Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA
for users who visit the Mect srl websites regarding the protection of personal data

pursuant to Article 13 of Regulation (EU) 2016/679

WHY THIS INFORMATION

Pursuant to Regulation (EU) 2016/679 (hereinafter the “Regulation”), this page describes how we process the personal data of users who visit the websites of Mect srl (hereinafter “we” or “Mect”) for the protection of personal data accessible online at the following addresses:

This information does not apply to other websites, pages, or online services accessible via hyperlinks that may be published on these websites but that refer to resources outside the Mect domains.

DATA CONTROLLER

As a result of visiting the websites listed above, data relating to identified or identifiable individuals may be processed.

The data controller is Mect srl, which can be contacted at:

LEGAL BASIS FOR DATA PROCESSING

The personal data listed on this page are processed in the Data Controller’s overriding legitimate interest in providing, analyzing, delivering, improving, and personalizing services, as well as ensuring the proper functioning of the website, provided that such processing does not interfere with your right to data protection or your fundamental rights and freedoms. In some cases, we may have a legal obligation to collect personal data to protect your interests or those of others (for example, to prevent a cyberattack or to verify your identity).

TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING

Browsing Data

The computer systems and software procedures used to operate this website collect, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes the IP addresses or domain names of the computers and devices used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.), and other parameters related to the user’s operating system and computing environment.

This data, which is necessary for the use of web services, is also processed for the following purposes:

Browsing data is not retained for more than seven days (except where necessary for the judicial authorities to investigate crimes).

Data Provided by the User

The optional, explicit, and voluntary sending of messages to Mect’s contact addresses, as well as private messages sent by users to institutional profiles or pages on social media (where this option is available), as well as the completion and submission of forms available on Mect websites, result in the collection of the sender’s contact information—which is necessary to respond—as well as all personal data included in the communications.

Specific information will be included on or linked to the pages of the Mect website designated for the provision of certain services.

Cookies and Other Tracking Technologies

Cookies are text files that the servers of the websites you visit may store on the devices you use (computers, smartphones, tablets). The information contained in cookies is sent back to the servers when you revisit those websites.

For more information on cookies and the regulations governing them, visit the website of the Italian Data Protection Authority: www.garanteprivacy.it/cookie.

Our websites use the following cookies:

Since the installation of cookies and other tracking systems by third parties through the services used on this website cannot be technically controlled by the Data Controller, any specific reference to cookies and tracking systems installed by third parties is to be considered indicative. For complete information, please consult the privacy policies of any third-party services listed in this document.

Given the inherent complexity involved in identifying cookie-based technologies and their close integration with the functioning of the web, the User is encouraged to contact the Data Controller if they would like to receive further information regarding the use of cookies.

DISABLING OR DELETING COOKIES

You can configure your browser to block cookies entirely or partially. You can also delete any cookies already stored on your system.

These settings must be configured separately in each browser and on each device you use. For information on how to do this, please refer to the guide for the specific browser:

Additional information on managing and deleting cookies through your browser is available on the aboutcookies.org website.

If you wish to revoke consent you previously provided and restore the display of the banner with the brief privacy notice, you can use your browser's tools to delete the cookies associated with the website's domain.

To individually disable or enable cookies from the major companies that set profiling cookies, please visit www.youronlinechoices.com.

For information regarding third-party cookies, please also refer to the privacy policies of the respective providers.

Artificial Intelligence-Based Virtual Assistant

The mect.it website offers an automated support service through an AI-powered virtual assistant, accessible on the Q&A page.
The service uses APIs from Groq (groq.com), a third-party provider based in the United States (subject to Groq’s Privacy Policy), and the GPT-OSS 120B language model (developed by OpenAI, an open-source model).

Data Processed

The assistant processes only the text of the questions entered by the user and generates automatic text-based responses.
No personal information (first name, last name, email, etc.)is required to use the service.
However, if the user voluntarily includes personal data within the questions (for example, “My name is Mario and I have a problem with…”), such information will be treated as part of the text content and stored as described below.

Purpose of the Processing

The data is processed exclusively for the following purposes:
✅ To provide automated responses to user questions;
✅ To retain conversation history to improve service quality (without using the data to train artificial intelligence models).

Legal Basis

The processing is based on the Data Controller’s legitimate interest (Article 6, paragraph 1, subparagraph f) of EU Regulation 2016/679 (GDPR)) in providing an efficient and innovative support service.
You may object to the processing at any time by sending a request to the contact information provided in this privacy notice.

Data Retention

The questions and answers generated by the virtual assistant are stored in an internal database for a maximum of 12 months, unless otherwise specified at the time of collection.
The data is automatically deleted upon expiration of this period or at the user’s request.

DATA TRANSFER TO COUNTRIES OUTSIDE THE EU

Through Google Analytics, Google Ads, and social media plugins, this website may share some of the data it collects outside the European Union. This transfer is permitted under specific Standard Contractual Clauses.

Conversations with the virtual assistant are processed via Groq’s APIs, which acts as a data processor pursuant to Article 28 of the GDPR.
Groq is headquartered in the United States; therefore, data may be transferred outside the European Union.
The Data Controller has implemented appropriate measures (such as Standard Contractual Clauses (SCCs) or other safeguards) to ensure a level of data protection that complies with European standards, in accordance with Chapter V of the GDPR.

DATA RECIPIENTS

The recipient of the data collected as a result of visiting the websites listed above is Mect srl.

RIGHTS OF DATA SUBJECTS

Data subjects have the right to obtain from Mect, in the cases provided for, access to their personal data, as well as the rectification or erasure of such data, the restriction of processing concerning them, or the right to object to the processing (Articles 15 et seq. of the Regulation). The relevant request may be submitted by contacting the Data Controller at srlmect@mect.it.

RIGHT TO FILE A COMPLAINT

Data subjects who believe that the processing of their personal data through this website violates the provisions of the Regulation have the right to lodge a complaint with the Data Protection Authority, as provided for in Article 77 of the Regulation, or to seek redress through the appropriate judicial channels (Article 79 of the Regulation).

divider

Last updated: September 3, 2026