Privacy

1. Controller

Mercurios.ai UG (haftungsbeschränkt) Birkenweg 48 30657 Hannover Germany

Represented by: Julius Rechenbach, Maximilian Pohl Email: hello@mercurios.ai

2. In brief

This website sets no cookies and uses no analytics, tracking or advertising services. We serve fonts, scripts, images and the 3D model from our own server; no data is passed to third parties when you visit.

We only process personal data to deliver and secure the website (section 3), to handle your request via the waiting list (section 4) and to reply to emails (section 5).

3. Visiting the website and hosting

The website runs on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in a data centre in Nuremberg, Germany. Hetzner processes the data on our behalf and on our instructions (Art. 28 GDPR).

When you visit, your browser necessarily sends data to our server, which it has to process to deliver the page:

• IP address
• date and time of the request
• requested address and amount of data transferred
• browser and operating system (user agent) and, where applicable, the previously visited page (referrer)

The purpose is to deliver the website, keep it stable and detect and prevent attacks and misuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and error-free operation of the website. Where this data ends up in server logs, we use it solely for these purposes, do not combine it with other data and delete it as soon as it is no longer needed for them.

The connection is encrypted with TLS (shown by “https://” in the address bar).

4. Waiting list and contact form

If you join the waiting list or write to us via the form, we process:

• email address and company (required)
• name, merchandise management system and, where applicable, your message (optional)
• the language of the page (German or English), so we can reply in your language

The purpose is to handle your request, add you to the waiting list and contact you personally about Mercurios, for example when we take on new stores. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to a possible contract) and Art. 6(1)(f) GDPR; our legitimate interest is answering business enquiries.

Your details are transferred over an encrypted connection into our own customer management system (the Mercurios platform). It also runs on our servers at Hetzner in Germany; the data is not passed on to third parties.

We delete your details once your request has been fully handled and no contract is concluded, at the latest when you ask us to delete them or object to the processing. If a business relationship arises, we keep business correspondence for the statutory periods (§ 257 HGB, § 147 AO: up to six or ten years).

We need your email address and company to assign and answer your request; without them we cannot add you to the waiting list. You are not legally or contractually obliged to provide them.

To protect against mass submissions, the server keeps your IP address in memory for at most ten minutes when you submit the form, to limit repeated requests. It is not stored and not combined with your details (Art. 6(1)(f) GDPR; legitimate interest: protection against misuse).

5. Contact by email

For email we use Google Workspace from Google Cloud EMEA Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a processor (Art. 28 GDPR). If you write to us, we process your email address, your name and the content of your message in order to answer it (Art. 6(1)(b) or (f) GDPR). Section 4 applies accordingly to how long we keep it.

A transfer to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR) and additionally on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

6. Storage in your browser: light or dark design

The website follows the light/dark setting of your operating system; this happens entirely in your browser. If you choose a design yourself using the switch in the navigation, we store that choice in your browser's local storage (localStorage, entry “theme” with the value “light” or “dark”). The entry never leaves your device and is not sent to us. Nothing is stored unless you make a choice.

The legal basis is § 25(2) no. 2 TDDDG: storing it is strictly necessary to provide the display you have expressly chosen. You can delete the entry at any time in your browser settings (clear site data).

7. Recipients and third countries

The only recipients of your data are our processors Hetzner (hosting) and Google (email), to the extent described. Beyond that we only pass on data where we are legally obliged to. A transfer to countries outside the EU is only possible as described in section 5.

8. Your rights

You have the right to

• access the data we hold about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to the processing (Art. 21 GDPR, see section 9)

A short message to hello@mercurios.ai is enough. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz Niedersachsen Prinzenstraße 5 30159 Hannover Telefon: +49 511 120 45 00 E-Mail: poststelle@lfd.niedersachsen.de https://lfd.niedersachsen.de

9. Right to object under Art. 21 GDPR

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

If you no longer want to be contacted about Mercurios, a short email is enough; we will remove you from the waiting list and delete your details.

10. Changes

We update this privacy policy when the website or the law changes. The version published here applies.

This English version is provided for convenience; the German version is legally binding.