This privacy policy informs you about the personal data we process in connection with the menteez platform, including the website (hereinafter the "Platform"). We explain the purposes, scope, and locations of data processing, and inform you of your rights as a data subject.

This privacy policy distinguishes between two areas with different data processing: our public website (menteez.ch), which serves for information and contact purposes, and the mentoring platform itself, on which participants, mentees, and mentors use the mentoring program (accessible via app.menteez.ch in the standard model, or via a customer-specific subdomain, e.g. customername.menteez.ch, for dedicated deployments). The provisions on analytics, marketing, and social media services in Sections 10 and 12 apply exclusively to the public website. These services are not used on the mentoring platform itself; data processing there is described separately in Section 6.

1. Contact Address

The entity responsible for processing personal data is problem solved GmbH, Teufener Strasse 89, 9000 St. Gallen, Switzerland, reachable at info@menteez.ch.

2. Legal Basis

We process personal data in accordance with Swiss data protection law, in particular the Federal Act on Data Protection (FADP) and its accompanying Data Protection Ordinance (DPO). Where applicable, we also take into account other national or international data protection provisions.

3. Nature, Scope, and Purpose

We only process personal data that we require to provide our offerings and activities in a long-term, user-friendly, secure, and reliable manner. This may include, in particular: basic and contact data, technical browser and device data, content data, meta and communication data, usage and location data, as well as information relating to sales, contracts, and payments.

The following specific retention periods apply to participants on the mentoring platform: Personal data of participants is retained for the duration of their membership in the customer's respective mentoring network. The customer, as controller, reviews every 12 months whether continued retention remains necessary for the processing purpose, and deletes data that is no longer required without delay. Participants may also request deletion of their data at any time, without giving reasons; such a request is processed without delay.

Where the contractual relationship between our customer and problem solved GmbH ends, all personal data is first exported in a common, machine-readable format and made available to the customer. All remaining personal data is then permanently and irrevocably deleted from all production systems within 30 days. For security and recovery purposes, data may be retained in technical backup systems for a maximum of 35 days before being permanently overwritten as part of automatic backup rotation.

We may also have personal data processed by external service providers or disclose it to such providers, for example to specialised providers whose support we use for our services. In such cases, we ensure that data protection is maintained at all times.

As a general rule, we base our processing on the consent of the data subject. However, where processing is permitted for other legal reasons, for example to perform a contract, to comply with legal obligations, or to safeguard legitimate interests, it may also take place without explicit consent.

We also process personal data transmitted to us by third parties, obtained from publicly available sources, or collected by us in the course of our activities, provided this is legally permissible.

4. Communication

We process personal data in order to communicate with third parties. This includes, in particular, information provided to us by a data subject in the course of making contact, for example by post or email. We may store such data in an address book or comparable systems.

Third parties who provide us with personal data are obliged to ensure data protection towards the data subjects concerned, in particular the accuracy of the information provided.

For efficient communication, we use selected services from suitable providers, in particular:

• Framer: website builder; provider: Framer B.V. (Netherlands); privacy information: "Privacy Statement".

• Infomaniak: cloud provider incl. mail service; provider: Infomaniak Network SA (Switzerland); privacy information: "Privacy Policy".

• Microsoft 365: internal business correspondence between contact persons (info@, michael@, pauline@menteez.ch); provider: Microsoft Ireland Operations Limited / Microsoft Corporation; data location: Switzerland (Exchange Online); privacy information: Microsoft Privacy Statement.

5. Applications

We process personal data of applicants insofar as this is necessary to assess their suitability for an employment relationship or for the subsequent handling of an employment contract. The necessary information is generally derived from the details requested as part of an application or job posting. We may publish job postings through suitable third parties, such as online job portals or print media.

We also process any further data that applicants voluntarily provide to us or make publicly available, for example in cover letters, CVs, additional documents, or online profiles.

We may offer applicants the option to store their data in a talent pool, in order to be able to consider them for future vacancies. We may also use the information stored there to maintain contact or to inform applicants of relevant news. Where the available information indicates that a profile is suitable for an open position, we may proactively contact the relevant person.

6. Data Security

We take appropriate technical and organisational measures to ensure data security in accordance with the relevant risk. These measures are intended in particular to ensure the confidentiality, integrity, availability, and traceability of the personal data processed. However, absolute security cannot be guaranteed.

For the processing of personal data within the mentoring platform (e.g. participant data, mentoring profiles), we exclusively use our hosting partner Infomaniak Network SA (Switzerland) as processor. This data is processed and stored exclusively in Switzerland.

