Privacy policy

Hypertext summary:

1. Objectives and definitions
2. Scope of application
3. Information security
4. Confidentiality of information
5. Implementation of the policy
6. Monitoring of the management system
7. Information and training
8. Organizational chart, appointment system, and responsibilities
9. General security measures

1. Objectives and definitions

Meg Solutions srl, owner of the Compagnia Italiana brand and assignee of the domain name www.compagniaitaliana.it, acts as the data controller and aims to establish structured guidelines for complying with regulatory obligations on personal data protection. This policy ensures the safeguarding of information from internal and external threats, both intentional and accidental, in alignment with European and national regulations.

This document outlines the organizational model for data protection, defining strategy, general guidelines, and operational provisions. It governs roles, responsibilities, and obligations regarding personal data protection in compliance with the Privacy Code and GDPR.

Key definitions:

• Regulation: Regulation (EU) 2016/679 (GDPR);
• Privacy Code: Legislative Decree No. 196 of June 30, 2003;
• Legislation:Legislative Decree 2003/196 and Regulation (EU) 2016/679;
• Affiliate: Companies controlled or connected to the data controller within the EU;
• Personal data: Any information identifying an individual;
• Data Subject: The individual to whom personal data pertains;
• Data controller: Entity determining the purposes and means of processing;
• Data processor: Entity processing data on behalf of the controller;
• Authorized to process: Individuals authorized by the controller or processor;
• Processing: Any operation performed on personal data.

2. Scope of application

The privacy policy applies to all company entities, organizational structures, and staff members. It also extends to external parties involved in information processing within the privacy management system.

Meg Solutions commits to lawful, fair, and transparent data processing, ensuring:

• Data is collected for specified, legitimate purposes and processed accordingly;
• Data is adequate, relevant, and limited to what is necessary;
• Data is accurate and updated when needed;
• Data is stored securely and erased when no longer necessary;
• Appropriate security measures prevent unauthorized processing, loss, or damage.

Third-party data processors must adhere to these security guarantees and measures.

3. Information security

Meg Solutions ensures the integrity and security of informational assets by restricting access to authorized personnel. Risks of inadequate security include reputational damage, legal penalties, and financial loss.

To maintain compliance and improve control, the company:

• Maintains an up-to-date processing register;
• Conducts risk assessments for data protection;
• Implements necessary security measures based on risk evaluations.

Security principles include:

• Controlled access to information systems;
• Role-based access permissions;
• Secure handling of company assets;
• Employee awareness and incident reporting;
• Restricted physical access to data-processing facilities;
• Business continuity planning.

4. Confidentiality of information

The company ensures confidentiality and privacy in all personal data processing activities, utilizing secure manual, IT, and telematic tools. Employees and external parties are bound by confidentiality agreements regarding handled data.

5. Implementation of the policy

All personnel, regardless of role, must comply with this privacy policy. Employees are responsible for reporting violations, and non-compliance may lead to legal or contractual consequences.

6. Monitoring of the management system

The Data Controller audits the privacy management system annually to improve compliance. Reviews consider:

• Preventive and corrective actions;
• Regulatory compliance;
• Organizational and technical changes;
• Prior review outcomes.

7. Information and training

Meg Solutions prioritizes employee training on data protection to ensure compliance. Training covers:

• GDPR regulations;
• Risk assessment and data breach consequences;
• Incident response procedures;
• Preventive and mitigation measures;
• Security protocols within the organization.

Training is:

• Adequate and tailored to the data processing system
• Documented for auditing purposes

8. Organizational Chart, Appointment System, and Responsibilities

Key Figures:

• Data Controller: Governs data processing decisions, ensures compliance, and authorizes data processors.
• Data Processor: Handles data under the controller's instructions, ensures security compliance, and manages risk assessment.
• Authorized Personnel: Process data within their assigned roles under strict supervision.

The Data Controller ensures compliance with data subject rights, including:

• Access Rights: Confirming data existence and providing information about processing;
• Correction Rights: Updating or rectifying inaccurate data;
• Deletion Rights: Erasing or anonymizing unlawfully processed data;
• Objection Rights: Rejecting processing under legitimate circumstances.

The controller promptly addresses data subject requests.

