Privacy
How we use your data.
This policy explains in plain language what data is processed when you send a project enquiry through Meridian Select.
Data controller
The data controller is Meridian Select SRL, with its registered office in Hodoșa village, Sărmaș commune, Harghita County, 84B Libertății Street, Romania, company registration number (CUI) 54689436.
What we collect and why
We collect your name, email address, role, product of interest, free-text project description, and the page path from which the enquiry was submitted. We use this information only to review the project enquiry and reply.
Your IP address is sent to Cloudflare Turnstile for spam and automated-submission prevention; it is not included in the enquiry record stored by Meridian Select.
Legal basis
Processing is necessary to take steps at your request before potentially entering into a contract (Article 6(1)(b) GDPR). For enquiries that are not aimed at entering into a contract, processing is based on our legitimate interest in responding to requests we receive (Article 6(1)(f) GDPR). Information submitted through this form is not used for unsolicited marketing.
Service providers processing data
We use specialist providers only to operate the website and handle enquiries.
- Supabase — secure storage of enquiries in the Central Europe (Zurich) region, eu-central-2.
- Resend — delivery of the email notification to the Meridian Select team.
- Cloudflare Turnstile — spam prevention and enquiry verification, including IP-address processing.
- Vercel — hosting the website and the function that receives the form.
Retention period
Data submitted through the enquiry form is retained for no more than 24 months from submission. We delete it sooner when it is no longer needed to handle the enquiry or following a valid erasure request. If an enquiry leads to a contractual relationship, data needed to perform the contract, meet legal obligations, or establish or defend legal claims is retained separately only for the periods applicable to those purposes.
Your rights
Subject to the conditions in the GDPR, you may request access to, rectification or erasure of your data, restriction of processing, and data portability, and you may object to processing based on legitimate interests. You may also lodge a complaint with Romania’s National Supervisory Authority for Personal Data Processing (ANSPDCP).