Privacy notice

We're glad you're here! We're pleased you're visiting our website and assure you that we take protection of your privacy very seriously. We process your data exclusively in accordance with legal regulations (GDPR) . It's very important to us to inform you in detail about what happens to your data when you visit our site.
We fully respect your privacy; therefore, we want to give you information on how your personal data are being collected, used, shared, and transferred (“processed”).
This MERCURTRADE Privacy Notice is for the visitors of our website(s), the users of our products and/or our services, the subscribers to our newsletters and other representatives of our business partners and customers.

Who are we and how to contact us?

When we use “we” or “our” in this Privacy Notice, it refers to MERCURTRADE HOLDING k.s., a company registered in Slovakia, and its subsidiaries

  • MERCURTRADE GmbH (Wien)
  • MERCURTRADE GmbH (München)
  • MERCURTRADE s.r.o. (Bratislava / Pezinok)
  • MERCURTRADE Shanghai Trading Co., Ltd. (Shanghai),

each separately as the data controller.

When we process your personal data for our own purposes and by the means determined by us, we are in the position of data controller according to the GDPR.

If you have any questions related to the processing of your personal data, you can contact our data protection officer at privacy(at)mercurtrade.com.

Collection, processing, and use of personal data

You can visit our website at any time without providing any personal information. We will then only store access data without personal references, such as the name of your internet service provider, the page from which you visited us, or the name of a requested file. We use this data exclusively internally and only to improve our services. It will never be possible to identify you personally.

If you contact us via the contact form on our website, we automatically save your IP address, the date, and time of contact. This is a protective measure for you in case a third party misuses your data and uses it to register with us without your knowledge. We will, of course, not share your data with third parties. Nor do we compare the data collected in this way with other data from you that may be requested by other components of our website.

We never request personal information online unless you voluntarily provide it when contacting us via an online form or email. This information includes your name, company name, email address, and telephone number. Without your express consent, we will use this information exclusively to fulfill and process your request, including any other questions you may have. We collect, process, and store your personal data exclusively in accordance with the provisions of European data protection law.

So, in general personal information that we collect from you may include:

  • Contact Information that allows us to communicate with you, such as your name, job title, telephone numbers, email address (or other address) that allow us to send you messages and information.
  • Information that helps us do business with you, such as the types of products and services that may interest you, product preferences, languages, marketing preferences and demographic data.
  • Security and Compliance Information that helps us to secure our interests, including information for conflict checks, fraud prevention and internal verification, as well as information necessary for the security of our premises.

What are the purposes and legal bases for processing your personal data?

Performance of contract
We use the performance of the contract as a legal base for processing of personal data in order to enter into contractual arrangement(s) with you. Without processing your personal data, we would not be able to provide you with our services and/or products you ordered.

Legal obligation
We also process your personal data when it is necessary to comply with the legal obligation(s) to which we are subject.

Purposes of processing
Our purposes of processing your personal data are:

  • to provide you with our products and/or our services
  • to communicate you our latest updates and news via our newsletters
  • to deliver you our products and/or services you ordered

 

Consent
When you subscribe to our newsletter without using any of our products and/or services, we use consent as a legal base for this type of processing your personal data.

Legitimate interests
We use our legitimate interest as a legal base when we process your personal data for sending you our newsletters in cases where you use some of our products and/or services and you are either a representative of our business partner or customer. It is our legitimate interest that we keep you updated on what we are currently working on and to regularly inform you about updates or our products and/or services.

We also use legitimate interest as the legal base when we are collecting your personal data via CCTV when you are entering and using our office premises.

How do we collect and process your personal data?

Receiving our newsletters
We use your e-mail to keep you updated about what is new in our company and also about all the new products and/or services we are working on. We add you to our newsletters list either when you sign up to receive the newsletters or when we enter into contractual arrangement with you as our partner or customer. Please note that you can unsubscribe at any time.

Contracts conclusion
The personal data you provide in order to enter into any contract with us are necessary to validly conclude the contract with you or the company on behalf of which you act.

Cookies
Our website collects several types of cookies for different purposes and use different legal basis for collecting them. Further information can be found at https://www.mercurtrade.com/cookie-notice/

When and how do we share your personal data?

