Privacy Policy (GDPR / LOPDGDD)

1. Data controller

2. Purpose of processing

Personal data collected through web forms, email or equivalent means are processed for the following purposes:

• To respond to information requests, quotes or contact enquiries.
• To manage commercial relationships and send professional communications.
• Lead management and storage in Zoho CRM.
• To comply with legal or contractual obligations.
• Where applicable, to send information about services related to online reputation management, data protection, reputational cybersecurity and Meritoo's technology solutions.

3. Legal basis for processing

• Consent of the data subject (Art. 6.1.a GDPR).
• Performance of a contractual or pre-contractual relationship (Art. 6.1.b GDPR).
• Legitimate interest of the company in maintaining the professional relationship and the security of its services (Art. 6.1.f GDPR).

4. Data retention

Data will be kept for as long as necessary to fulfil the purpose for which it was collected or while a contractual relationship or valid consent exists, and thereafter for the periods established by law.

5. Recipients

Data will not be transferred to third parties except in compliance with a legal obligation or when necessary for the provision of services.

Please note that data management is carried out through Zoho CRM (Zoho Corporation B.V.), which acts as a data processor, with servers located in the EU and appropriate contractual safeguards in place.

6. User rights

Data subjects may exercise their rights of access, rectification, erasure, restriction, objection and portability by sending a written request to:

Email: legal@meritoo.ai

Indicating "Data Protection - Meritoo" and attaching a copy of an identity document.

Data subjects also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that any of their rights have been infringed.

7. Information security

Meritoo applies appropriate technical and organisational measures to guarantee the confidentiality, integrity and availability of the personal data processed, including encryption, access controls and audit protocols.

8. Confidentiality

All cases are handled with strict confidentiality. We do not share your personal data with third parties without your express consent, except where necessary to provide our services or by legal obligation.

Back to home