GDPR Compliance Policy

Last Updated: April 03, 2026

1. Introduction

Mixymash (the “Site”) is committed to protecting the privacy and personal data of its users in accordance with the European Union’s General Data Protection Regulation (GDPR). This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have as a data subject. If you have any questions or concerns, please contact us at [email protected].

2. What Personal Data We Collect

Email addresses – collected when you register, subscribe to newsletters, or contact us.
Cookies and similar technologies – used for authentication, session management, and site functionality.
Analytics data – aggregated statistics from Google Analytics and Matomo to improve user experience and website performance.

3. How We Protect Your Data

All data transmitted between your browser and our servers is protected by HTTPS (TLS 1.2+).
Personal data is stored on secure, access‑controlled servers located in the European Economic Area.
We retain personal data only for as long as necessary to fulfill the purposes stated here or as required by law. After that period, data is securely deleted.

4. Legal Basis for Processing

We process personal data under the following lawful bases:

Consent – for activities such as newsletter subscription or marketing communications.
Legitimate interest – to provide and improve our services, manage user accounts, and ensure the security of the Site.

5. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Each right is illustrated with a Bootstrap icon for quick reference.

Right to Access

You may request a copy of the personal data we hold about you. We will provide a summary of the data, the purposes of processing, and any third parties with whom we share it.

Right to Rectification

If your personal data is inaccurate or incomplete, you can ask us to correct it. We will update the data promptly.

Right to Erasure

You may request the deletion of your personal data, subject to legal obligations that may require retention (e.g., tax records). We will delete data in a secure manner.

Right to Restrict Processing

You can ask us to limit the processing of your data (e.g., if you contest its accuracy). We will store the data but not use it for the specified purposes until the restriction is lifted.

Right to Data Portability

You may receive your personal data in a structured, commonly used format and transfer it to another controller if the processing is automated and based on your consent or contract.

Right to Object

You can object to processing that is based on legitimate interest or for direct marketing purposes. Upon objection, we will stop processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

If we process your data based on consent, you may withdraw it at any time. Withdrawal does not affect the legality of processing before it was withdrawn.

6. How to Exercise Your Rights

To exercise any of the rights above, please send a written request to [email protected] including:

Your full name and contact details.
Clear statement of the right you are exercising.
Any supporting documentation that helps us verify your identity.

We will acknowledge your request within 7 days and respond within 30 days, as mandated by GDPR. If you need a more immediate response, please let us know in your email.

7. Data Retention Policy

We retain personal data for no longer than necessary:

Email addresses – up to 3 years after the last interaction, unless you request deletion.
Cookies – session cookies are deleted when the session ends; persistent cookies are stored for 12 months.
Analytics data – aggregated and anonymized data is kept for up to 12 months to improve the Site.

8. Contact Information

For any inquiries, complaints, or to exercise your rights, please contact:

Mixymash Data Protection Officer
Email: [email protected]