Privacy & Cookie Policy

01 About this policy

This policy explains how Menta handles personal data in connection with its corporate website at mentatech.io, which this policy refers to as the Site, and in connection with its business relationships and recruitment. It covers the information collected when you browse the Site, submit a form on it, or contact Menta through it, the cookies and similar technologies the Site uses, the personal data of our business contacts at ticketing companies, partners and other organisations we work with, and the personal data of people who apply for a role with us or whom we approach about one.

This policy does not cover the secondary marketplace that Menta operates inside the ticketing platforms of its clients. Personal data in those flows is handled as described in the privacy policy published for that service at privacy.mentatech.io.

Use of the Site is also governed by the Terms of Use.

The Site is directed at businesses and at professionals acting in the course of their trade, business or profession. It is not directed at children, and Menta does not knowingly collect personal data from anyone under 18.

02 Who we are

The controller of the personal data described in this policy is:

In this policy, "Menta", "we", "us" and "our" refer to Menta Tickets Corp.

Where you apply for a role with us, or we approach you about one, the controller of your personal data may be Menta Tickets Corp. or the affiliate of Menta Tickets Corp. that offers the role, and you can contact either of them through the details above. In relation to recruitment, references in this policy to "Menta", "we", "us" and "our" include that affiliate.

03 What we collect

Information you give us. When you submit the demo request form or otherwise contact us through the Site, we collect your name, your email address, the website of the company you represent, and whatever you choose to write in the free text field of the form. If you write to us by email, we collect the contents of that message and any information you include in it.

Information collected automatically. When you browse the Site we may collect your IP address, the approximate location derived from it, your device and browser type and settings, the pages you view, the page that referred you, and the date, time and duration of your visit. Where you have accepted analytics cookies, we also collect a recording of how you interacted with the pages you visited, as described in Section 6.

The Site has no user accounts, no login, no payment functionality and no downloads. We do not ask for special categories of personal data, such as data about health, religion, political opinions or trade union membership, and you should not send that information to us through the Site.

Business contacts. Where we deal with you as a contact at a ticketing company, partner, supplier, investor or other organisation, we may hold your name, job title, employer, work email address and telephone number, our correspondence with you, notes, transcripts and summaries of our meetings and calls, and details of our dealings with your organisation. This information may come from you, from the organisation you work for, from referrals and events, and from public professional profiles such as LinkedIn.

Candidates. Where you apply for a role with us, or we approach you about one, we may hold your name, contact details, CV or professional profile, work history, the role concerned and notes from the selection process. This information may come from you, from people who refer you to us, and from public professional profiles such as LinkedIn.

04 Why we use it, and our legal bases

We use the personal data described above for the following purposes, on the following legal bases:

• To respond to demo requests, enquiries and messages you send us, and to follow up on them. Legal basis: our legitimate interest in responding to business enquiries and in developing our commercial relationships.
• To manage our relationships with the organisations we work with, including keeping a record of our contacts, correspondence, meetings and dealings with them. Legal basis: our legitimate interest in running and developing our business relationships.
• To assess candidates for roles at Menta, to contact people about roles that may interest them, and, if you agree, to keep your details for future roles. Legal basis: our legitimate interest in recruiting, and your consent to keep your details for future roles, which you can withdraw at any time.
• To send business communications about Menta, our services and related content. Legal basis: your consent where it is required, or otherwise our legitimate interest in communicating with professional contacts. You can opt out at any time, and every marketing email includes a way to do so.
• To measure and improve the Site, including analytics and session recording. Legal basis: your consent, given through the cookie banner.
• To keep the Site available and secure and to prevent abuse, misuse and automated attacks. Legal basis: our legitimate interest in protecting the Site and the people who use it.
• To keep the records we are required to keep and to establish, exercise or defend legal claims. Legal basis: compliance with a legal obligation, and our legitimate interest in defending our rights.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your interests and rights, and you can object to that processing as described in Section 11.

05 Cookies and similar technologies

Cookies are small files placed on your device when you visit a website. The Site uses them in two categories.

Strictly necessary cookies are required for the Site to work and to record the cookie choices you make. They are set without consent because the Site cannot function properly without them.

Analytics cookies help us understand how the Site is used. They are not set until you accept them through the cookie banner. If you do not accept them, or if you reject them, they are not set.

The banner appears the first time you visit. You can change or withdraw your choice at any time through the cookie settings available on the Site, and you can delete cookies at any time through your browser settings. Withdrawing consent does not affect anything done before you withdrew it.

Some pages of the Site contain videos hosted by Vimeo. These are embedded with Vimeo’s do not track setting enabled, so the player does not set tracking or analytics cookies. Vimeo still sets a small number of cookies that it treats as necessary for the player to run securely, and it receives your IP address when a video loads, because the video is delivered from its servers. That processing is carried out by Vimeo under its own privacy policy.

