Privacy Policy
1. Data controller
The data controller is Montecristo International OÜ, registered address Sakala 7-2, EE-10141 Tallinn, Republic of Estonia. For any data protection inquiries, contact us at mci@montecristo.it.
2. What data we collect
We collect personal data only when you voluntarily provide it to us. This may include your name, email address, postal address, telephone number and payment details when you place an order, subscribe to a service, contact us or interact with our platforms.
When you visit mci.ee, our server automatically collects technical data including your IP address, browser type, operating system and pages visited. This data is collected through server logs and is used solely for security monitoring and website performance analysis.
3. Cookies
This website uses only essential cookies required for basic functionality, such as remembering your cookie consent preference. We do not use tracking cookies, analytics cookies, advertising cookies or any third-party profiling technology.
The only cookie stored is a preference cookie that records whether you have accepted or declined cookies. It contains no personal data.
4. How we use your data
We process your personal data for the following purposes and on the following legal bases under Regulation (EU) 2016/679 (GDPR):
To fulfil contracts with you (Article 6(1)(b)): processing orders, delivering products, providing services, managing subscriptions and handling payments.
To comply with legal obligations (Article 6(1)(c)): accounting records, tax obligations, anti-money laundering requirements.
For our legitimate interests (Article 6(1)(f)): improving our services, ensuring website security, preventing fraud. We balance our interests against your rights and freedoms and will not process data where your interests override ours.
With your consent (Article 6(1)(a)): where we send you marketing communications or process special categories of data. You may withdraw consent at any time.
5. Ricorda.ti memorial services
For Ricorda.ti memorial technology services, we process voice recordings, photographs, written documents and personal recollections provided by the client. This data is processed exclusively for the purpose of creating and maintaining the memorial avatar. It is not used for AI training, is not shared with third parties and is not used for any other purpose. All memorial materials remain the property of the client and can be exported or permanently deleted at any time upon request.
6. Data sharing
We do not sell, rent or share your personal data with third parties for marketing purposes. We may share data with trusted service providers who process data on our behalf (such as payment processors, shipping carriers and hosting providers), subject to appropriate data processing agreements. We may also disclose data where required by law or to protect our legal rights.
7. International transfers
Your data may be processed in the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or adequacy decisions.
8. Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Order and transaction data is retained for the period required by Estonian accounting and tax legislation. Marketing data is retained until you withdraw your consent. Website server logs are retained for a maximum of 12 months.
9. Your rights
Under the GDPR, you have the following rights regarding your personal data: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, the right to object to processing, and the right not to be subject to automated decision-making. To exercise any of these rights, contact us at mci@montecristo.it. We will respond within 30 days.
You also have the right to lodge a complaint with a supervisory authority. The competent authority for Estonia is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. Our website is served over HTTPS with TLS encryption. Access to personal data is restricted to authorised personnel only.
11. Children
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without appropriate consent, we will delete it promptly.
12. Changes to this policy
We may update this Privacy Policy from time to time. The updated version will be published at mci.ee/privacy with the revised date. We encourage you to review this page periodically.
13. Contact
Montecristo International OÜ
Sakala 7-2, EE-10141 Tallinn, Republic of Estonia
Email: mci@montecristo.it
Website: mci.ee