This policy explains how Meidi Packing SRL collects, uses, and protects personal data, in accordance with Regulation (EU) 2016/679 (GDPR).

1. Data Controller

2. What data we collect

• Identification and contact data: first name, last name, phone, email, delivery/billing address;
• Billing data: for legal entities – company name, Tax ID, Trade Reg. No.;
• Order data: products purchased, history, preferences;
• Technical data: IP address, device type, cookies (see Cookie Policy).

3. Purposes of processing

• Order processing and delivery;
• Issuing tax documents;
• Communication with you regarding orders and support;
• Marketing (newsletter), only with your consent;
• Website improvement and fraud prevention.

4. Legal basis

We process data based on: contract performance (order), legal obligations (taxation), legitimate interest (security, fraud prevention), and consent (marketing).

5. Who we disclose data to

Data may be shared with: courier companies, payment processors, IT/hosting service providers, accounting firms — all contractually obliged to protect data. We do not sell your data to third parties.

6. Storage duration

We retain data for as long as necessary for the above purposes and according to legal terms (e.g., accounting documents – 10 years). Marketing data is retained until consent is withdrawn.

7. Your rights

You have the right to access, rectification, erasure, restriction, portability, objection, and not to be subject to automated decision-making. Details and how to exercise these rights can be found on the GDPR page. You can exercise them by writing to us at info@meidi.ro.

8. Data security

We implement appropriate technical and organizational measures (secure SSL connection, restricted access) to protect data against unauthorized access, loss, or disclosure.

9. Supervisory authority

If you believe your rights have been violated, you can contact ANSPDCP – National Supervisory Authority for Personal Data Processing – dataprotection.ro.

Last updated: July 10, 2026