As a MERCURTRADE group, we work closely within companies in the group, therefore your personal data may be shared between MERCURTRADE group entities if necessary for the purposes of:

  • compliance with our various legal and regulatory obligations described above;
  • to fulfil our legitimate interests, which are:
    • to manage, prevent and detect fraud;
    • to carry out statistical studies and develop predictive and descriptive models for business purposes, security, compliance, risk management and anti-fraud purposes;
    • to improve the reliability of certain information about you held by other entities in the group;
    • to offer you access to all the group's products and services that best meet your needs and wishes;
    • to adapt the content and prices of products and services;

Your personal data may also be shared between MERCURTRADE group companies to carry out statistical studies and develop predictive and descriptive models for business purposes, security, compliance, risk management and anti-fraud purposes.

To fulfill some of the purposes described in this Privacy Notice, we may share your personal data with:

  • processors who perform services for us (e.g. IT services, logistics, printing services, telecommunications, debt collection, consulting and distribution and marketing);
  • banking and business partners, independent agents, intermediaries or brokers, financial institutions, counterparties with whom we have a relationship, if such transfer is necessary for us to provide you with services and products or to perform our contractual obligations or transactions;
  • local or foreign financial, tax, administrative, criminal or judicial authorities, arbitrators or intermediaries, public authorities or institutions to which we or any member of the MERCURTRADE group are obliged to provide information based on:
    • their request;
    • our defense (legal proceedings or administrative proceedings);
    • compliance with a regulation or recommendation issued by a competent authority that applies to us or any member of the MERCURTRADE group;
  • to certain regulated professions such as lawyers, notaries or auditors, if necessary in certain circumstances (litigation, audit, etc.), and to our insurance companies or to an actual or proposed purchaser of the MERCURTRADE group companies.

For how long do we keep your personal data?

When we process your personal data for the purposes of sending you our newsletters, we will keep you on our newsletter list for 4 years after you submitted your contact details, or we signed a contract with you/company you are representing if you do not unsubscribe before the end of this period.

Contracts, including personal data, are stored for 5 years after contract fulfilment in case we need to pursue our legal claims.

In order to our accounting and tax obligations according to applicable law we keep your personal data for 10 years as of the issuance of tax/accounting documents.

As regards personal data collected via CCTV (in our production and warehouse facilities), those are being deleted after 30 days as of the recording day.

Do we transfer your personal data outside the EU?

In the event of an international transfer from the European Economic Area (EEA) to a country outside the EEA, your personal data may be transferred. If the European Commission has recognized a country outside the EEA as providing an adequate level of data protection, your personal data may be transferred on that basis.

In the event of a transfer to countries outside the EEA where the European Commission has not recognized the level of protection as adequate, we will either rely on an exception applicable to the situation (e.g. where the transfer is necessary for the performance of our contract with you, such as for an international payment), or we will implement one of the following safeguards to ensure the protection of your personal data:

  • Standard contractual clauses approved by the European Commission.
  • Binding corporate rules.

If you would like to obtain more details of where they are available, you may make a written request and set out at privacy(at)mercurtrade.com.

What rights do you have?

Right of access
You have a right to obtain confirmation whether we process your personal data and a right to access your personal data.

Right to rectification
You have a right to rectification if we process inaccurate or otherwise incomplete personal data concerning you.

Right to erasure (right to be forgotten)
You have a right to erase your personal data if the conditions set out in the GDPR are met.

Right to restriction
You have a right to obtain restriction of processing of your personal data if the conditions set out in the GDPR are met.

Right to object
When we process your personal data based on our legitimate interest, you have a right to object to this processing. You can exercise this right with regards to receiving our emails and newsletters by simply clicking on the unsubscribe link at the footer of the e-mail, or by sending an e-mail to privacy(at)mercurtrade.com.

Right to data portability
Under certain conditions stipulated by GDPR you have a right to transmit your personal data to another controller

Right to withdraw consent
When the processing is based on your consent, you have a right to withdraw it at any time. This, however, does not affect the lawfulness of your personal data processing before your withdrawal.

If you wish to exercise any of the above-mentioned rights, you can contact us at privacy(at)mercurtrade.com.

Right to lodge a complaint
You have the right to lodge a complaint to the supervisory authority, which is in Slovakia the Office for Personal Data Protection of the Slovak Republic.

Adopted on 25 May 2018, latest update as of April 2025.