Privacy Policy

Information on the processing of personal data pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.

Last updated: 12 October 2026

1. Data controller

The data controller is MEJ Plants di Fabrizio Pandozzi, Via Migliara 58, n°84 – 04019 Terracina (LT), Italy, VAT no. IT03291390593.

For any request concerning your personal data, you can write to [email protected] or call +39 351 4005200.

2. What data we collect

Data you provide when you fill in the forms on this website:

Contact form: full name, company name, email, phone number, reason for contacting us and message.
Quote request (cart and “Quote request” page): company name, business type, VAT number, contact person, email, phone number, delivery country and location, requested items and quantities, delivery period and notes.
Rooted cuttings and pre-finished plants request: company and contact details, species, variety, colour, quantity, delivery period and location, notes.
Agent application: full name, email, phone number, country where you would like to work, experience in the industry and notes.
Updates sign-up (newsletter): email address.

Please do not include unnecessary information, or special categories of data (such as health data), in the free-text fields.

Browsing data: the systems that run this website automatically collect some technical information, such as IP address, browser and device type, pages visited, and the date and time of each request. This is needed to run the website, keep it secure and identify technical problems.

Cookies: for information on cookies and similar technologies, please see our Cookie Policy.

3. Why we process your data and on what legal basis

To answer your requests for information and quotes and to manage any resulting supply. Legal basis: steps taken at your request prior to entering into a contract, and performance of the contract (Art. 6(1)(b) GDPR).
To assess agent applications. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
To send you updates on new varieties, booking windows and seasonal news, only if you have signed up. Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
To comply with legal obligations, such as tax and accounting obligations, if your request becomes an order. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
To keep the website secure and to protect our rights, including in legal proceedings. Legal basis: the controller’s legitimate interest (Art. 6(1)(f) GDPR).

Fields marked as required must be completed so that we can handle your request; without them we cannot process the form. Optional fields help us give you a more accurate answer.

4. How we process your data

Data is processed electronically, with technical and organisational measures appropriate to protect it against unauthorised access, loss or disclosure. We do not carry out profiling or automated decision-making.

5. Who may receive your data

Your data is processed by the controller and by authorised persons working with the controller. It may also be processed, as data processors appointed under Art. 28 GDPR, by suppliers that help us run the website and related services:

the website hosting provider: Netsons S.r.l., based in Pescara (Italy);
Cloudflare, Inc., for website delivery and protection (CDN and security) and for aggregated traffic statistics;
the provider of the mailbox that receives the requests: Google (Gmail);
the web agency responsible for the technical maintenance of the website;
advisers, such as our accountant, for legal obligations.

Data may be disclosed to public authorities only where required by law. We do not sell your data or share it with third parties for marketing purposes.

6. Transfers outside the European Union

Some suppliers, such as Cloudflare and Google, may also process data in the United States. In these cases the transfer is based on the European Commission’s adequacy decision for companies certified under the EU-U.S. Data Privacy Framework, or on the Standard Contractual Clauses approved by the European Commission.

7. How long we keep your data

Information requests, contacts and applications: for as long as needed to handle them, and no longer than 24 months after the last contact.
Quote requests: 24 months if they do not become an order. If they become an order, the data required for tax and accounting purposes is kept for 10 years, as required by law.
Updates sign-up: until you withdraw your consent.
Browsing data: for as long as strictly necessary, unless needed to investigate offences or misuse.

8. Your rights

At any time you can ask the controller for:

access to your data and a copy of it (Art. 15);
rectification of inaccurate or incomplete data (Art. 16);
erasure of your data (Art. 17);
restriction of processing (Art. 18);
portability of the data you have provided (Art. 20);
to object to processing based on legitimate interest (Art. 21);
to withdraw your consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, write to [email protected]. We will reply within one month of your request.

If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the country where you live or work.

9. Minors

This website is aimed at professionals in the horticulture trade and is not intended for persons under 18.

10. Changes to this policy

We may update this policy, for example when we add new services or when the law changes. The version in force is always the one published on this page, with the last-updated date shown at the top.