Merzio

Privacy Policy

Effective from: 1 May 2026

1. Data controller

The controller of personal data is Brutuscore s. r. o., registered office Lermontovova 911/3, 811 05 Bratislava – mestská časť Staré Mesto, Slovak Republic, ID No.: 57114129, Tax ID: 2122585311, VAT ID: SK2122585311 (“Merzio” or “we”).

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (the “GDPR Regulation”).

If you have any questions about the processing of personal data, you can contact us at [email protected].

2. What personal data we process and for what purposes

2.1. Registration and account management

When registering and using the Merzio platform at app.merzio.tech we process the following personal data:

  • contact details: e-mail address, first and last name,
  • billing details: company name, registered address, ID No., Tax ID, VAT ID,
  • access credentials: e-mail, hashed password,
  • technical data: IP address, device and browser information, login records.

Purpose and legal basis: Processing is necessary for the conclusion and performance of the contract (Art. 6(1)(b) GDPR) and for compliance with statutory obligations (Art. 6(1)(c) GDPR).

Retention period: For the duration of the contractual relationship and subsequently for 10 years from the last provision of the service, in accordance with tax and accounting obligations.

2.2. Payments

Payments for the service are processed via the Creem payment gateway (Armitage Labs OU, Telliskivi Street 57b/1, Tallinn 10412, Estonia). Merzio does not come into direct contact with payment card data — these are processed exclusively by Creem.

2.3. E-shop operation

As part of providing the service, Merzio processes technical and operational data related to the User's e-shop — for example logs, availability, load and error records.

Purpose and legal basis: Legitimate interest of Merzio in ensuring functionality, security and stability of the platform (Art. 6(1)(f) GDPR).

Retention period: Operational logs are retained for 90 days.

2.4. Communication and support

When you communicate with our support (e-mail, contact form), we process the content of your messages and your contact details.

Retention period: For the duration of the contractual relationship and 3 years after its termination.

2.5. Analytics and service improvement

On www.merzio.tech and app.merzio.tech we use web analytics tools (Google Analytics via Google Tag Manager) based on your consent.

2.6. Marketing and informational communication (newsletter)

As part of the Service we send informational e-mails about news, new features, planned maintenance and other operational announcements. If you sign up for the newsletter via our website, we also send commercial and marketing communications. For this we use the Ecomail service operated by ECOMAIL.CZ, s.r.o., Na příkopě 388/1, Staré Město, 110 00 Prague, Czech Republic, ID No.: 02762943.

Unsubscribe: You can unsubscribe at any time, free of charge, by clicking the “Unsubscribe” link in the footer of any e-mail, or by sending a request to [email protected].

3. Recipients of personal data

We share your personal data only with trusted partners who help us provide the service:

  • Creem (Armitage Labs OU) — payment processing and subscription management,
  • ECOMAIL.CZ, s.r.o. — sending informational and marketing e-mails,
  • Hosting / cloud infrastructure provider — server operation and data storage,
  • Google LLC — web analytics (Google Analytics) based on your consent.

4. Personal data of e-shop customers (Merzio as processor)

If you operate an e-shop via the Merzio platform, you are the controller of your customers' personal data. Merzio acts as a processor in this respect and processes such data exclusively on your instructions and to the extent necessary to provide the service.

5. Your rights

You have the following rights in connection with the processing of your personal data:

  • Right of access — to obtain confirmation as to whether we process your personal data, and a copy of such data,
  • Right to rectification — to request correction of inaccurate or completion of incomplete data,
  • Right to erasure,
  • Right to restriction of processing,
  • Right to data portability,
  • Right to object to processing based on legitimate interest,
  • Right to withdraw consent, at any time, without affecting the lawfulness of processing before withdrawal.

Send requests regarding your rights to [email protected]. We will respond without undue delay, at the latest within 30 days.

You also have the right to lodge a complaint with the supervisory authority — the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).

6. Cookies

On our website we use necessary cookies (required for the site to function) and analytical cookies (based on your consent). You can withdraw or change your consent at any time via the cookie settings in the page footer.

7. Security of personal data

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, modification, disclosure or destruction. Communication between your device and the Merzio platform is secured by HTTPS/TLS. Access passwords are stored exclusively in hashed form.

8. Changes to this policy

Merzio reserves the right to update this Privacy Policy at any time. We will inform you of material changes by e-mail or via a notice in the portal at app.merzio.tech. The current version is always available at www.merzio.tech/en/privacy/.

This Policy becomes effective on 1 May 2026.