Cookie names and retention periods are set by the providers and may change. This table is reviewed when the Site changes.

06 Analytics and session recording

We use two analytics tools, both only where you have accepted analytics cookies.

Google Analytics produces aggregate statistics about how the Site is used, such as how many people visit, which pages they view and how they reached the Site.

Microsoft Clarity records how visitors interact with the pages they view, including mouse movement, clicks, scrolling and navigation between pages, and produces heatmaps and playbacks of those interactions. We use it to find usability problems and to understand which content is read. We configure Clarity to mask text entered into form fields, so what you type into the demo request form is not readable in a recording. The recordings are of activity on our pages and are not used to identify you personally or to build a profile about you, and we do not use them to make decisions that affect you.

Both providers process this data as our service providers and under their own terms. You can prevent both by rejecting analytics cookies, and you can withdraw that consent at any time.

07 Who we share it with

We share personal data only where there is a reason to, and only with:

• Service providers that process it on our behalf and under contract, including the providers that host the Site, deliver and secure its content, manage cookie consent, provide the analytics described above, host the embedded videos, and provide the email, business and recruitment tools we use to reply to you, to keep track of business contacts and to manage recruitment.
• Our affiliates, where they need it to manage recruitment or our business relationships.
• Our professional advisers, such as lawyers and accountants, where they need it to advise us.
• Public authorities, courts and regulators, where we are required to disclose it by law or where disclosure is necessary to establish, exercise or defend legal claims.
• A buyer or successor, if Menta is involved in a merger, acquisition or transfer of assets, in which case the recipient is bound to handle the data consistently with this policy.

We do not sell personal data, and we do not share it for cross context behavioural advertising.

08 International transfers

Menta Tickets Corp. is established in the United States, and we and some of the providers described in Section 7 process personal data in the United States and in other countries outside the one you are in. Where the GDPR, the UK GDPR or Swiss data protection law applies to our processing, we comply with it directly, and where we share that personal data with providers outside the European Economic Area, the United Kingdom and Switzerland, we rely on an adequacy decision or on the safeguards in our contracts with them, such as the standard contractual clauses. Where personal data is transferred to us from the European Economic Area, the United Kingdom or Switzerland by another party, we put appropriate safeguards in place, such as the standard contractual clauses adopted by the European Commission together with the United Kingdom addendum where it applies, or rely on an adequacy decision or another mechanism recognised under the applicable law.

You can ask us for information about the safeguards that apply to a particular transfer by writing to legal@mentatech.io.

09 How long we keep it

• Demo requests, enquiries and correspondence: for as long as needed to deal with the enquiry and to manage the business relationship that follows from it, and after that as set out for business contact details below.
• Business contact details: while we have an active relationship with you or your organisation, and otherwise until 24 months pass without contact between us. If you ask us to stop contacting you, we stop and keep only what is needed to honour that request.
• Candidates: up to 12 months after the hiring decision, unless you are hired, in which case your application becomes part of your employment records. If you agree that we keep your details for future roles, we keep them for up to 24 months, and you can withdraw that consent at any time.
• Analytics and session recordings: for the limited retention period applied by the relevant provider, after which they are deleted or aggregated.
• Records we are required to keep for tax, accounting or other legal purposes, and records needed for legal claims: for the period required by the applicable law or for as long as the claim may be brought.

When personal data is no longer needed for any of these purposes, we delete it or anonymise it so that it can no longer be linked to you.

10 Security

We apply technical and organisational measures appropriate to the risk, including access controls, encryption of data in transit, and limiting access to personal data to the people who need it. No website or transmission over the internet can be guaranteed to be completely secure, and you should not send us confidential information through the Site.

11 Your rights

Depending on where you are, you may have the right to ask us to give you access to the personal data we hold about you, to correct it if it is inaccurate, to delete it, to restrict how we use it, to object to our use of it where we rely on legitimate interests, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, write to legal@mentatech.io. We may need to ask you for information to confirm who you are before we act on a request. We respond within the period required by the law that applies to you.

If you are in the European Economic Area, the United Kingdom or Switzerland, you also have the right to lodge a complaint with your national data protection authority. If you are a resident of a United States state that grants privacy rights to its residents, you may have equivalent rights under that state's law, and you can exercise them through the same contact address. Exercising any of these rights is free of charge and we will not treat you differently for doing so.

12 Changes to this policy, and contact

We may update this policy when the Site changes or when the law requires it. The current version is always published at this address, and the date at the top of this page shows when it was last updated. Where a change is significant, we will take reasonable steps to bring it to your attention.

For any question about this policy or about how we handle your personal data, write to legal@mentatech.io, or to Menta Tickets Corp., 5200 Waterford District Drive, Suite 120, Miami, FL 33126, United States.