Legal & Compliance

hero_centered gradient Legal & Compliance Everything legal, in one place For procurement, legal review, journalists and curious users, every legal document we publish, indexed here. feature_grid Documents 📜 Terms & Conditions (AGB) Custom Mentonovo T&C, German law, Berlin jurisdiction. Linked in German across all locales. 🔒 Privacy Policy GDPR-compliant data processing notice. 🍪 Cookie Policy Categories of cookies and how to manage them. 📇 Imprint (§5 TMG) Legal-entity disclosure required under German law. ♿ Accessibility Statement WCAG 2.2 AA conformance status under BFSG. 🛡️ Security & Compliance Index of our hosting, encryption and compliance posture. Verified details and our active roadmap live on the linked security page. rich_text medium Direct linksTerms & Conditions / AGB (DE)Privacy PolicyCookie PolicyImprintAccessibility StatementSecurity & ComplianceFor B2B procurementIf you are evaluating Mentonovo for institutional or corporate use, our standard Data Processing Agreement (DPA / AVV) is automatically appended to every B2B order at checkout, no separate signing needed for digital orders. For audit reports, our security questionnaire response or any other procurement document, please send us a request through the contact form and reference this page in the subject line. statistics accent Public legal documents 6 Languages (DE, EN, AR) 3 Accessibility target under BFSG WCAG 2.2 AA Days, GDPR right-to-erasure SLA 14 Compliance at a glance The legal foundations our platform is built on, all publicly documented on this site. faq For B2B orders the AVV is automatically appended at checkout, no separate signature is required for digital orders. If you need a copy in advance for legal review, request it through the contact form. Where do I get your standard Data Processing Agreement (DPA / AVV)? All Mentonovo contracts are governed by German law, with jurisdiction in Berlin. Consumer-protection rights under EU and German law remain unaffected. Which jurisdiction governs your contracts? The current sub-processor list is part of our DPA and the privacy policy. We notify B2B customers in advance before adding or replacing a sub-processor. Where can I see your sub-processors? Send us a message through the contact form. Submissions are throttled and logged so we can respond within our published SLA. How do I report a privacy or security concern? Yes. Under GDPR Article 17 you have the right to erasure. Submit the request through the contact form and we will action it within 14 days, retaining only what we are legally required to keep (for example invoicing records). Can I request deletion of my account and data? Each linked document carries its own "last updated" date. We review the legal hub at least quarterly and republish whenever a referenced regulation, sub-processor or policy changes. How often is this hub updated? Procurement & legal FAQ cta banner Need a tailored legal answer? Procurement teams, data-protection officers and journalists, send your request through our contact form and reference this page in the subject. We answer within our published SLA. /en/contact Open the contact form