Privacy Policy mantau

We, EXEC IT Solutions GmbH, take data protection very seriously. The protection of your personal data is important to us. It goes without saying that we comply with the applicable legal provisions.

The following Privacy policy is to be understood as a supplement to the terms of use of the group manager mantau. The Privacy policy contains information relating to the collection, use, processing, storage, transfer and/or disclosure of personal data in mantau (hereinafter referred to as "mantau"). 

In the following, we describe how we handle your personal data when you use mantau. In doing so, we use the terms that were used by the European Directive and Regulation Maker when enacting the General Data Protection Regulation (GDPR).

I. Responsible company

The responsible the company within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is 

EXEC IT Solutions GmbH
Südstraße 24
D 56235 Ransbach-Baumbach, Germany

Fon: +49 (0) 2623/987 90
Fax: +49 (0) 2623/987 923

(hereinafter also abbreviated to: EXEC)

If you have any questions or problems - also regarding our data protection regulations - we are happy to be your contact.

II. Data protection officer

The data protection officer of the controller is:

IT Process & Audit GmbH Wirtschaftsprüfungsgesellschaft
Mr Thomas Martin 
Bruder-Kremer-Straße 6 
D 65549 Limburg a. d. Lahn, Germany
Fon: +49 (0)6431 969-200

You can contact our data protection officer directly at any time regarding the exercise of your rights and all questions and suggestions regarding data protection. You also have the right to lodge a complaint with a supervisory authority.

III. Purpose of data processing

The subject of data protection is personal data (hereinafter also referred to as "data") pursuant to Art. 4 (1) GDPR.

We use your voluntarily submitted personal data so that you can use mantau in accordance with the terms of use for communication and data exchange.

The data is stored, processed and used exclusively in a German data centre commissioned by EXEC. In addition, your data may be stored locally on the devices you use to access mantau.

We use technical and organisational security measures to protect personal data that is generated or collected, in particular against accidental or intentional manipulation, loss, destruction or against attack by unauthorised persons. Our security measures are continuously improved in line with technological developments.

EXEC collects and processes the following personal data in order to be able to offer you mantau as a service:

  • First name
  • Surname
  • E-mail address

Your e-mail address and a password chosen by you are used for authentication with mantau and to access your account.

EXEC collects and processes the following data when booking additional services for which a fee is charged:

  • Organisation
  • VAT ID
  • First name, last name
  • Street, number, postcode, town
  • Country, State
  • Phone number
  • E-mail address
  • E-mail address for receipt of invoice
  • If applicable, bank details for SEPA direct debit procedure

In accordance with the purpose of mantau as a group manager - with messenger, shared data storage, diary and more - when using mantau, content data (e.g. messages, information, files) provided by you on your own responsibility for other mantau users may also be stored, processed and transmitted. These are transmitted to servers in encrypted form and stored in 
encrypted form.

IV. Legal basis of the data processing

Your personal data will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR) and for the fulfilment of the contract concluded with you (Art. 6 para. 1 lit. b GDPR). To use mantau, your consent to data processing in accordance with this privacy policy is required. You have the right to revoke this consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.

In the event of a revocation of consent to data processing, the contractual relationship shall end at the time the revocation becomes effective. The obligation to pay any fee agreed for the original term of the contract remains unaffected in the event of a revocation. 

If a child wishes to use mantau but has not yet reached the age of 16, the consent of the parents or the bearer of parental responsibility pursuant to Article 8 (1) sentence 2 GDPR is required for the processing of the child's personal data. 

You will only be requested by EXEC to provide mandatory data that is necessary for the fulfilment of the purpose of the contract and without the provision of which a contract cannot be concluded.

V. Recipients of personal data

The recipient of your personal data is exclusively EXEC as your contractual partner. Your option to make personal data available to third parties on your own responsibility within the scope of the use of the contractual services remains unaffected by this.

Data will only be passed on to third parties if we are obliged to do so by law or on the basis of a court decision (Art. 6 para. 1 lit. c GDPR).

VI. Duration of data storage

Your personal data will only be stored for the duration of the user relationship. 

If you delete your account, your personal data will be deleted immediately. Only in exceptional cases can the personal data be retained after deletion of the account, insofar as we are legally obliged to do so. The personal and content-related data (e.g. messages, information and files) sent by you to other mantau users up to the time of deletion will remain with them.

VII. Your further rights

You have the following rights in relation to personal data concerning you:

  • Right to information pursuant to Article 15 of the GDPR,
  • Right to rectification pursuant to Article 16 of the GDPR or deletion pursuant to Article 17 of the GDPR,
  • Right to restriction of processing pursuant to Article 18 of the GDPR,
  • Right to data portability pursuant to Art. 20 of the GDPR.

VIII. Changes to the Privacy Policy

We reserve the right to amend this privacy policy from time to time in order to comply with changed legal requirements or to implement new functionalities in the privacy policy.

In this case, you will receive a corresponding notice when you log in to your mantau account, together with a request to take note of and confirm the amended data protection conditions.

(valid from 1 June 2022)