Privacy policy

1. Who We Are

Our website address is: https://mistrelli.com (referred to as “we”, “us”, or “our”).

For any inquiries regarding this Privacy Policy or your personal data, you can contact us at:info@mistrelli.com.

2. What Personal Data We Collect and Why We Collect It

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user-agent string to assist with spam detection.

Legal basis: Legitimate interests (to protect our website against spam and abuse, Art. 6(1)(f) GDPR).

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to verify whether you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. Upon approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

  • Comment Cookies: If you leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when leaving subsequent comments. These cookies last for one year.

  • Session & Authentication Cookies: If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we set up several cookies to save your login information and screen display choices. Login cookies last for two days, and screen options cookies last for one year. If you select “Remember Me”, your login will persist for two weeks. Logging out removes authentication cookies.

  • Editor Cookies: If you edit or publish an article, an additional cookie will be saved in your browser. This cookie contains no personal data and simply indicates the post ID of the article you edited. It expires after 1 day.

Embedded Content from Other Websites

Articles or pages on this site may include embedded content (e.g., videos, images, social media widgets). Embedded content from other websites behaves in the exact same manner as if the visitor has visited the other website directly.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.

Contact Inquiries

If you contact us via email or a contact form, we collect the information provided in your inquiry (such as name, email address, and message content) solely for the purpose of responding to your request.

Legal basis: Performance of a contract or steps prior to entering into a contract (Art. 6(1)(b) GDPR) or legitimate interest in customer communication (Art. 6(1)(f) GDPR).

3. How Long We Retain Your Data

  • Comments: If you leave a comment, the comment and its metadata are retained indefinitely so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

  • Registered Users: For users that register on our website (if any), we store the personal information provided in their user profile. All users can view, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also view and edit that information.

  • Contact Inquiries: We retain general inquiry communications for up to [e.g., 6–12 months] unless needed longer for legal or accounting obligations.

4. Where Your Data Is Sent (Third Parties & Transfers)

  • Visitor comments may be checked through an automated spam detection service (e.g., Akismet).

  • We do not sell, rent, or trade your personal information to third parties.

  • Any data processing conducted on servers outside the European Economic Area (EEA) is carried out under appropriate safeguards, such as Standard Contractual Clauses (SCCs).

5. What Rights You Have Over Your Data

Under applicable data protection laws (including the GDPR), you have the following rights:

  • Right of Access: You can request a copy of the personal data we hold about you.

  • Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.

  • Right to Erasure (“Right to be Forgotten”): You can request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

  • Right to Restriction of Processing & Right to Object: You have the right to restrict or object to the processing of your data under certain conditions.

  • Right to Data Portability: You can request the transfer of your personal data to another organization or directly to you in a structured, machine-readable format.

  • Right to Lodge a Complaint: You have the right to lodge a complaint with a competent supervisory authority if you believe our processing of your personal data violates applicable privacy laws.

To exercise any of these rights, please reach out to us at: info@mistrelli.com.