Responsibilities of the Data Processor:

• Adhering to the controller’s data protection policies
• Implementing technical and organizational security measures
• Maintaining processing records
• Reporting security incidents within 24 hours
• Overseeing authorized personnel compliance

Authorized personnel must:

• Follow processing guidelines and security procedures
• Report data subject requests to the controller
• Notify the controller of new data processing activities

9. General Security Measures

• Identification and authentication procedures for system access
• Role-based access control and periodic reviews
• Defined protocols for handling company assets and information
• Ongoing staff training on security awareness
• Incident management procedures for timely responses
• Restricted access to physical and digital data storage locations
• Business continuity planning to mitigate risks and restore critical services

This privacy policy is subject to periodic review and updates to align with evolving regulatory requirements and security standards. The latest version will always be available through the company’s official communication channels.

Terms and Conditions - www.compagniaitaliana.it

Customers using the services offered by Meg Solutions S.r.l. declare that they are aware of and accept these general terms and conditions of the contract.

1. Definitions

• Owner: Refers to Meg Solutions S.r.l., located at Via Montorio Romano 36, 00131 Rome, VAT number 17120521004, the owner of the site and the provider of the products sold online.
• Customer: Refers to any individual or legal entity that purchases one or more products through the Online Store, accepting the General Sales Conditions.
• Service: The service provided by Meg Solutions S.r.l., as described in these terms.
• Terms and Conditions: These general service conditions, which constitute a legally binding agreement between the Customer and the Owner.
• Product/s: The products listed in the electronic catalog published on the Site, as described in their respective product pages and specifically indicated in the Order Confirmation.
• Parties: Refers collectively to the Owner and the Customers.
• Order Confirmation: The email sent by the Owner to the Customer confirming the acceptance of the order.
• Shipped Order: The email sent by the Owner to confirm the shipment of all or part of the purchased products.

Object of the Contract 

This contract governs the sale of tangible goods through electronic means, specifically the products offered for sale on the website www.compagniaitaliana.it. The products are displayed in detail with their characteristics in the dedicated section of the web portal.

Acceptance of the General Sales Conditions 

Customers must review these General Sales Conditions before completing the purchase process. The Order Confirmation implies full knowledge and complete acceptance of these conditions.
The Customer expresses acceptance of the sales conditions by completing the registration form. Personal data will be processed in accordance with the Privacy Policy following acceptance of the “General Sales Terms and Conditions” and the submission of the completed purchase form generated by the system after adding selected products to the shopping cart.
By confirming the order by clicking "Complete the Order," the Customer declares they have knowingly accepted the content and conditions of the Order, including these General Sales Conditions, prices, quantities, characteristics, and delivery times of the products, as well as the payment terms. The Customer acknowledges they have reviewed and accepted all provided information under the aforementioned conditions, including understanding that the Owner is not bound by different terms unless previously agreed to in writing. These General Conditions are valid from the date the contract is concluded and may be updated, modified, or supplemented at any time by the Owner, who will inform Customers via the website www.compagniaitaliana.it.

Conclusion of the Contract 

The contract is considered concluded when the Customer receives the Order Confirmation email. The contract is concluded at the location of the Owner's registered office. After the contract is concluded, the Owner will process the corresponding purchase order. The Customer is responsible for the accuracy and truthfulness of the personal data entered in the order form and provided to Meg Solutions S.r.l. during the completion and submission of the order form. Without prejudice to the provisions of Article 12 below for Consumer Customers, the order cannot be canceled once the order completion button has been clicked.

Any damage, delay, or inconvenience caused by inaccuracies or falsifications in the personal data provided by the Customer during the order process cannot, under any circumstances, be charged to Meg Solutions S.r.l.

Meg Solutions S.r.l. may refuse to process orders if the provided data is incomplete or incorrect. In such cases, Meg Solutions S.r.l. will inform the Customer via email regarding the failure to conclude the contract, including the reasons for not processing the order. By submitting the order form, the Customer confirms they are aware of and accept the additional information available on the site, including the General Terms of Use and Privacy Policy. Orders will be archived in the website’s database, in compliance with applicable data protection regulations, and will be accessible by logging into the Customer's profile. The order will be processed only after the Customer's payment has been received.

Product Availability 

All orders are subject to product availability. In case of supply issues, Meg Solutions S.r.l. reserves the right to offer the Customer substitute products of equal or higher quality and value, which the Customer may choose to order.
If the Customer declines substitute products, the purchase contract will be considered terminated, and any amounts already paid will be refunded. If an order exceeds the available stock, the unavailable items will be automatically removed from the cart.

