Privacy policy

THIS PRIVACY POLICY WAS LAST UPDATED ON NOVEMBER 18, 2025

INFORMATION NOTICE PROVIDED PURSUANT TO ARTICLES 13-14 OF THE GDPR 2016/679 (GENERAL DATA PROTECTION REGULATION)

In accordance with the provisions of the European Regulation for the protection of personal data EU 2016/679 (hereinafter « GDPR »), we provide the necessary information regarding the Processing of Personal Data on our site.

This Information Notice is provided for the site https://www.merlino.video/ (hereinafter: « Site ») and constitutes an integral part of the Site and the services we offer.

This notice is provided according to Art. 13 of the Regulation to those who interact with the web services of the Site and the Data Controller, both through simple consultation and through the use of specific services made available via the Site.

THE DATA CONTROLLER

The Data Controller for personal data is Evolution ADV s.r.l. – P.IVA (VAT No.): 14074001000 – N. Rea (Chamber of Commerce No.): RM-1494334 – with registered office in -00187- Rome at Via XX Settembre n.40 – email [email protected]

PLACE OF DATA PROCESSING

Processing connected to the web services of this site takes place at the aforementioned registered office, as well as at the operational offices, and is handled only by personnel authorized for processing, or by any persons in charge of maintenance operations.

PERSONAL DATA SUBJECT TO PROCESSING

Following navigation of the Site, Evolution ADV will process the user’s Personal Data in compliance with the applicable regulations.

Personal Data provided by users who submit specific requests through the form or email address on the site are used for the sole purpose of performing the service or provision requested and are communicated to third parties only if this is necessary for that purpose.

a) Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified Data Subjects, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning.

b) Data voluntarily provided by the user
The optional, explicit, and voluntary sending of electronic mail to the address indicated on this site or the use of contact forms involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other Personal Data included in the message. Specific summary notices will be progressively reported or displayed on the pages of the site set up for particular services on request.

THE PURPOSES OF PROCESSING

User data is processed to respond to their requests. In particular, all data collection and the further Processing activities are aimed at achieving the following purposes:

a) registration on the site;

b) subscription to email newsletters;

c) execution of the contract for the provision of the requested service/product;

d) sharing of content on the site;

e) management of customer relations;

f) general request for information;

g) participation in any promotional initiatives dedicated to new or registered customers;

h) statistical research/analysis about aggregated or anonymous data, thus without the possibility of identifying the user, aimed at measuring the functioning of the site;

i) compliance with the tax and accounting obligations.

MODALITIES OF PROCESSING

Data Processing is carried out using paper, electronic, and/or IT tools.

The Data Controller adopts all appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

The data will be processed with organizational methods and logic strictly related to the purposes for which they were collected and in compliance with current security regulations, for the purposes indicated above or specified from time to time in any further information notices presented to the user.

LEGAL BASIS OF PROCESSING

The Data Controller processes Personal Data relating to the User if one of the following conditions exists:

– the User has given consent for one or more specific purposes;

– Processing is necessary for the performance of a contract with the User and/or for any pre-contractual measures;

– Processing is necessary for compliance with a legal obligation to which the Data Controller is subject;

– Processing is necessary for the performance of a task out in the public interest or for the public powers to which the Data Controller is vested;

– Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.

It is always possible to ask the Data Controller to clarify the concrete legal basis of each processing operation and in particular to specify whether the Processing is based on law, required by a contract, or necessary to conclude a contract.

PROVISION OF DATA

The forms to be filled out on this site include both mandatory data – failure to provide which will make it impossible to process the request – and optional data, which are not strictly necessary to process the request.

COMMUNICATION AND DISCLOSURE OF DATA

The Personal Data provided may be communicated to third parties exclusively in the event that communication is necessary to comply with the requests of the users/visitors themselves or by legal obligation.

The third parties will act as autonomous Data Controllers, providing services instrumental to satisfying the interested user’s request (e.g., third-party technical service providers, postal couriers, hosting providers) or to whom data communication is necessary to comply with laws or regulations.

The following subjects are also recipients of the collected data and, therefore, will process such data on behalf of the Data Controller, pursuant to Art. 28 of the Regulation, as Data Processors:

– Accountant, regarding tax and accounting obligations

– Consultants and freelancers, individually or as firms

– Email providers

– Insurance institutions

– Banking institutions

– PEC (Certified E-mail) Providers

– Occupational health and safety consulting firms

– Privacy consulting firms

Lawyers providing services functional to the purposes indicated above may also be recipients of the data.

The updated list of Data Processors may always be requested from the Data Controller.

Furthermore, your data may be communicated to external subjects such as, by way of example and not exhaustive, authorities and supervisory and control bodies and, in general, public or private subjects entitled to request the data (e.g., Revenue Agency, Guardia di Finanza).

AUTHORIZED PERSONS

The Personal Data collected will also be processed by internal authorized persons who act on the basis of specific instructions provided regarding the purposes and methods of the processing itself.

RETENTION PERIOD

Data is processed and stored for the time required by the purposes for which it was collected.

In any case, the data will be stored until a request for erasure is made, without prejudice to related legal obligations that provide for a longer retention period in compliance with current regulations.

At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiry of this term, the right of access, erasure, rectification, and the right to data portability can no longer be exercised.

RIGHTS OF DATA SUBJECTS

Users (Data Subjects) may, at any time, exercise the rights provided under Articles 15 to 22 of EU Regulation No. 2016/679, namely the right to:

a) request confirmation of the existence or otherwise of their personal data;

b) obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed, and, where possible, the retention period;

c) obtain the rectification and erasure of data;

d) obtain the restriction of processing;

e) obtain data portability, i.e., receive it from a data controller, in a structured, commonly used, and machine-readable format, and transmit it to another data controller without hindrance;

f) object to the processing at any time, including for direct marketing purposes;

g) object to an automated decision-making process concerning natural persons, including profiling;

h) ask the Data Controller for access to and rectification or erasure of personal data or restriction of processing concerning them or to object to their processing, in addition to the right to data portability;

i) withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Users may exercise their rights by written request sent by contacting the Data Controller via PEC (Certified E-mail) at [email protected], e-mail at [email protected], or registered letter with return receipt (Registered Mail with Return Receipt) to the address Via XX Settembre n.40 – 00187 Rome.

Furthermore, the user may lodge a complaint with the competent Supervisory Authority pursuant to Article 77 of the Regulation (Garante per la Protezione dei Dati Personali www.garanteprivacy.it), in case the data processing is contrary to the legislation in force.