Privacy Policy

1. Data controller

Mercury LT, MB, company code 307104481, VAT code LT100019682110, registered office S. Žukausko g. 26-43, LT-08239 Vilnius, Lithuania (data is kept in the Register of Legal Entities of the Republic of Lithuania (State Enterprise Centre of Registers)).

Contact for any privacy matter: info@mercury.lt.

2. What data we process

When you send an enquiry through the contact form on mercury.lt we receive:

• your name, email address, subject and message (required);
• organisation and phone number (optional);
• the time of submission, your IP address and the country derived from it, used to protect the form against abuse.

We do not ask for, and ask you not to send, special categories of personal data.

3. Purposes and legal basis

• Answering your enquiry and, where relevant, preparing an offer – your consent given in the form and steps taken at your request before entering into a contract (GDPR Art. 6(1)(a) and (b)).
• Protecting the website and the form against spam and abuse – our legitimate interest (GDPR Art. 6(1)(f)).

We do not use your data for newsletters or marketing and do not make automated decisions about you.

4. Recipients

Your data is processed on our behalf by these service providers (data processors):

• Cloudflare, Inc. – website hosting, form processing and bot protection (Turnstile);
• Microsoft Ireland Operations Ltd. (Microsoft 365) – delivery and storage of the enquiry email.

We do not sell your data or pass it to other third parties, unless required by law.

5. Transfers outside the EU/EEA

Cloudflare and Microsoft may process data outside the EU/EEA. Such transfers rely on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

6. Retention

Enquiries and related correspondence are kept for 24 months after our last correspondence, unless a longer period is required by law or needed for an ongoing contract, and are then deleted.

7. Cookies and analytics

mercury.lt does not use advertising or tracking cookies. We use Cloudflare Web Analytics, which counts visits without cookies and without identifying individual visitors. Cloudflare Turnstile, which protects the contact form, may process technical data from your browser solely to tell people and bots apart.

8. Your rights

Under the GDPR you have the right to:

• access your data and receive a copy;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to processing;
• data portability;
• withdraw your consent at any time (this does not affect processing carried out before the withdrawal).

To exercise these rights, write to info@mercury.lt. We will reply within one month.

You may also lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija), vdai.lrv.lt.

9. Changes

We may update this policy. The current version is always published on this page with its date.