7. Rights of Data Subjects

We grant data subjects all rights under applicable data protection law. In particular, data subjects have the following rights:

• Access: Data subjects may request confirmation as to whether we process personal data about them and, if so, which data. Data subjects also receive the information necessary to exercise their data protection rights and to ensure transparency, including the purpose of processing, the retention period, any disclosure or transfer of data to other countries, and the origin of the data.

• Rectification and restriction: Data subjects may have inaccurate personal data corrected, incomplete data completed, and the processing of their data restricted.

• Erasure and objection: Data subjects may have personal data deleted ("right to be forgotten") and may object to the processing of their data with effect for the future.

• Data portability: Data subjects may request the disclosure of personal data or the transfer of their data to another controller.

• Right to lodge a complaint: Data subjects also have the right to lodge a complaint with the competent data protection supervisory authority, in particular the Swiss Federal Data Protection and Information Commissioner (FDPIC), or, where the GDPR applies, with the competent authority in the relevant EU member state.

We may postpone, restrict, or refuse the exercise of data subject rights to the extent legally permitted. We may inform data subjects of any conditions that must be met in order to exercise their data protection rights. For example, we may wholly or partially refuse access with reference to trade secrets or the protection of other persons, or refuse deletion with reference to statutory retention obligations.

8. Use of the Website

We may use cookies. Cookies, both our own (first-party cookies) and those of third parties whose services we use (third-party cookies), are data stored in the browser. Such stored data is not necessarily limited to traditional text-based cookies. Cookies can be disabled or deleted at any time, in whole or in part, via browser settings. Without cookies, our website may not be available in full. Where required, we actively request explicit consent to the use of cookies.

For each access to our website and other online presence, we may log at least the following information, insofar as it is transmitted to our digital infrastructure: date and time including time zone, IP address, access status (HTTP status code), operating system including user interface and version, browser including language and version, the specific subpage of our website accessed including the amount of data transferred, and the last webpage visited in the same browser window. We log this information, which may also constitute personal data, in log files. This information is required to provide our online presence on a permanent, user-friendly, and reliable basis, and to ensure data security, including with the assistance of third parties.

We may embed tracking pixels in our online presence, also known as web beacons. Tracking pixels, including those of third parties whose services we use, are typically small, invisible images or scripts written in JavaScript that are automatically retrieved when our online presence is accessed. Tracking pixels can capture at least the same information as log files.

9. Notifications and Messages

We send notifications and messages by email and via other communication channels, such as instant messaging or SMS.

Notifications and messages may contain web links or tracking pixels that record whether an individual message was opened and which links were clicked. Such links and pixels may also record usage on a personal basis. We require this statistical usage data for success and reach measurement, in order to send notifications and messages effectively, in a user-friendly manner, and on a permanent, secure, and reliable basis, tailored to recipients' needs and reading habits.

You must consent to the use of your email address and other contact details, unless such use is permitted for other legal reasons. We may use a "double opt-in" procedure to obtain confirmed consent where required. In this case, you will receive a message with instructions for double confirmation. We may log consent obtained, including IP address and timestamp, for evidentiary and security purposes.

You may generally object to receiving notifications and messages, such as newsletters, at any time. Such an objection may also constitute an objection to the statistical recording of usage for success and reach measurement. This does not affect notifications and messages required in connection with our activities.

We send notifications and messages with the assistance of specialised service providers. In particular, we use:

• Infomaniak: cloud provider incl. mail service; provider: Infomaniak Network SA (Switzerland); privacy information: "Privacy Policy".

10. Social Media and Website Services (Public Website Only)

The following information applies exclusively to our public website (menteez.ch) and not to the mentoring platform.

We maintain a presence on social media and other online platforms in order to communicate with interested parties and provide information about our activities. In connection with such platforms, personal data may also be processed outside Switzerland and the European Economic Area (EEA).

The general terms and conditions, terms of use, privacy policies, and other provisions of the respective platform operators also apply. These provisions inform data subjects in particular of their rights directly vis-à-vis the relevant platform, including the right of access.

For our social media presence on Facebook, including so-called Page Insights, we are jointly responsible with Meta Platforms Ireland Limited (Ireland), insofar and to the extent the GDPR applies. Meta Platforms Ireland Limited is part of the Meta group of companies (including in the USA). Page Insights provide information on how visitors interact with our Facebook presence, which we use to provide our Facebook presence effectively and in a user-friendly manner.

