider, AuthSMTP EU |
| Which of these 3rd parties are located outside the EU: |
|
| Purpose of data processing: | To improve your profile page with custom avatars and custom backgrounds, for potential mentees/mentors. |
| Types of personal data processed: | The photo image. |
| Who is this data collected from: | Everyone who uploads a custom avatar image or custom background image to MentSpot. |
| How long will this data be kept: | For as long as you have your account and keep it active during a period of 4 years. If you haven’t used your account in more than 4 years, your account and all related data will be removed automatically. |
| How to delete/modify this data: | Once your logged in, visit the Profile Page and click 'remove photo'. |
| What security measures are there to protect this personal data: | The credentials to access your photos are only available to the data protection person. RackSpace has their own necessary security procedures in place to ensure safe storage and access. |
| This data is transferred to these 3rd parties: | Photos are stored on RackSpace. |
| Which of these 3rd parties are located outside the EU: |
|
| Purpose of data processing: | Troubleshooting in case of application errors, investigating security incidents and to comply with the law. |
| Types of personal data processed: | IP address, timestamp of request, web page on MentSpot accessed. |
| Who is this data collected from: | Every visitor to the MentSpot website. |
| How long will this data be kept: | A maximum of 1 year. |
| How to delete/modify this data: | No changes are possible because of legal and security requirements. |
| What security measures are there to protect this personal data: | Website traffic logs are collected on our web-server (hosted by Vultr) and rolled-over daily, after which they are encrypted and backed-up with our storage provider Amazon Web Services (AWS). Only the data protection person has access to and can unencrypt these logs. |
| This data is transferred to these 3rd parties: | Transferred to Amazon Web Services (AWS) and collected on a server rented from Vultr USA. |
| Which of these 3rd parties are located outside the EU: |
|
| Purpose of data processing: | To respond to your customer service requests and support needs. In addition we also need them to resolve content removal requests. MentSpot needs the data to prove compliance regarding requests to remove content from our service. |
| Types of personal data processed: | Your e-mail address and contact message. |
| Who is this data collected from: | Anyone who uses the feedback form for customer support, or to remove content from MentSpot. |
| How long will this data be kept: | For content removal requests, 4 years, as we need them to prove compliance. All other support requests will be kept for 6 months. |
| How to delete/modify this data: | This data will be automatically removed once the retention period expires, but cannot be removed before that for compliance reasons. |
| What security measures are there to protect this personal data: | The data is stored on the ZoHo mail server, which has its own data protection measures in place, see link below. |
| This data is transferred to these 3rd parties: | Mails are collected by ZoHo Mail USA. |
| Which of these 3rd parties are located outside the EU: |
|
| Purpose of data processing: | To gather statistics on key-metrics regarding the MentSpot website, such as bounce rates, amount of visitors, traffic sources, etc. |
| Types of personal data processed: | Anonymized IP address. |
| Who is this data collected from: | Everyone that visits the MentSpot website. |
| How long will this data be kept: | 14 months. |
| How to delete/modify this data: | Visit the Remove Tracking page to remove yourself from the 3rd party web analytics tracking service Google Analytics (GA). |
| What security measures are there to protect this personal data: | We have enabled anonymized IP address tracking, minimized data retention settings in Google Analytics, disabled 'Remarketing' and 'Advertising Reporting Features' in Google Analytics, minimizing the amount of tracking data stored and processed. |
| This data is transferred to these 3rd parties: | Google Analytics USA |
| Which of these 3rd parties are located outside the EU: | Google Analytics USA. GDPR compliance at https://privacy.google.com/businesses/compliance |
| Purpose of data processing: | We use first-party session cookies to maintain your account session once you've logged in. |
| Types of personal data processed: | Cookie |
| Who is this data collected from: | Anyone who visits the MentSpot website |
| How long will this data be kept: | Cookies have a default lifetime of 4 years. |
| How to delete/modify this data: | To disable or remove cookies (for MentSpot or other sites), please visit this link: https://cookies.insites.com/disable-cookies |
| What security measures are there to protect this personal data: | All cookies from MentSpot are encrypted. |
| This data is transferred to these 3rd parties: | This data is processed on a server rented from Vultr USA |
| Which of these 3rd parties are located outside the EU: |
|
In case you have more questions after going through our data policies, you can contact us here.
The company controlling data on MentSpot is Yogile B.V. registered at Lutmastraat 1 3, 1072 JL Amsterdam, the Netherlands.
If you have an account, please log in first to export/see your data. If you don't have an account, use the contact form and send us the e-mail or account url that you want the data for.
If you have an account, log in first to remove the data yourself. If not, you can use the Contact Form, and mention the account, chat message, review or other personal data you'd like to remove.
Visit the Remove Tracking page to remove yourself from the 3rd party web analytics tracking service Google Analytics.