Privacy Policy

Controller

The organisation acting as data controller will be published before public launch. During Early Access, contact Merqone through the signed-in feedback form.

Contact: the in-app feedback form after you sign in.

Categories of personal data

• Account data: name, email, authentication identifiers.
• Buyer and supplier company contact data.
• Procurement data: RFQs, product parts, offers, awards, orders.
• Support and feedback messages, including the page you were on.
• Security logs needed to operate sign-in and access control.

Purposes and lawful bases

We process data to create accounts, run concierge sourcing, review RFQs and offers, prevent abuse, and improve Early Access. The usual lawful bases are contract performance, legitimate interests in operating a B2B marketplace, and consent where you accept these terms at signup.

Recipients

Hosting, authentication, and email processors act on Merqone's instructions. Buyers do not see supplier identities before award. Suppliers see only the RFQs they are invited to.

Retention

Exact retention periods have not been adopted as a formal policy yet. Data is kept only as long as needed to operate Early Access, complete a procurement, or meet legal obligations, then deleted or anonymised.

Your rights

You may request access, rectification, erasure, restriction, or portability, and you may object to processing based on legitimate interests. You may also lodge a complaint with the Office of the Data Protection Ombudsman in Finland or another competent supervisory authority.