1. Data Controller
The data controller responsible for processing your personal data under the EU General Data Protection Regulation (GDPR) is:
MEHErix Oy
Orvokkitie 3
01300 Vantaa, Finland
Business ID: 000000
Email: [email protected]
2. Scope of this Policy
This policy applies to:
- our main website meherix.com and related landing pages, and
- our contact forms, newsletter sign-ups, demo requests and other interactions via this website.
Our individual products (for example Ling–School, grocescan and mixx) may have separate, product-specific privacy policies. Where a product policy differs from this document, the product policy will apply for that product.
3. Personal Data We Collect
3.1 Data you provide to us
We process personal data that you voluntarily provide, such as:
- Identification data: name, organisation, role or title
- Contact details: email address, phone number
- Message content: information you include in contact forms, support requests or demo enquiries
- Subscription preferences: newsletter opt-in, language preferences
3.2 Data collected automatically
When you visit our website, we may automatically collect limited technical data such as:
- IP address (abbreviated or pseudonymised where feasible)
- Device and browser information
- Approximate location (country/region)
- Pages visited and actions taken on the site
- Date, time and duration of your visit
3.3 Cookies and similar technologies
We use essential cookies to ensure the website functions correctly. With your consent, we may also use analytics cookies to understand how visitors use our site and to improve our services.
You can adjust your browser settings to block or delete cookies. Note that blocking certain cookies may affect website functionality.
4. Purposes and Legal Bases of Processing
We process your personal data for the following purposes and legal bases:
-
To respond to enquiries and provide customer support
– Data: identification, contact details, message content
– Legal basis: legitimate interests (GDPR Art. 6(1)(f)), to operate and grow our business, or contract (Art. 6(1)(b)) where your request relates to a contract with us. -
To send newsletters and marketing communications
– Data: name, email address, communication preferences
– Legal basis: consent (Art. 6(1)(a)). You can withdraw your consent at any time by clicking the unsubscribe link or contacting us. -
To improve our website and services
– Data: technical and usage data, analytics information
– Legal basis: legitimate interests (Art. 6(1)(f)), to maintain and develop our services in a secure and user-friendly way. Where required by law, analytics cookies are used only with your consent. -
To comply with legal obligations
– Data: contact and transaction-related information
– Legal basis: legal obligation (Art. 6(1)(c)), for example accounting, taxation and record-keeping requirements.
6. International Data Transfers
Our main operations are located in Finland. However, some of our service providers may process data in other countries, including outside the European Economic Area (EEA).
When personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place, such as:
- an adequacy decision by the European Commission, or
- Standard Contractual Clauses (SCCs) approved by the Commission, combined with additional technical/organizational safeguards where necessary.
7. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy or as required by law. In general:
- Contact enquiries: typically stored for up to 24 months after our last interaction.
- Newsletter subscriptions: stored until you unsubscribe or your address becomes inactive.
- Technical logs: kept for a short period (usually 12–24 months) for security, troubleshooting and analytics.
We may retain certain information longer if necessary to establish, exercise or defend legal claims or to comply with legal obligations.
8. Data Security
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures may include access controls, encryption, logging, network security and staff training.
No system can be fully secure. If we identify a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority, as required by GDPR.
9. Your Rights under GDPR
As a data subject in the EU/EEA, you have the following rights under the GDPR (subject to legal conditions and limitations):
- Right of access – to obtain confirmation whether we process your data and to receive a copy of your personal data.
- Right to rectification – to have inaccurate or incomplete data corrected.
- Right to erasure – to request deletion of your data in certain situations (“right to be forgotten”).
- Right to restriction of processing – to request that we temporarily restrict processing in certain circumstances.
- Right to data portability – to receive your data in a structured, commonly used and machine-readable format and to transmit it to another controller where technically feasible.
- Right to object – to object to processing based on our legitimate interests, including profiling. We will cease processing unless we have compelling legitimate grounds.
- Right to withdraw consent – where processing is based on consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
To exercise your rights, please contact us using the details below. We may need to verify your identity before responding.
11. Contact
If you have any questions about this Privacy Policy or how we process your personal data, please contact:
MEHErix Oy
Email: [email protected]
Address: Orvokkitie 3, 01300 Vantaa, Finland
12. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our services or in applicable law. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or a notice on our website.