PROCESSING OF PERSONAL DATA

This page describes the methods and purposes of the processing of personal data of users (hereinafter also “users”) who browse the website: www.mecisrl.it (hereinafter also the “Site”).

This information notice is provided pursuant to Article 13 of EU Regulation 2016/679 “General Data Protection Regulation” (hereinafter “GDPR”) and the applicable Italian legislation on the protection of personal data, Legislative Decree 196/2003 and subsequent amendments, in particular those introduced by Legislative Decree no. 101/2018, to those who interact with the site starting from the address www.mecisrl.it and not for other external websites that may be linked.

Processing of personal data means any operation or set of operations carried out with or without the aid of automated processes and applied to personal data or sets of personal data, even if not recorded in a database, such as collection, recording, organization, structuring, storage, processing, selection, blocking, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, restriction, erasure or destruction.

1. Data Controller

The Data Controller of personal data is:

M.E.C.I. srl
Via Aurelia Ovest, 69 – 54100 Massa (MS)
VAT No. 01030130452

Data processing related to the information request form takes place at the company’s headquarters indicated above and is carried out, through electronic tools and with the adoption of appropriate security measures, by personnel assigned to the processing office.

2. Data Protection Officer

The Data Protection Officer (DPO) is a role provided for by Article 37 of the GDPR.
The DPO cooperates with the Supervisory Authority and acts as a point of contact, including for data subjects, for matters related to the processing of personal data (Articles 38 and 39 of the GDPR), as well as for coordination in the implementation and maintenance of records of processing activities (Article 30 of the GDPR).

As provided by Article 37(7) of the GDPR, the contact details of the Data Protection Officer are reported below:

PEC: mecipec@pec.it
E-mail: meci@mecisrl.it

3. Legal basis for processing

The personal data indicated on this page are processed in the performance of tasks of public interest or in any case connected to the exercise of public powers.

Following consultation of this site, data relating to identified or identifiable persons may be processed. Data freely and voluntarily provided by users are collected and processed in compliance with the rules set out in the GDPR and are used exclusively for institutional purposes.

M.E.C.I. srl undertakes to respect and protect your privacy by processing the personal data you provide in accordance with the legal provisions designed to ensure the security, accuracy, updating, and relevance of the data with respect to the stated purposes.
Personal data provided by users who submit requests are used solely to respond to the specific request submitted and are disclosed to third parties only where this is strictly necessary and functional to that purpose, in compliance with European and national regulations. Data are processed by personnel specifically authorized to process data, only when processing is necessary for the performance of assigned tasks.

4. Processing methods

Personal data are processed using electronic tools for the time strictly necessary to achieve the purposes for which they were collected.

Specific security measures are observed to prevent data loss, unlawful or improper use, and unauthorized access.

5. Types of data and purposes of processing

All personal data provided through the Site will be processed lawfully and fairly in order to provide the requested services and to respond to users’ communications and inquiries.

> Data provided voluntarily: Through the Site it is possible to send requests and communications via the contact details published on the site. Providing such data is mandatory and necessary to respond to submitted requests and to contact the sender for clarification regarding the matters reported.

> Browsing data: This category includes IP addresses or domain names of the computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment.
Browsing data are collected not for the purpose of identifying users, but solely to collect anonymous statistical information on the use of the site and its services.

6. Cookies

Cookies are small text files that websites send to the user’s device, where they are stored and then retransmitted to the same websites upon subsequent visits.

The Site uses:

> Session cookies, whose use is not aimed at collecting personally identifiable user data, being limited solely to the transmission of session identification data in the form of numbers automatically generated by the server.
Session cookies are not stored persistently on the user’s device and are automatically deleted when the browser is closed.

> Third-party cookies for displaying videos on YouTube.
M.E.C.I. srl does not have access to data that are collected and processed independently by third parties. For more information on the logic and methods of processing data collected by social networks, users are invited to read the privacy notices provided by the relevant service providers:
YouTube: https://www.google.it/intl/it/policies/privacy

Technical cookies are not used for user profiling activities.

Users may choose to enable or disable cookies by changing their browser settings according to the instructions provided by the respective providers at the links below:

> Chrome
> Firefox
> Safari
> Internet Explorer
> Opera

7. Rights of data subjects

Data subjects (natural persons to whom the data refer), pursuant to Articles 15 et seq. of the GDPR, may exercise their rights at any time and, in particular, the right to access their personal data, request rectification or restriction, updating if incomplete or incorrect, and erasure if collected in violation of the law, as well as the right to object to processing, subject to the existence of legitimate grounds on the part of the Data Controller.

For this purpose, requests may be addressed to those exercising the functions of Data Controller, pursuant to the Prime Minister’s Decree of May 25, 2018, by sending a request to the relevant contact points or by e-mail to the following addresses, certified and ordinary respectively:
PEC: mecipec@pec.it
E-mail: meci@meci.it

using the specific form available on the website of the Italian Data Protection Authority at:
www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924.

Data subjects may also lodge a complaint with the Italian Data Protection Authority, following the procedures and instructions published on the official website: www.garanteprivacy.it.
The exercise of rights is not subject to any formal constraint and is free of charge.

8. Changes to this policy

This Privacy Policy may be updated in compliance with regulatory or legislative provisions.

Last update: 22 December 2025