Privacy Policy

Last updated: 10 September 2026

1. Controller

Loomitech GmbH
Zimmermanngasse 8
1090 Vienna, Austria
Email: hello@mergeport.com

2. Website delivery and hosting

This website is delivered using AWS Amplify Hosting. When a page is requested, technically necessary connection data is processed. This may include the IP address, time of access, requested URL, referrer, and browser and device information.

This processing is necessary to deliver the website, maintain its stability and security, and investigate technical errors. The legal basis is our legitimate interest under Article 6(1)(f) GDPR. We do not use this data to create user profiles or for marketing analytics. Technical log data is retained only for as long as necessary for operation, security, and troubleshooting, or where statutory retention obligations apply.

The provider is Amazon Web Services (AWS). Information about data protection in AWS Amplify is available in the AWS documentation and the AWS Privacy Notice.

3. Cookies, analytics, and embedded services

We currently do not use web analytics, advertising pixels, marketing cookies, or embedded third-party chat.

We use Cloudflare Turnstile to protect the newsletter and contact forms from automated abuse. When the security check loads, Cloudflare processes technical signals such as the IP address, TLS fingerprint, user-agent, site key and origin to distinguish humans from bots. This processing protects the form and is based on our legitimate interest under Article 6(1)(f) GDPR. Further information is available in Cloudflare's Turnstile Privacy Notice.

4. Contacting us

If you contact us using the contact form, by email or by phone, we process the information you provide to answer your request and manage the related communication. Depending on the subject of the request, the legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual steps, or our legitimate interest in handling business enquiries under Article 6(1)(f) GDPR. We delete the information when it is no longer required for the request, unless statutory retention obligations apply.

For contact form inquiries, we transfer your name, company, email address, selected audience and language, acknowledgement of the privacy notice, and optional newsletter interest through Make to our CRM Attio. We store the inquiry there with its receipt time and technical submission ID. Make validates the Turnstile token server-side and maintains a technical processing register to identify duplicate submissions and uncertain processing steps. The token is not stored in Attio. Recording newsletter interest in the contact form does not by itself activate a subscription.

5. Newsletter

When you subscribe to MERGEPORT Infrastructure Updates, we process your email address, selected language, optional role, technical sign-up source, and consent and confirmation status. The legal basis for registration and delivery is your consent under Article 6(1)(a) GDPR.

We use Brevo for registration, Double Opt-in, proof of consent, and delivery. After submission, you receive a confirmation email; the newsletter becomes active only after you open the confirmation link. Brevo may retain the subscription time and form ID as proof of consent. After confirmation, we automatically transfer the email address, preferences, sign-up source, newsletter status, timestamps, and Brevo contact ID through Make to our CRM Attio. Brevo remains authoritative for delivery eligibility and unsubscribing.

You may withdraw your consent at any time with effect for the future using the unsubscribe link in every newsletter email or by contacting hello@mergeport.com. We retain the data for the duration of the active subscription and afterwards only where necessary to demonstrate consent, process the withdrawal, or comply with legal obligations. Further information is available in Brevo's Privacy Policy.

6. External links

This website contains links to external services, including appointment booking, documentation, the MERGEPORT Controller, and the support portal. A connection to the respective provider is established only after you open such a link. The provider's own privacy information applies to processing on that service.

7. Your rights

Subject to the applicable legal requirements, you have rights including information, access, rectification, erasure, restriction of processing, data portability, and objection. You may withdraw consent at any time with effect for the future. To exercise your rights, contact us at hello@mergeport.com.

You also have the right to lodge a complaint with a data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna.

8. Changes

We update this Privacy Policy when the website, the services used, or legal requirements change.