Privacy Policy

At Mistolin S.A., a member of the MSTN Group, safeguarding the privacy of our visitors and customers is paramount. We are dedicated to ensuring the security of the information entrusted to us. This privacy policy is designed to provide you with an overview of our approach to privacy and the handling of personal data. All data collected and processed strictly adheres to prevailing data protection legislation. We encourage you to thoroughly review this policy, as accessing and using our website, as well as providing personal information, implies your acknowledgment and acceptance of these terms. By doing so, you authorize us to collect, utilize, and disclose your personal data in line with the provisions outlined herein and in compliance with relevant data protection laws. We recommend regular consultation of this privacy policy, as it may undergo revisions and updates, with any amendments taking effect upon publication on mistolincompany.com.

Data processor

The MSTN Group and its affiliated companies are entrusted with processing personal data, both internally and externally, to the extent necessary. This may involve outsourcing to third-party entities such as suppliers, logistics partners, carriers, and web hosting services. While some of these entities may be located outside the European Union, any data transfers are conducted with strict adherence to data protection regulations. For instance, certain services like website hosting, servers, and email may be provided by subcontractors outside the EU. It’s important to note that MSTN Group companies may disclose personal data to public or private entities as required by law or to fulfill contractual obligations.

Personal data collected, stored and processed

Personal data shared with any MSTN Group entity is meticulously processed and stored in a secure database managed by the respective company. Only essential information required to fulfill specific purposes is collected, including but not limited to name, VAT number, address, phone number, email address, and IBAN. These details are utilized for various functions such as maintaining customer records, contract creation, order processing, invoicing, tax compliance, legal proceedings support, insurance, accounting, and event promotion. Additionally, they may be used for advertising and marketing endeavors, with customers retaining the right to withdraw consent at any time by fulfilling the form available on the website with this purpose. Furthermore, participation in promotional activities is contingent upon prior customer registration.

Basis of data processing

The companies of the MSTN Group, through their respective employees, collect, store and process the personal data of customers and users in any capacity, in order to comply with legal obligations, to fulfill contractual obligations, all ancillary obligations existing between the parties and pre-contractual steps requested by customers and users, as well as because they give their express consent to this privacy policy.

Data retention period

The companies of the MSTN Group keep the data of Clients and Users for the periods necessary to comply with any legal obligations that may fall upon them, namely for a period of ten years, in order to comply with the legal obligation to archive all commercial writing documentation.

Rights of the data subject

The holder of the personal data may request the MSTN Group, through the contact form made available on the website for this purpose, and the MSTN Group, unless there is a legal or contractual impediment, safeguards the following rights of the holder of the personal data:

• Access to their personal data;
• Rectification of your personal data;
• Erasure of your personal data;
• Limitation of the processing of your personal data;
• Opposition to the processing of your personal data;
• Portability of your personal data;
• Withdrawal of consent for the processing of your personal data, without, however, compromising the lawfulness of processing carried out on the basis of compliance with legal or contractual obligations, or on the basis of consent previously given;
• Complain about data processing to the Commission.

National Data Protection Agency

The company reserves the right to charge a fee for administrative and IT costs for any request made, in cases where data protection legislation allows it. The holder of personal data is aware that they are free to provide the information requested or not, and to authorize its processing or not. However, you are also aware that if you do not provide all the information requested, MSTN Group companies may not be able to provide you with the service or sell you the goods, or ensure the effectiveness of the shipment, computer processing, consultation or contact, and it is certain that, for security and quality policy reasons, MSTN Group companies may refrain from agreeing to make the sale or provide the service if you do not provide certain personal data that appears essential for this purpose.

It is always recommended that you read the privacy policies of all the websites you visit.