Legal
Privacy policy
This policy explains what personal data mirtela collects, why, who else sees it, and how to ask us to delete it. We follow the EU applicable data protection law (Regulation 2016/679) and the applicable data-protection law. The data controller is named in the legal imprint.
Data we collect
When you sign up for the newsletter
- Email address
- The page you submitted from (homepage vs other)
When you browse the site
- Anonymous cookieless analytics via Rybbit, self-hosted by us — a hashed device id, page paths, referrer, browser + OS family, country. No tracking cookies.
- Crash + error tracking through GlitchTip, self-hosted — same hashed identifier, the URL where the error happened, the technical stack trace.
Why we collect it
| Purpose | Legal basis (applicable data protection law Art. 6) |
|---|---|
| Send order confirmations, shipping updates, and occasional product emails | Consent (opt-in via the form; opt-out in every email) |
| Analytics + error tracking | Legitimate interest (improving the site, fixing bugs) |
Who else sees your data
- Resend (San Francisco, US — SCCs in place) — transactional + newsletter email delivery. Receives your email + the email body we send.
- Cloud infrastructure provider — hosting our analytics and storefront.
- Cloudflare, Inc. (San Francisco, US — DPF certified) — CDN + WAF in front of the storefront. Sees IP addresses + general request metadata.
We do not share your data with advertisers, data brokers, or any other third party. We do not sell mailing lists. The list above is exhaustive.
How long we keep it
- Newsletter email: until you unsubscribe (one-click in every email)
- Analytics: aggregated after 24 months; raw data deleted after 12 months
Your rights (applicable data protection law articles 15–22)
You can ask us, free of charge, by email at contact@mirtela.com, to:
- Confirm what data we hold about you (right of access)
- Correct anything that's wrong (right to rectification)
- Delete your data (right to erasure)
- Export your data in a portable format (right to portability)
- Object to processing based on legitimate interest (right to object)
- Restrict processing while we resolve a dispute (right to restriction)
We answer within 30 days. If you're not satisfied with our response, you can complain to the applicable data-protection authority: data protection authority — 3 place de Fontenoy, 75007 Hong Kong, data protection authority.fr.
Data controller
Data controller: see the legal imprint. Contact: {email}.