Legal

Privacy Policy

This policy explains what personal data we process when you visit this website or get in touch with us, on what legal basis, and what rights you have. This website is a purely informational site: it has no contact form, no user accounts and no tracking.

Controller

The controller responsible for data processing on this website is:

Merqis GmbH
Unter den Linden 26–30
10117 Berlin
Germany
info@merqis-partners.com

Data protection officer

We have not appointed a data protection officer, as we do not meet the thresholds of Art. 37 GDPR or § 38 BDSG. Please address any data protection enquiries to info@merqis-partners.com.

Hosting and server log files

This website is hosted as a static site on Microsoft Azure Static Web Apps (Microsoft Ireland Operations Ltd.) in the EU "West Europe" region. When the site is accessed, the hosting provider processes technically necessary data in server log files — in particular IP address, date and time of the request, the page requested, referrer, browser and operating system.

This processing is necessary to deliver the website securely and reliably, and to detect and defend against attacks. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. This data is not merged with other data sources and is not used to identify you personally.

TLS encryption

This website is delivered exclusively over an encrypted HTTPS connection. Requests over unencrypted HTTP are redirected to HTTPS automatically.

Fonts and external content

The fonts used on this website are served from our own server. There is no connection to Google Fonts or any other external provider. This website loads no external scripts, no content delivery networks, no maps, no videos and no social media plug-ins, so no data is transmitted to third parties when you visit it.

Cookies, analytics and tracking

This website sets no cookies and uses no analytics, tracking, advertising or profiling services. Your visit is not statistically evaluated.

Local storage of your language choice

To remember whether you prefer the English or German version, we store a single value ("merqis-lang") in your browser's local storage. This value contains no identifier and is never transmitted to us or to any third party — it stays on your device. Because it is strictly necessary to provide the language function you requested, it does not require consent under § 25(2)(2) TDDDG. You can delete it at any time by clearing your browser's site data.

Contacting us by e-mail

If you contact us by e-mail, we process the data you provide — typically your name, e-mail address, company and the content of your message — in order to handle your enquiry. Where your enquiry concerns a contract or a potential engagement, the legal basis is Art. 6(1)(b) GDPR; otherwise it is our legitimate interest in responding to enquiries under Art. 6(1)(f) GDPR.

Business development and business contacts

As a consultancy, we store the contact details of clients, prospective clients and business partners — typically name, role, company and business contact details — in order to maintain the business relationship and to contact them about services relevant to them. The legal basis is our legitimate interest in business development under Art. 6(1)(f) GDPR. You may object to this processing at any time under Art. 21 GDPR, after which we will stop contacting you.

Applications

If you send us an application by e-mail, we process your application data solely to assess your suitability and to conduct the application procedure. The legal basis is § 26(1) BDSG together with Art. 6(1)(b) GDPR. If we do not offer you a position, we delete your application data no later than six months after the procedure ends, unless you have consented to us keeping it longer.

Newsletter

If you subscribe to a newsletter, we process your e-mail address to send it. The subscription is confirmed by a double opt-in procedure, and the legal basis is your consent under Art. 6(1)(a) GDPR together with § 7(2)(2) UWG. You may withdraw your consent at any time with effect for the future, either through the unsubscribe link in every newsletter or by e-mail to us. Withdrawal does not affect the lawfulness of processing carried out before it.

Recipients and processors

We do not sell your data and do not pass it on for advertising purposes. We do use carefully selected service providers who process data on our behalf under a data processing agreement pursuant to Art. 28 GDPR:

• Microsoft — website hosting (Azure Static Web Apps) and business e-mail (Microsoft 365)
• IONOS — domain administration and DNS

Transfers to third countries

Our website hosting and mailboxes are located in the European Union. However, Microsoft is part of a group with its parent company in the USA, so access from a third country cannot be entirely ruled out during support or maintenance. Such transfers are safeguarded by the EU–US Data Privacy Framework, under which Microsoft is certified, and additionally by EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

Retention periods

We store personal data only for as long as is necessary for the purposes described above. Server log files are deleted or anonymised after a short period. Correspondence is deleted once it is no longer needed and no retention obligation applies. Statutory retention obligations under commercial and tax law — in particular § 257 HGB and § 147 AO, six and ten years respectively — take precedence and can require longer storage.

No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

Your rights

In relation to the data we hold about you, you have the following rights:

• Access to your data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interest (Art. 21 GDPR)
• Withdrawal of consent you have given, at any time and with effect for the future (Art. 7(3) GDPR)

To exercise any of these rights, an e-mail to info@merqis-partners.com is sufficient.

Right to lodge a complaint

If you believe we are processing your data unlawfully, you may lodge a complaint with a supervisory authority under Art. 77 GDPR. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), datenschutz-berlin.de. You may also contact the supervisory authority for your own place of residence.

Status and changes

We will amend this privacy policy if we change the website or the way we process data — for example if we add a contact form or analytics. The version published here always applies.

Last updated: August 2026