Skip to content
MercurionMercurion

Legal notice

Legal notice, privacy, cookies

Company

This website belongs to Mercurion S.r.l., registered office Via Monte Falco 26, 52100 Arezzo, Italy. Tax code and VAT no. IT02515710511, REA AR-224341 (Arezzo-Siena Companies Register), share capital €10,000 fully paid up, certified email (PEC) mercurionsrl@pec.it. Mercurion is part of TPI Group.

Privacy

Privacy notice under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Last updated 1 October 2026.

Who processes your data

The data controller is Mercurion S.r.l., Via Monte Falco 26, 52100 Arezzo, Italy, VAT no. IT02515710511. For any request about your data, write to info@mercurion.io or to the certified email (PEC) mercurionsrl@pec.it.

What data, why, and for how long
Browsing

The technical data every server records when you open a page: IP address, date and time, page requested, browser type. They keep the site running and protect it from abuse.

Legal basis
The controller’s legitimate interest in the security of the site (Art. 6(1)(f) GDPR).

Retention
No longer than 30 days, unless they are needed to investigate an abuse.

Statistics

If the site counts visits, it does so in aggregate and anonymous form, without cookies and without identifying visitors: how often a page was viewed, not by whom.

Legal basis
These are not personal data.

Retention
Totals only, with no personal data.

Contact form and email

Name, company, email, your phone number if you give it, and your message: to answer you and, if you ask, to prepare a proposal.

Legal basis
Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) and legitimate interest in replying (Art. 6(1)(f)).

Retention
24 months from the last contact, if no business relationship follows. If you become a customer, for the length of the relationship and then for 10 years, as Italian civil and tax law requires (Art. 2220 of the Civil Code).

Who sees them

The controller’s authorised staff and the TPI Group companies that provide administrative and IT services to us, also appointed as processors; hosting, email and contact-management providers, appointed as processors (Art. 28 GDPR); public authorities, where the law requires it. Your data are never published or sold.

Where

Your data are processed in Italy and in the European Union. Should a provider process them outside the Union, it will do so only with the safeguards of Articles 44–49 GDPR, such as an adequacy decision or standard contractual clauses.

Do you have to provide them?

No, it is your choice. Without the data in the form, however, we cannot reply.

Your rights

You may ask to access your data, correct them, erase them, restrict their processing, receive them in a machine-readable format and object to their processing (Articles 15–22 GDPR). You may withdraw your consent at any time, without affecting what happened before. We reply within one month. You may also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

Automated decisions

We do not take decisions based solely on automated processing, and we do not profile anyone.

Changes

We update this notice whenever the processing or the law changes: the date at the top shows when it last happened.