Privacy Notice
Version of 8 October 2026
This English version is provided for convenience. The German version is legally binding.
1. Who is responsible
The controller for the processing described here is:
MESHLE GmbH, Parkstr. 42, 47877 Willich, Germany. Phone +49 (0) 2154-9304-690, email info@meshle.com. Managing director: Nikolay Patrikeev. Further company details are in our imprint.
For any question about your data, or to exercise your rights, write to info@meshle.com.
2. What this notice covers
This notice covers the MESHLE Portal at products.meshle.com, the MESHLE Academy, which you sign in to with your portal account, and the emails we send in connection with them. Our public website meshle.com has its own privacy policy.
The portal is only open to business users: manufacturers we work with (partners), distributors, system integrators and business customers. We review registrations and decline those that do not come from a business, for example registrations with a private or free email address. Invitation links only accept email addresses of the invited company's domain and are approved once the address is confirmed.
3. Your account and registration
When you register, or when we create an account for you, we process:
- your name, business email address, job title and the company you work for;
- your password, stored only as a one-way hash that nobody can read back;
- your interface language, your role (for example partner, distributor or customer) and the company or brand your account is linked to;
- the invitation link you registered through, if any, the status of your registration and, if we decline it, the reason we gave you;
- when you accepted our Terms of Use and which version, and your choice about product news (section 8).
If we create the account for you, we receive these details from your company or from our contact there.
We need these details to run your account and to show you the content that belongs to your role and company. Legal basis: Art. 6(1)(b) GDPR (performance of the terms of use). Where you use the portal as an employee of a business partner, we also rely on Art. 6(1)(f) GDPR; our legitimate interest is managing our business relationship with your company. Checking that a registration comes from a business is based on Art. 6(1)(f) GDPR; our interest is keeping product information and partner material within our business circle.
Name, email address, company, job title and password are required to create an account. Without them we cannot give you access.
4. How you found us
When you register, we store with your account how you reached the portal: the campaign tags in the address (for example on a link from meshle.com, a newsletter or a post), the referring site and the page you started on. We use this to understand which channels bring us new partners. Legal basis: Art. 6(1)(f) GDPR.
To count a registration that happens days after the first visit, the portal can remember this in your browser for up to 30 days. It only does so if you allow it in the privacy settings (section 9).
5. Using the portal
The portal records activity linked to your account: sign-ins, products you view, datasheets, media and catalogues you download, exports, your wishlist, and inquiries you send. We use this
- to provide the features themselves, such as your wishlist and inquiries (Art. 6(1)(b) GDPR);
- to keep the portal secure and to investigate misuse (Art. 6(1)(f) GDPR);
- internally, to understand which products and material our partners and customers use, so we can improve our product range, our material and our support (Art. 6(1)(f) GDPR).
We do not sell this information, do not share it with advertising networks and do not use it to make automated decisions about you. You can object to the internal analysis at any time (section 15).
6. Inquiries, helpdesk and support
Inquiries, helpdesk tickets, replies and the files you attach are processed to handle your request (Art. 6(1)(b) GDPR). MESHLE staff receive them, and we notify the people involved by email. Helpdesk tickets raised by a manufacturer's users can be read and answered by all users of that manufacturer, so colleagues can follow the same case.
To answer support questions, authorised MESHLE administrators can sign in to the portal as you and see and use it as it appears to you. This access is limited to 30 minutes at a time and every use is logged. Legal basis: Art. 6(1)(f) GDPR; our interest is solving problems as they occur for you.
7. MESHLE Academy
You sign in to the Academy with your portal account. The Academy then receives your user ID, user name, name, email address, role and company ID, and keeps them in an encrypted session cookie for at most 24 hours. Legal basis: Art. 6(1)(b) GDPR.
Your learning progress, your settings, recent searches and the name you enter on a certificate are stored only in your browser. They are not sent to us.
If you control a lesson from your phone, the connection runs through our server. Nothing is stored, and the connection ends after at most 2 hours.
If you send feedback from the Academy, we receive your message, your name and email address, technical details (the lesson and page, browser, screen size and app version) and, unless you untick it, a screenshot of the simulator. The feedback is sent to us by email and is not otherwise stored by the Academy. We use it to answer you and to improve the Academy (Art. 6(1)(f) GDPR).
8. Emails
Service emails: we send emails that belong to your account, such as address confirmation, approval, password reset and messages about your inquiries and helpdesk tickets (Art. 6(1)(b) GDPR).
Product news: we send distributors, integrators, customers and other business users who registered for the portal news about new products in our range that are similar to those in the portal. Manufacturers we work with as partners do not receive them. We do this on the basis of § 7(3) of the German Act against Unfair Competition (UWG), using the email address you gave us when you registered. In the alternative, the legal basis is Art. 6(1)(f) GDPR; our interest is direct marketing. If you registered before 8 October 2026, we send you product news only if you have agreed to it in the portal (Art. 6(1)(a) GDPR).
You can object to product news at any time, without any costs other than the basic transmission charges: tick the box when you register, switch it off in your settings, use the unsubscribe link in every product news email, or write to info@meshle.com. We record your objection with your account so that you do not receive product news again.
9. Statistics and usage analysis (only with your consent)
If you allow it in the privacy settings, we analyse how the portal is used with Umami, which we run ourselves at lytics.meshle.com; no data goes to an outside analytics company.
- Page statistics: the page, the referring page, browser, operating system, device type, screen size, language and the country derived from your IP address. Umami sets no cookies, does not store your IP address and does not link visits to your account. In the Academy it also records your role (for example partner), but not your name or email address.
- Session recordings and heatmaps: page content, mouse movements, clicks and scrolling. What you type into fields is masked, so passwords and form entries are not recorded. Recordings can show other content displayed on the page, such as your name. They are not linked to your account.
- How you found us: the portal remembers campaign tags in your browser for up to 30 days (section 4).
We use this only to understand which parts of the portal and the Academy are used, where they are hard to use, and how people find us. Legal basis: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can give or withdraw it at any time under "Privacy settings" at the bottom of every page. Withdrawing does not affect processing that took place before.
11. Server logs and security
When you open the portal or the Academy, our servers log the IP address, time, requested address, status and browser. For the Academy, the sign-in gateway also logs your email address. We use these logs to keep the services running, to detect attacks and to fix errors (Art. 6(1)(f) GDPR). Logs are deleted after at most 30 days unless an incident has to be investigated.
12. Who receives your data
- MESHLE staff who need it for their work.
- Other users of your company, as far as your role shares content with them, for example helpdesk tickets within a manufacturer (section 6).
- Service providers who work for us under a data processing agreement (Art. 28 GDPR) and only on our instructions: our hosting provider, which runs our servers in Germany, and our email service provider, which delivers and stores our emails.
- Authorities, if we are legally obliged to disclose data.
We do not sell your data and do not pass it to third parties for their own purposes. Our service providers process data within the EU/EEA. Should data be processed outside the EU/EEA, we ensure an adequate level of protection, for example through an adequacy decision of the European Commission or standard contractual clauses (Art. 44 ff. GDPR).
13. How long we keep data
- Account data, activity, wishlist, inquiries and helpdesk tickets: for as long as your account exists, and deleted with it. Inquiries and other business correspondence, including copies in our email system, are kept for up to 6 years where commercial law requires it (§ 257 HGB, § 147 AO).
- Registrations that were declined or never confirmed: deleted once they are no longer needed, at the latest after 6 months.
- Session recordings and heatmaps: at most 3 months.
- Server logs: at most 30 days.
- Your acceptance of the terms and your choice about product news: for as long as your account exists.
14. Your rights
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or its processing restricted (Art. 18), and to receive it in a portable format (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3)). Write to info@meshle.com.
You also have the right to lodge a complaint with a data protection authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.
15. Your right to object (Art. 21 GDPR)
Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. We will then stop, unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves legal claims.
You can object to direct marketing, including product news, at any time and without giving reasons. We will then stop using your data for it.
An informal message to info@meshle.com is enough.
16. Changes
We update this notice when our services or the law change. The current version is always available at products.meshle.com/privacy.