Privacy policy

Privacy Policy

1. Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are delighted that you are visiting our website and thank you for your interest. The following explains how we handle your personal data when you use our website. “Personal data” means any information that can be used to personally identify you.

1.2 The controller within the meaning of the EU General Data Protection Regulation (GDPR) is Mistral Earplugs. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal and confidential content (e.g., orders or inquiries), this site uses SSL/TLS encryption. You can recognise an encrypted connection by the string “https://” and the lock symbol in your browser’s address bar.

2. Data Collected When You Visit Our Website

When you use our site purely for information (i.e., without registering or otherwise transmitting information), we collect only the data your browser transmits to our server (“server log files”), including:

  • Visited website

  • Date and time of access

  • Data volume in bytes

  • Referring source/URL

  • Browser used

  • Operating system used

  • IP address (anonymised, where applicable)

Processing is based on Article 6 (1)(f) GDPR—our legitimate interest in improving the stability and functionality of the website. Data are not passed on or used otherwise, but we reserve the right to review log files retrospectively if concrete evidence of unlawful use emerges.

3. Cookies

We use cookies to make visiting our website attractive and to enable certain functions:

  • Session cookies – deleted after you close your browser

  • Persistent cookies – remain on your device so we or partners (third-party cookies) can recognise your browser on your next visit

Cookies may collect data such as browser type, location data, and IP addresses. They are automatically deleted after a specified period that may vary by cookie.

Some cookies are essential for order processing (e.g., remembering items in your cart).

Legal basis:

  • Article 6 (1)(b) GDPR – contract performance

  • Article 6 (1)(f) GDPR – legitimate interest in optimal website performance and a user-friendly experience

Most browsers allow you to:

  • Be notified when cookies are set

  • Decide individually whether to accept them

  • Exclude cookies entirely

Refer to your browser’s help section for instructions. Disabling cookies may limit website functionality.

4. Contacting Us

When you contact us (e.g., via contact form or email), we collect personal data necessary to respond to your inquiry.

  • Legal basis: Article 6 (1)(f) GDPR (legitimate interest in responding to inquiries) or Article 6 (1)(b) GDPR (pre-contractual measures).

  • Retention: Data are erased once your request is resolved, unless statutory retention duties apply.

5. Data Processing for Account Creation and Contract Fulfilment

We process data you provide when creating a customer account or making a purchase (Article 6 (1)(b) GDPR).

  • You may delete your account anytime by contacting info@mistralearplugs.com.

  • After full contract fulfilment, data are retained only as long as legally required (e.g., for tax and commercial purposes).

6. Use of Your Data for Direct Marketing

6.1 Newsletter Subscription

  • Subscription uses double opt-in verification.

  • Legal basis: Article 6 (1)(a) GDPR (consent).

  • Unsubscribe anytime via the link in the newsletter or by emailing info@mistralearplugs.com.

6.2 Newsletter to Existing Customers

  • If you provided your email during a purchase, we may send promotions for similar products (Article 6 (1)(f) GDPR – legitimate interest).

  • You can opt out anytime by contacting info@mistralearplugs.com.

7. Data Processing for Order Handling

We share data only as necessary:

  • Shipping providers – to deliver your order

  • Payment providers – to process payments

Payment providers used:

  • PayPal – PayPal (Europe) S.à r.l. et Cie, 22-24 Boulevard Royal, L-2449 Luxembourg

  • SOFORT/Klarna – SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany

8. Review Reminders

With your consent (Article 6 (1)(a) GDPR), we may send a one-time email asking you to review your purchase. You can withdraw consent at any time.

9. Use of Social-Media Plugins (Shariff Solution)

We use social-media buttons (e.g., Facebook, Instagram). These are inactive links until you click them—ensuring no data is transmitted without your action.

10. Online Marketing

10.1 DoubleClick by Google

  • Used to display relevant ads and measure performance (Article 6 (1)(f) GDPR).

10.2 Google AdWords Conversion Tracking

  • Measures ad performance and conversions (Article 6 (1)(f) GDPR).

11. Web-Analytics Services

We use Google Analytics (with IP anonymization) to analyse user behaviour (Article 6 (1)(f) GDPR).

  • You can opt out via Google’s browser add-on.

12. Retargeting / Remarketing

  • Facebook Pixel (with consent – Article 6 (1)(a) GDPR)

  • Google Remarketing (Article 6 (1)(f) GDPR)

13. Rights of the Data Subject

Under GDPR, you have rights to:

  • Access (Art. 15)

  • Rectification (Art. 16)

  • Erasure (Art. 17)

  • Restriction (Art. 18)

  • Data portability (Art. 20)

  • Withdraw consent (Art. 7(3))

  • Lodge a complaint (Art. 77)

Right to object (Art. 21):

  • You may object to processing based on legitimate interests.

  • You may object to direct marketing at any time.

14. Storage Period

Data are retained for the duration of statutory retention periods (e.g., tax and commercial law). After this, they are routinely deleted unless needed for ongoing legal obligations.

Contact

For privacy-related inquiries or to exercise your rights, contact us at:
info@mistralearplugs.com