Product descriptions and availability are subject to change without prior notice.

Prices and Payments 

The prices of products offered for sale on the website www.compagniaitaliana.it are quoted in Euros and are valid at the time the order is placed. The Seller may change product prices at any time without notice before the order is submitted. Any price change will be communicated to the Customer before they complete the order. The price does not include shipping costs. The Owner reserves the right to charge a shipping fee, which may vary based on the type of delivery, product quantity, volume, weight, and destination. The shipping fee will be displayed in the order summary before the Customer confirms the order. Payment for products and shipping costs can be made using one of the available payment methods indicated in the order form. Payment by credit card will be processed securely, and Meg Solutions S.r.l. will never have access to sensitive information.

Shipping Costs and Delivery Times 

Shipping costs are automatically calculated by the system and may vary depending on the payment method, purchased products, and shipping destination. These costs will be clearly stated in the order confirmation. Products will be shipped via courier and typically delivered within 1-7 working days. Delivery times are indicative and do not constitute a guarantee by Meg Solutions S.r.l. to meet them. Meg Solutions S.r.l. reserves the right to deliver the ordered products within a maximum of 30 days from the order confirmation email. The Owner ships to Italy and other European countries.

Order Cancellation 

Orders cannot be canceled once the shipping process has started.

Customer Account Deletion

Customers can deactivate their account by requesting its deletion or discontinuing use of the service at any time through their profile or by directly contacting Meg Solutions S.r.l. In the event of a violation of these terms, Meg Solutions S.r.l. reserves the right to suspend or close the Customer's account at any time without notice.

Owner's Responsibility

Meg Solutions S.r.l. is not responsible for service disruptions caused by force majeure or unforeseeable events. In case of disruptions related to the carrier, the Customer must report the issue to Meg Solutions S.r.l., who will contact the carrier to resolve the matter.In case of package loss or other issues leading to non-delivery or incorrect delivery, Meg Solutions S.r.l. will either refund or resend the order, in agreement with the Customer. The Owner is not responsible for defects arising from improper use, external causes, or neglect in using the purchased goods.

Customer Obligations

The Customer agrees to pay for the purchased goods within the timeframes and methods indicated in this contract. The information in this contract has been reviewed and accepted by the Customer before confirming the purchase.

Right of Withdrawal

In accordance with Articles 52 et seq. of the Consumer Code, Consumer Customers have the right to withdraw from the purchase contract for any reason, within the terms and in the manner indicated below.

The Customer may withdraw from the purchase contract within 14 working days from the receipt of the goods by returning them in their original packaging, without tampering with seals or damaging the outer packaging.

Returns will not be accepted beyond the legal withdrawal period.

To exercise the right of withdrawal, the Customer must notify Meg Solutions S.r.l. (Via Montorio Romano, 36 - 00131 Rome, customercare@compagniaitaliana.it) via a clear statement indicating the decision to withdraw, providing the order number, product code, and any other relevant information.

The Customer may use the attached withdrawal form, but it is not mandatory.

To comply with the withdrawal deadline, the Customer must send the notification before the expiration of the withdrawal period.

After initiating the return process, Meg Solutions S.r.l. will send the Customer instructions for returning the product.

If the Customer withdraws from the contract, Meg Solutions S.r.l. will refund the Customer, excluding shipping costs. Return shipping costs will be the Customer’s responsibility.

1. Refunds will be made using the same payment method used for the initial transaction, within 14 days of Meg Solutions S.r.l. becoming aware of the withdrawal. Refunds may be delayed until the goods are received or until proof of return is provided.
2. Privacy Policy For information on personal data processing, please refer to the Privacy Policy.
3. Intellectual Property Rights All trademarks, logos, trade names, and intellectual property on the website are the exclusive property of the Owner or its licensees and are protected by trademark laws and international treaties. The Customer may use such material only with express authorization from Meg Solutions S.r.l. or its licensees.
4. Applicable Law These Terms and Conditions are governed by the laws of the jurisdiction where the Owner is located, and the exclusive competence of the court in the Owner’s location applies, except where otherwise provided by law for Consumer Customers.
5. Contacts For further information or assistance, Customers can contact Meg Solutions S.r.l. at customercare@compagniaitaliana.it or by mail at: Meg Solutions S.r.l., Via Montorio Romano 36, 00131 Rome.