Privacy policy

Last updated: 26 October 2026

This notice explains how Mediksan Srl processes the personal data of visitors to coverpicc.com and of people who contact us through its forms, in accordance with Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003.

Data controller

Mediksan Srl, Via Andrea Costa 5, 58020 Scarlino (GR), Italy, VAT IT01690410533. Email: info@mediksan.it · Phone: +39 0566 280080.

What data we process and why

Browsing data

While you browse, the systems hosting the site automatically record some technical data (IP address, browser type, pages visited, date and time). This is used only to run the site, keep it secure and detect misuse. Legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR).

Contact forms

When you write to us from the Contact, Become a retailer or Careers pages we process the data you enter: name, email, phone (optional), store or company name, city and your message. We use it only to:

  • reply to your request and send you an acknowledgement;
  • assess your request to become a retailer and get back to you;
  • assess your application to join our sales network.

Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and, for applications, your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. Fields marked as required are needed for us to reply.

Store locator and location

The store search can use your location, only if you allow it in your browser, to show the nearest stores. Your location is processed in your browser to calculate distances and is not stored on our systems. The map is provided by Google (see "Recipients").

Reserved area

For Mediksan administrators and representatives we process account data (name, email, encrypted password, last login) and a log of the changes made, in order to manage access and keep the service secure. Legal basis: performance of the employment or collaboration relationship and legitimate interest of the controller.

How long we keep data

  • Contact form messages and retailer requests: up to 24 months after the last contact, unless a business relationship follows.
  • Applications: up to 12 months.
  • Browsing data: only as long as needed for security, normally no more than 30 days.
  • Reserved area accounts: for the duration of the collaboration.

Recipients

Data is not disclosed to the public. It may be processed on behalf of Mediksan Srl, and only for the purposes above, by providers appointed as data processors:

  • Vercel Inc. – website hosting;
  • Prisma Data Inc. – database storing the messages;
  • Aruba S.p.A. – email service;
  • Google Ireland Ltd. – store locator maps.

Some of these providers may process data in the United States: in such cases transfers rely on the EU-U.S. Data Privacy Framework or on the standard contractual clauses approved by the European Commission. Data may also be shared with Mediksan staff and medical representatives in charge of answering requests.

Your rights

You can ask at any time to access, rectify or erase your data, restrict or object to its processing, and receive it in a portable format (Arts. 15–22 GDPR), and withdraw any consent given. Write to info@mediksan.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Cookies

For the cookies used by this site see the Cookie policy.

Changes

This notice may be updated: the date of the last change is shown at the top.