Privacy policy
2026-09-22
MERITY INCOMING S.R.L.Via Monte Senario 86, Sc. B, 00141 Roma (RM), Italia
P. IVA: IT10642631005 · Codice fiscale: 10642631005
REA RM-1246952 · Licenza: 8085/09
a.sale@merityincoming.com
+39 06 8181573
Data controller and contact
The company identified below is the controller for contact form data. For questions or to exercise your rights, email a.sale@merityincoming.com.
Data, purposes and legal bases
We collect your name, email and message directly from you to answer your request and prepare the services you ask for. These fields are required to process the form. The legal basis is taking steps at your request before entering into a contract (GDPR Article 6(1)(b)); other enquiries rely on our legitimate interest in responding to correspondence (Article 6(1)(f)). The checkbox acknowledges this notice and does not authorise marketing. Please avoid sensitive data or information about other people.
Operation and security
The host receives technical connection data, including IP addresses and request information. To prevent abuse, the server uses keyed hashes of IP and email in temporary counters removed after expiry, within 25 hours at most. This relies on our legitimate interest in securing the service. The notice acknowledgment date and version and a request identifier are saved with the message. We do not carry out automated decisions with legal effects or advertising profiling.
Recipients and providers
Authorised agency staff and technical service providers may access data as needed for their duties. Vercel hosts the site, Supabase stores enquiries and Resend sends notification and receipt emails. Messages are forwarded to the agency mailbox. This form does not subscribe you to a newsletter or trigger automated marketing.
Retention
Enquiries and correspondence are kept for as long as needed to handle and follow up the request. If services are booked, relevant data becomes part of the client file and is kept according to contractual, accounting and legal defence requirements. Once follow-up ends, unnecessary data is deleted; records needed for a legal obligation or dispute are archived with restricted access for the relevant period. This also covers mailbox copies and backups according to their rotation cycle.
International processing
The Supabase database is hosted in Ireland (AWS eu-west-1). Vercel and Resend are US providers; Supabase and technical subprocessors may also process data outside the European Economic Area, including for email delivery, support and operations. Their data processing agreements provide transfer safeguards, including European Commission standard contractual clauses where required. The agreements and subprocessor information are available through the links below. Contact the agency for details and copies of safeguards applicable to your enquiry. The database location does not mean that all data stays in the EU.
Your rights
You may request access, correction, erasure or restriction of processing. Depending on the legal basis and applicable conditions, you may also have data portability rights and the right to object to processing based on legitimate interests. Optional consent can be withdrawn at any time without affecting earlier processing. Contact a.sale@merityincoming.com. We normally respond within one month, subject to a justified extension as permitted by the GDPR. You can complain to the Italian Garante (garanteprivacy.it), the French CNIL (cnil.fr), or the supervisory authority in your EU country of residence.