Privacy Policy and Terms

Company Information

MergeLabs GmbH

  • CEO: Ali Taghavi
  • Address: Am Langen Sand 13, 68723 Schwetzingen, Baden-Wurttemberg, Deutschland
  • Contact: [email protected]

Data Collection Methods

MergeLabs collects personal information through three primary channels:

  1. Voluntary sharing during sign-up and purchase processes
  2. Cookie usage on the website
  3. Information based on service usage patterns

Web Form Data Collection

Basic Information Collected

  • First Name
  • Last Name
  • Email address

Invoice Request Requirements

When requesting invoices, the company collects additional mandatory information:

  • Company name (if applicable)
  • Full address (Street & No., Zip, City, Country)
  • VAT-ID (if applicable)

Legal Basis: Article 6 GDPR

Data retention follows statutory requirements or continues until MergeLabs Services cease operations.

Data Processing Tools

Internal Systems

  • In-house IT-system for purchase requests
  • Google Sheets, Docs, and Forms for activity tracking and preferences

Mobile Applications (iOS/Android)

The MergeLabs app collects:

  • Mobile date/time (logged per hour)
  • Device platform (iOS/Android)
  • Device language
  • Device type, model, and version
  • Camera access for QR-code scanning

No additional information is collected.

Email Communications

Direct Email

  • Used only for intended communication initiated by users
  • Retained for up to 18 months in email accounts
  • Transferred to Google Vault after 18 months for legal archival
  • Sensitive data (phone numbers, bank details) deleted immediately after use

Security Measures

  • End-to-end encryption implemented
  • Two-factor authentication on email accounts
  • Uses Google Workspace Gmail service (Euro-zone data centers)
  • Data Processing Agreement with Google Workspace in place

Service Notification Emails

Distinguished from newsletter communications. Notifications relate to specific purchased services.

Legal Basis: Article 6 GDPR

Users may revoke consent per Article 7(3) GDPR, though discontinuing these emails also discontinues associated services.

Service Providers:

  • Gmail (Google Workspace)
  • SparkPost (US and EU-hosted email delivery)

Newsletter Services

Provider

Mailchimp (Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA)

Double Opt-In Process

After registration, confirmation email required to prevent unauthorized registrations. Registration time and anonymized IP address recorded per Article 7(1) GDPR.

Required Information

  • First name
  • Email address

Tracking and Analytics

Mailchimp uses tracking systems including web beacons to identify opened emails and clicked links, enabling service improvement based on user engagement.

Data Management

Users can update preferences or unsubscribe via links at newsletter bottom. MailChimp's web pages use cookies; no MergeLabs control over this collection.

Legal Basis: Article 6 GDPR

Data Retention

  • Inactive users deleted based on lack of newsletter engagement
  • Email addresses retained while offering value to users
  • Users breaching code of conduct may be removed

Revocation Rights

  • Revoke consent per Article 7(3) GDPR
  • Object to future processing per Article 21 GDPR
  • Request data deletion: [email protected]

Payment Processing

Third-party payment processors handle transactions with no direct MergeLabs access to account or credit card details.

Security Standards

PCI-DSS compliance managed by PCI Security Standards Council (Visa, Mastercard, American Express, Discover).

Information Shared

  • Service description
  • Payment amount
  • Payment type (one-time or recurring)

Processor Data Collection

Payment processors collect IP addresses, browser information, and legitimacy verification data. Credit checks may be performed.

Legal Basis: Article 6(1)(b) GDPR

Accepted Payment Methods

  • PayPal (Europe S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg)
  • Stripe (Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland)
  • TransferWise (Limited, Shoreditch High Street London E1 6JJ United Kingdom)
  • Klarna (AB, Sveavagen 46, 111 34 Stockholm, Sweden)
  • SOFORT (GmbH, Theresienhöhe 12, 80339 Munich, Germany)

External Links

The website contains links to external sites not controlled by MergeLabs. The company's privacy statement does not apply to these sites. Users bear sole responsibility for interactions with external websites.

Video Call Services

Primary Service

Google Meet (part of Google Workspace)

"Google Meet adheres to the same robust privacy commitments and data protections as the rest of Google Cloud's enterprise services."

Alternative Services

Occasionally uses Jitsi Meet or Zoom, with recommendations to exercise caution when sharing personal information.

Resources:

Internal Communications

Platforms Used

  • Slack
  • Google Workspace Services

Customer data communicated internally to provide optimal service experience but remains within MergeLabs boundaries. No direct customer data sharing with Slack or Google Workspace.

Privacy Policies: