Privacy Policy

Effective Date: November 7, 2025
Last Updated: November 7, 2025

This Policy explains how STORM MEDIA TECHNOLOGY S.R.L. ("Meolle", "we", "us") collects, uses, discloses, and protects the personal data of visitors and customers who use the website www.meolle.com (the "Site").

1. Who We Are and How to Contact Us

Data Controller: STORM MEDIA TECHNOLOGY S.R.L., J40/2043/2016, CUI 35639369

Registered Address: Str. Eufrosina Popescu no. 46, Sector 3, Bucharest, Romania

Data Protection Contact: info@meolle.com

If you have questions or wish to exercise your rights, you can contact us using the details above.

2. Data We Collect

We collect only the data necessary depending on your interaction with the Site:

Identification and contact details: name, surname, email, phone number, shipping/billing address.
Account data: email address, hashed password, order history, preferences.
Transaction data: purchased products, value, payment method (excluding card details), delivery/return status.
Communications: messages to support, reviews, newsletter subscription/unsubscription.
Technical and usage data: IP address, browser type/version, device information, pages accessed, navigation events; collected via cookies and similar technologies.
Warranty/return data: description of defect, images/videos of product, proof of purchase documents.

We do not knowingly collect data from minors. If you are under 16, please do not create an account without parental/guardian consent.

3. Purposes and Legal Bases of Processing

We process your data in accordance with Article 6 of the GDPR, as follows:

To provide the service and fulfill orders (account creation, order processing, payment, delivery, support, warranty/returns) — performance of contract (Art. 6(1)(b)).
Administrative communications (confirmations, order updates, service alerts) — performance of contract and legitimate interest (Art. 6(1)(b), 6(1)(f)).
Direct marketing by email/SMS (newsletters, offers) — consent (Art. 6(1)(a)). You may unsubscribe at any time via the email footer or by contacting us at info@meolle.com
Site improvement and security (analytics, fraud prevention, troubleshooting) — legitimate interest (Art. 6(1)(f)).
Legal obligations (accounting, archiving, responses to authorities) — legal requirement (Art. 6(1)(c)).

4. Cookies and Similar Technologies

We use essential, performance, and analytics cookies to operate the Site, measure usage, and improve user experience. You can manage preferences via the consent banner or browser settings. See the Cookie Policy (footer link) for details. Analytics and marketing cookies are used only with your consent.

5. Data Disclosure

We disclose data only to service partners necessary to provide our services, under data processing agreements compliant with Art. 28 GDPR:

Courier and pick-up point services — contact and delivery information.
Online payment processor — transactional details (card data is not shared with Meolle).
Hosting, IT maintenance and security providers — technical/account data.
Emailing/CRM platform — email address and newsletter preferences.
Accounting, audit, and consultancy — minimal necessary fiscal data.
Public authorities — only when legally required or to defend our rights.

We do not sell your data and do not make it available for third-party marketing purposes without your consent.

6. International Data Transfers

If a service provider uses infrastructure or support outside the EEA, transfers are carried out with appropriate safeguards (e.g., EU Standard Contractual Clauses) and additional security measures. You may request the current list of countries/safeguards at info@meolle.com.

7. Data Retention

We retain data only for necessary periods:

Account and order history: for the duration of the contractual relationship and thereafter in accordance with fiscal retention terms (generally 10 years for accounting documents).
Warranty/returns/service records: for the warranty period and a reasonable additional period for legal defense (typically 3 years from incident closure).
Newsletter/marketing data: until withdrawal of consent or prolonged inactivity, plus a short record of the unsubscribe request.
Technical/security logs: typically 30–180 days, longer if justified by security needs.

8. Security

We apply appropriate technical and organizational security measures: TLS encryption, access controls, hashed passwords, environment segregation, backups, auditing, and staff training. However, no method of transmission or storage is fully secure.

9. Your Rights

Under Regulation (EU) 2016/679, you have the right to: access, rectification, erasure, restriction, portability, objection, and the right not to be subject to a decision based solely on automated processing. You may withdraw consent at any time for future processing.

How to exercise your rights:

Submit a request to info@meolle.com

or via mail to the registered address. We will respond within 30 days (extendable up to an additional 60 days for complex requests; we will notify you). We may request additional information to verify your identity.

Supervisory Authority:

If you believe your rights have been infringed, you may contact the Romanian Data Protection Authority (ANSPDCP):

Bd. G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, Romania

www.dataprotection.ro

| anspdcp@dataprotection.ro

10. Automated Decisions and Profiling

We do not make decisions based solely on automated processing that produce legal or similar significant effects. We may use basic segmentation to send relevant offers based on your consent; you may object at any time.

11. Third-Party Links

The Site may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

12. Changes to this Policy

We may update this Policy periodically. The current version is always available on the Site and displays the date of the latest update. If significant changes occur, we will inform you through appropriate means (email or on-site notice).