1. Data Controller
MERK Digital ("MERK", "we", "us" or "our") is the data controller for personal data processed through the MERK website, platform, and Professional Profile services, unless otherwise stated.
For privacy-related requests, contact hello@merkdigital.it.
2. Scope of This Policy
This Privacy Policy applies to visitors, account holders, customers, and anyone who contacts MERK through forms, support requests, checkout, or profile setup flows.
Third-party websites or services linked from a Professional Profile are governed by their own privacy policies.
3. Personal Data We Collect
We may collect identity and contact data (such as name, email address, company name, phone number, and country), account and billing data, profile content you submit, communication records, support attachments, technical data (IP address, browser type, device information, logs), and usage/analytics data related to your account or public profile.
If you purchase optional setup services, we may also process professional information, branding assets, social links, booking links, and other materials needed to create or update your profile.
4. How We Use Personal Data
We use personal data to create and manage accounts, provide subscription and profile services, process payments, deliver setup or update services, respond to inquiries, provide support, improve our platform, maintain security, comply with legal obligations, and send service-related communications.
Where permitted by law, we may also send product updates or marketing communications. You can opt out of marketing messages at any time.
5. Legal Bases for Processing
Where the GDPR or similar laws apply, we process personal data on one or more of the following bases: performance of a contract, compliance with legal obligations, legitimate interests (such as platform security, fraud prevention, and service improvement), and consent where required (for example, certain marketing activities or optional profile publication choices).
You may withdraw consent at any time where processing is consent-based, without affecting the lawfulness of processing before withdrawal.
6. Profile Publication and Sharing
When you activate or publish a Professional Profile, the information you choose to include may become publicly accessible through your profile link, QR code, NFC card, or other sharing methods.
You control much of the content displayed on your profile. Please review your information carefully before publishing or sharing it.
7. Recipients and Processors
We may share personal data with trusted service providers that help us operate the Service, such as hosting providers, payment processors, email delivery services, analytics tools, and customer support systems.
These providers may process data only on our instructions and subject to appropriate confidentiality and security obligations.
We may also disclose information where required by law, court order, or to protect rights, safety, and security.
8. International Transfers
If personal data is transferred outside your country, MERK implements appropriate safeguards as required by applicable data protection law, such as standard contractual clauses or equivalent mechanisms.
9. Data Retention
We retain personal data for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.
Retention periods may vary depending on the type of data, your account status, and applicable legal requirements.
10. Your Rights
Depending on your location, you may have the right to access, rectify, erase, restrict, or object to certain processing of your personal data, as well as the right to data portability and to lodge a complaint with a supervisory authority.
In the European Economic Area, you may contact your local supervisory authority. In Italy, information is available at www.garanteprivacy.it.
To exercise your rights, contact hello@merkdigital.it. We may need to verify your identity before responding.
11. Security
We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration.
No online service can guarantee absolute security. Please use a strong password and keep your account credentials confidential.
12. Children
The Service is not directed to children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date.