This Privacy Policy explains how Merisù (VAT IT0948519451) collects, uses, and protects your personal data when you visit our website or interact with our services, in compliance with EU Regulation 2016/679 (GDPR).
Data Controller: Merisù, Via dei Fori Imperiali 48, 00186 Rome, Italy.
Information We Collect: When you use our website, we may collect:
- your name, email address and phone number;
- any information you provide via contact forms or newsletter subscriptions;
- browsing data (IP address, browser type, pages visited) collected automatically.
Purpose of Processing: Your data is used to:
- respond to inquiries;
- process franchise applications;
- send newsletters (with your consent);
- improve our services;
- comply with legal obligations.
Legal Basis: Processing is based on:
- your consent (for marketing);
- contractual necessity (for franchise applications);
- legitimate interest (for website analytics).
Data Retention: We retain your personal data for the duration necessary to fulfill the purposes described herein, or as required by applicable law - typically no longer than 24 months after the end of the business relationship.
Your Rights: Under GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing. To exercise these rights, contact us at [email protected].
Third-Party Sharing: We do not sell your data. We may share data with trusted service providers (hosting, email delivery) who act as data processors under contractual obligations.
Security: We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.
Changes: This policy was last updated on January 2026. Any changes will be posted on this page.