PRIVACY POLICY

Effective Date: March 17, 2026

MYSTILO is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, process, and protect personal information when you visit our website, contact us, or place an order.

1. Data Controller

The data controller responsible for processing personal data on this website is:

MYSTILO

Bahnhofstraße 66

96103 Hallstadt

Deutschland

Email: info@mystilo.eu

2. Personal Data We Collect

We may collect and process the following categories of personal data:

- Name and surname

- Company name

- Billing and shipping address

- Email address

- Telephone number

- Tax/VAT information, where applicable

- Order and payment details

- Communication records

- IP address

- Browser and device information

- Website usage and analytics data

3. How We Collect Data

We collect personal data when you:

- Visit our website

- Fill out a contact form

- Request a quotation

- Create an account

- Place an order

- Subscribe to newsletters or updates

- Contact us by email or social media

- Interact with cookies or analytics tools on the website

4. Purposes of Processing

We process personal data for the following purposes:

- To operate and maintain our website

- To respond to inquiries and customer requests

- To prepare quotations and process orders

- To manage payments, shipping, and invoicing

- To maintain customer and business relationships

- To improve website performance, security, and user experience

- To comply with legal, tax, accounting, and regulatory obligations

- To send updates, offers, or business communications where legally permitted

5. Legal Bases for Processing

We process personal data on one or more of the following legal bases, where applicable:

- Performance of a contract or pre-contractual measures

- Compliance with legal obligations

- Legitimate interests in operating and improving our business

- Consent, where required by law

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies to ensure functionality, analyze traffic, improve services, and support marketing activities.

Essential cookies may be used without separate consent where legally permitted. Non-essential cookies, analytics cookies, and marketing cookies will only be used where required consent has been obtained.

You can manage your cookie preferences through the cookie banner or your browser settings.

7. Sharing of Personal Data

We may share personal data with trusted third parties where necessary, including:

- Payment service providers such as Stripe

- Website and hosting service providers such as Wix

- Shipping and logistics partners

- IT and security providers

- Accounting, legal, and tax advisors

- Analytics and communication service providers

- Public authorities where disclosure is legally required

We do not sell personal data to third parties.

8. International Data Transfers

Where personal data is transferred outside the European Economic Area, we take appropriate safeguards in accordance with applicable data protection laws.

9. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to fulfill contractual obligations, comply with legal retention periods, resolve disputes, and enforce our agreements.

10. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, misuse, loss, alteration, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure.

11. Your Rights

Subject to applicable law, you may have the right to:

- Request access to your personal data

- Request correction of inaccurate or incomplete data

- Request deletion of your personal data

- Request restriction of processing

- Object to certain processing activities

- Request data portability, where applicable

- Withdraw consent at any time where processing is based on consent

- Lodge a complaint with a competent data protection authority

12. Third-Party Links

Our website may contain links to third-party websites or social media platforms. We are not responsible for the privacy practices or content of such third-party services.

13. Social Media

We maintain a presence on Instagram:

https://www.instagram.com/mystilode

If you contact us via social media, your data may also be processed by the relevant social media platform under its own privacy policy.

14. Children’s Data

This website is intended for business and general commercial use and is not directed at children. We do not knowingly collect personal data from children.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. The latest version will always be published on this page.

16. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact: