PRIVACY POLICY

Controller / Data Responsible Party

What Personal Data We Collect

We collect personal data in the following categories:

Data You Provide Directly

• Identity data: full name, date of birth, nationality
• Contact data: email address, telephone number, postal address
• Account data: username, password (hashed), account preferences
• Professional data: resume/CV, work history, academic background, LinkedIn profile
• Payment data: billing name, billing address, payment method details (processed via payment providers; we do not store card numbers)
• Communication data: messages, emails, support requests, feedback submitted to us
• Program data: enrollment records, session attendance, assessment submissions, certificates issued

Data Collected Automatically

• Technical data: IP address, browser type and version, device type, operating system
• Usage data: pages visited, time spent on pages, clicks, referral URLs
• Cookie data: session cookies, analytics cookies, preference cookies (see Cookie Policy)

How and Why We Use Your Data

We process personal data for the following purposes and on the following legal bases:

International Data Transfers

MentorNexGen serves users from Switzerland, the EU/EEA, the United States, India, and other countries. Personal data may be transferred to and processed in countries outside Switzerland or the EU/EEA. Where this occurs:

• Transfers to EU/EEA: Switzerland has adequacy status with the EU under the FADP framework.
• Transfers to the USA: We use Standard Contractual Clauses (SCCs) or rely on providers certified under the Swiss-US Data Privacy Framework where applicable.
• Transfers to India and other countries: We ensure adequate safeguards through contractual protections or obtain explicit consent as required by Art. 16 FADP and Art. 46 GDPR.

We will not transfer your data to countries that do not provide an adequate level of protection without first ensuring appropriate safeguards are in place.

Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: payment processors, email delivery services, cloud hosting providers, video conferencing platforms — all bound by data processing agreements.
• Mentors and employers: limited profile information relevant to matching and program participation.
• Competent authorities: where required by Swiss law or court order.
• Business transfers: in the event of a merger, acquisition, or sale of assets, subject to confidentiality protections.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

• Account and enrollment data: for the duration of your relationship with MentorNexGen, plus up to 10 years for accounting and legal compliance.
• Payment records: 10 years as required under Swiss commercial and tax law.
• Marketing communications: until you unsubscribe or withdraw consent.
• Technical/log data: up to 12 months.

When data is no longer required, it is securely deleted or anonymized.

Your Rights Under the FADP and GDPR

Depending on your country of residence, you may have the following rights:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your data ('right to be forgotten') under certain conditions.
• Right to restriction: to request that we limit processing of your data.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to object: to object to processing based on legitimate interest, including direct marketing.
• Right to withdraw consent: where processing is based on consent, you may withdraw at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch, or your local supervisory authority (EU/EEA).

To exercise any of these rights, please contact us at: office@mentornexgen.com. We will respond within 30 days.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These include encrypted data storage, secure payment processing via certified providers, access controls, and regular security reviews. In the event of a data breach that poses a high risk to your rights, we will notify the FDPIC and, where required, affected individuals as quickly as possible (Art. 24 FADP).

Minors

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16 without verified parental consent. If we become aware that a minor has registered without appropriate consent, we will delete the relevant data promptly.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. We will notify you of material changes via email or a prominent notice on the website. The current version is always accessible at mentornexgen.com/privacy-policy.