Privacy policy
HUME measures stress because not everyone can easily express it. Understanding people is crucial in order to provide them with the right care. By measuring stress, we aim to help people be better understood. We believe this will improve their relationships with others and increase overall happiness.
To recognise stress, Mentech requires some of your data. This privacy policy provides a transparent overview of what data we collect, why we collect it, and how we handle it. If you have any further questions after reading this privacy policy, please feel free to contact our privacy team at privacy@mentechinnovation.eu.
Mentech Innovation B.V. – located at Boschdijk 766, 5624 CL Eindhoven, and hereafter referred to as Mentech – is responsible for processing your data. In some cases, your care organisation is also responsible for processing your data. Please contact your care organisation for more information.
What data do we collect?
Data you provide
We require this to communicate with you and deliver our services properly:
Contact details (first name, last name, home address, email, and phone number)
Medical data (if you provide consent)
Information on any disabilities
Other medical data relevant to the use of HUME
Data collected automatically
If you use the HUME sensors, the following data will automatically be collected:
Heart rate
Skin conductance
Skin temperature at various body locations
Movement and body posture
These data are used to detect stress.
Additionally, our security system collects the following data to prevent and detect misuse of your account:
IP address
Type of device (mobile phone, laptop) used to access HUME
Times and country from which you access your HUME account
Finally, Mentech collects statistics about the use of the HUME app. We do this to improve our product and to assist you when you experience problems with the app.
Data generated by Mentech
If you use the HUME sensors, the following data may be derived from the sensor data:
A description of your emotional state
These data are used to ensure that HUME can accurately report your stress moments.
Data we receive from others
Mentech receives data from your care organization in order to register you for the use of HUME. Additionally, your care organization may provide data to configure HUME for you.
This may include:
Your contact details
Any medical data
Behavioural descriptions with corresponding timestamps
For more details, please contact your care organisation.
How do we store your data?
Our physical infrastructure is hosted and managed in data centers operated by Amazon Web Services and Microsoft, located in Germany, Ireland, Belgium, and the Netherlands. We rely on their flexible and secure cloud infrastructure. These data centers provide the highest possible level of data security and protection. All data is stored in highly secure facilities, which are monitored and protected 24/7. Physical access is strictly limited to authorized datacenter staff. Risks are continuously managed, and periodic audits are conducted to ensure compliance with industry standards.
Details on how specific datacenters handle fire detection, power outages, natural disasters, temperature control, and data center management can be found on their websites (in English):
AWS Cloud Security
Mentech regularly performs independent security audits to guarantee the safety of your data.
Data Retention
Mentech retains your data for as long as necessary to deliver our services to you. If you decide to stop using HUME, all your personal data will be destroyed or anonymized within 30 days, where possible. Upon request, Mentech can also transfer your data to you.
You always retain the right to request deletion of your data.
In some cases, we may need to retain your data longer than 30 days after you stop using HUME. Examples include:
You still have legal obligations towards Mentech (such as payments)
Law, government, or regulatory authorities prevent us from deleting the data
Third Parties
Mentech works with a limited number of subprocessors who help us provide our product and services to you. We minimize the number of third parties processing your data. Before engaging a subprocessor, Mentech always performs a Data Protection Impact Assessment (DPIA) to ensure your data is safe and your privacy is respected.
Please contact privacy@mentechinnovation.eu for a list of subprocessors.
If you provide additional consent, we may share your encrypted data with research institutions, universities, and applied sciences centers for the purpose of advancing scientific research in the public interest.
Publication
Mentech may publish your encrypted data, but only if you provide explicit additional consent. The purpose of such publication is to share scientific results in the public interest.
Marketing and Promotions
Mentech uses your contact details to send you updates about Mentech and HUME. We will not use your data for marketing purposes.
Updates
Our privacy policy is regularly improved and updated. Updates will be published on this webpage. Mentech recommends visiting this page regularly to stay informed. In case of updates with significant impact on your privacy, we will also notify you by email.
Your Rights
Mentech wants to ensure you are aware of your rights under the GDPR:
Right of Access – You have the right to access your personal data (Article 15 GDPR). You can submit a written request to know what personal data Mentech processes about you.
Right to Rectification – If your data is incorrect or incomplete, you can request correction or supplementation (Article 16 GDPR).
Right to Erasure ("Right to be Forgotten") – In certain cases, you can request Mentech to erase your data (Article 17 GDPR).
Right to Data Portability – You may request your data in a transferable format (Article 20 GDPR) if processing is based on your consent or a contract. This only applies to digital data, not paper records.
Right to Restriction of Processing – You may request Mentech to limit the processing of your data (Article 18 GDPR).
Right to Object – You can object to the processing of your personal data by Mentech.
Submitting a Request – Mentech has one month to respond to your request. To exercise any of these rights, contact us at privacy@mentechinnovation.eu.
Complaints
If you have a complaint about how Mentech handles your data, please contact privacy@mentechinnovation.eu. We will do our best to resolve your issue satisfactorily.
You may also directly contact our Data Protection Officer via privacy@mentechinnovation.eu. Finally, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Contact
Email: privacy@mentechinnovation.eu
Phone: +31 40 209 4110
Mentech Innovation B.V.
Boschdijk 766
5624 CL Eindhoven
Netherlands