Privacy Policy

This Privacy Policy explains how Giadesi SRL (trading as MERET Digital, "we", "us", "our") collects, uses, and protects personal data when you use our website at https://meret.digital (the "Site"). We comply with the EU General Data Protection Regulation (GDPR), UK GDPR, and applicable Romanian data protection law.

1. Data Controller

The data controller for personal data collected through this Site is:

• Giadesi SRL
• Registered address: Str. MOECIU, Nr. 3, sector 1, București, județ București, Romania
• CUI / VAT: 31532318
• Email: matei@meret.digital

2. What personal data we collect

We may collect the following categories of data:

• Contact data you submit directly. Name, email address, company name, and any message content you send via our contact form, email, or booking system (Cal.com).
• Usage data (with your consent). Anonymous analytics data such as pages visited, time on page, device type, approximate geographic region, and referring source. Collected via Google Analytics 4 only if you accept analytics cookies.
• Marketing data (with your consent). Interaction data used for advertising measurement via Meta Pixel, only if you accept marketing cookies.

We do not collect special category data (e.g. health, political opinions, biometric data) through this Site.

3. Legal basis for processing

We process your data under the following lawful bases under GDPR Article 6:

• Consent (Article 6(1)(a)). Analytics and marketing cookies are loaded only with your active consent, which you can withdraw at any time.
• Legitimate interest (Article 6(1)(f)). Responding to your inquiries and providing the services you request. We also use Vercel Analytics to understand site performance — this collects no personal data and requires no consent.
• Contract (Article 6(1)(b)). Where you have engaged us as a client, processing is necessary to perform our contract with you.
• Legal obligation (Article 6(1)(c)). Retaining records for tax, accounting, and compliance purposes.

4. How we use your data

• To respond to inquiries you send us
• To provide, invoice, and deliver services you engage us for
• To improve the Site and understand which content is useful
• To measure advertising performance (only with marketing consent)
• To comply with legal and regulatory obligations

5. Third-party services and data sharing

We use a small number of trusted third-party services. Each operates as a separate controller or as our processor under a data processing agreement.

Transfers outside the European Economic Area (EEA) are covered by Standard Contractual Clauses or, where applicable, the EU-US Data Privacy Framework.

6. How long we keep your data

• Inquiry emails and contact form submissions: up to 24 months after last contact, unless you become a client.
• Client records, contracts, and invoices: for 10 years as required by Romanian accounting law.
• Analytics data: retained by Google Analytics for up to 14 months, configurable.
• Cookie consent record: stored in your browser for 12 months, then we ask again.

7. Your rights under GDPR

You have the following rights regarding your personal data:

• Right to access. Request a copy of your data.
• Right to rectification. Correct inaccurate data.
• Right to erasure ("right to be forgotten"). Request deletion of your data.
• Right to restriction. Limit how we use your data.
• Right to data portability. Receive your data in a machine-readable format.
• Right to object. Object to processing based on legitimate interest.
• Right to withdraw consent. Where we rely on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, email us at matei@meret.digital. We will respond within 30 days as required by GDPR.

8. Right to lodge a complaint

If you believe we have mishandled your data, you have the right to complain to a supervisory authority. In Romania that is the ANSPDCP (Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal, dataprotection.ro). EU residents may also contact their local authority.

9. Data security

We use industry-standard measures including HTTPS encryption in transit, access controls, and reputable infrastructure providers. No system is perfectly secure, but we take reasonable steps proportionate to the data we handle.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date at the top of this page. Continued use of the Site after changes constitutes acceptance.

11. Contact

Questions about this policy or your data? Email matei@meret.digital.