Further information on the nature, scope, and purpose of the data processing, on the rights of data subjects, and on Facebook's contact details and data protection officer can be found in Facebook's privacy policy.

We use services from specialised third parties to conduct our activities on a permanent, user-friendly, secure, and reliable basis, including to embed functions and content on our website. When embedding such services, the providers used will, for technically necessary reasons, at least temporarily record users' IP addresses.

For necessary security-related, statistical, and technical purposes, third parties whose services we use may process data relating to our activities in aggregated, anonymised, or pseudonymised form. In particular, we use:

• Google services: providers: Google LLC (USA) / Google Ireland Limited (Ireland) for users in the EEA and Switzerland; privacy information: Privacy Policy, "Privacy & Security Principles".

We use services from specialised third parties for digital infrastructure required for our activities. In particular, we use:

• Google Cloud, including Google Cloud Platform (GCP): storage and other infrastructure; providers: Google LLC (USA) / Google Ireland Limited or Google Commerce Limited (Ireland).

We use services from specialised third parties for online scheduling. In particular, we use:

• Google Calendar: online scheduling; provider: Google.

We use specialised services for audio and video conferencing. In particular, we use:

• Google Meet: video conferencing; provider: Google.

• Zoom: platform for collaborative work, particularly video conferencing; provider: Zoom Video Communications Inc. (USA).

We use services from third parties to enable online collaboration. In particular, we use:

• Notion: platform for team collaboration; provider: Notion Labs Inc. (USA).

We use services and plugins from third parties to embed social media functions and content. In particular, we use:

• Facebook (social plugins); providers: Meta Platforms Ireland Limited (Ireland) and other Meta companies (including USA).

• Instagram platform; providers: Meta Platforms Ireland Limited (Ireland) and other Meta companies (including USA).

• LinkedIn platform; provider: Microsoft.

• TikTok (social plugins); providers: TikTok Information Technologies UK Limited / TikTok Technology Limited (Ireland) / TikTok Inc. (USA) / TikTok Pte. Ltd. (Singapore).

We use services from specialised third parties to enable direct playback of digital audio and video content. In particular, we use:

• Loom: video hosting; providers: Atlassian Pty Ltd (Australia) / Atlassian Inc. (USA).

• YouTube: video platform; provider: Google.

We use services from third parties to embed documents on our website. In particular, we use:

• Canva: digital documents; provider: Canva Pty Ltd (Australia).

• Google Docs: documents, presentations, and spreadsheets; provider: Google.

We use services from third parties to embed selected fonts, icons, logos, and symbols. In particular, we use:

• Google Fonts; provider: Google.

We use the option to display targeted advertising with third parties (remarketing and targeting, conversion tracking). In particular, we use:

• Google Ads; provider: Google.

• LinkedIn Ads; providers: LinkedIn Corporation (USA) / LinkedIn Ireland Unlimited Company (Ireland).

• Meta Ads; providers: Meta Platforms Ireland Limited (Ireland) and other Meta companies (including USA).

• Microsoft Advertising; provider: Microsoft.

• TikTok Ads; providers: as above.

We use extensions for our website. In particular, we use:

• Google reCAPTCHA: spam protection; provider: Google.

11. Success and Reach Measurement (Public Website Only)

The following information applies exclusively to our public website (menteez.ch). No success or reach measurement by third parties takes place on the mentoring platform itself.

We seek to understand how our online offering is used. This may include measuring the success and reach of our activities, as well as the effect of third-party links to our website. We may also test and compare how different parts or versions of our online offering are used ("A/B testing"). Based on the results of such measurement, we may fix errors, strengthen popular content, or make improvements to our online offering.

For success and reach measurement, the IP addresses of individual users are generally stored. In such cases, IP addresses are generally shortened ("IP masking") to comply with the principle of data minimisation through pseudonymisation.

Cookies may be used for success and reach measurement, and user profiles may be created. Any such user profiles are generally created exclusively on a pseudonymised basis and are not used to identify individual users.

In particular, we use:

• Google Marketing Platform: success and reach measurement, in particular using Google Analytics; provider: Google.

• Google Tag Manager: integration and management of Google and third-party services; provider: Google.

• Hotjar: recording of user behaviour; provider: Hotjar Ltd. (Malta).

12. Final Provisions

We may amend and supplement this privacy policy at any time. We will inform users of any such amendments or supplements in an appropriate manner, in particular by publishing the current version of this privacy policy on our website.

Version September 2026