Privacy Policy
This Privacy Policy explains how we process personal data when you visit meridion.io, use our contact or newsletter forms, book a call, or interact with our website analytics (with your consent).
Last updated: 2026-06-13
1. Data controller
Meridion
Slovakia
Email: privacy@meridion.io
2. What data we collect
- Website usage data — pages viewed, clicks, scroll depth, device/browser type, approximate location (via analytics, only with your consent).
- Session recordings — Microsoft Clarity may record interactions on pages (only with statistics cookie consent).
- Contact form — name, email, message content.
- Newsletter — email address (only if you opt in).
- Booking — data you enter in Google Calendar when scheduling a call.
3. Purposes and lawful bases
- Website operation — legitimate interest (Art. 6(1)(f) GDPR).
- Analytics and session replay — consent (Art. 6(1)(a) GDPR), via Cookiebot statistics cookies.
- Contact enquiries — legitimate interest / pre-contractual steps (Art. 6(1)(f) / (b)).
- Newsletter — consent (Art. 6(1)(a) GDPR).
4. Processors and third parties
We use the following service providers to operate this website:
| Processor | Purpose | Lawful basis | Location |
|---|---|---|---|
| Cookiebot (Usercentrics A/S) | Consent management and cookie compliance | Legitimate interest / legal obligation (ePrivacy) | EU |
| Google Tag Manager / Google Analytics 4 | Website usage analytics (only after statistics consent) | Consent | EU/US (Google Consent Mode v2) |
| Microsoft Clarity | Session heatmaps and recordings (only after statistics consent) | Consent | EU/US |
| Formspree | Processing contact and newsletter form submissions | Consent / legitimate interest (contact enquiries) | US |
| Google Calendar | Appointment scheduling embed | Consent / pre-contractual steps | EU/US |
| Cloudflare | Website hosting and security | Legitimate interest | EU/US |
5. Cookies
We use cookies and similar technologies as described in our Cookie Policy. You can change your preferences at any time via the footer link “Manage cookie preferences”.
6. Retention
Contact and newsletter data are kept as long as needed to fulfil the purpose or until you withdraw consent. Analytics data retention follows each provider’s settings (typically 14–26 months for GA4). You may request deletion at any time.
7. International transfers
Some processors (Google, Microsoft, Formspree) may process data outside the EEA. Where applicable, transfers rely on Standard Contractual Clauses or adequacy decisions.
8. Your rights
Under GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. You also have the right to lodge a complaint with your supervisory authority (in Slovakia: Úrad na ochranu osobných údajov SR).
Contact us at privacy@meridion.io to exercise your rights.