Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

⟨ to be supplied before publication ⟩
Bachstraße 30B, 26892 Dörpen, Germany
Email: support@mysticalseo.com

2. Data we collect and why

Browsing the site. Our hosting provider automatically records standard server log data (IP address, date and time, requested page, browser type) for security and stability, as is technically necessary to deliver the website. Our hosting provider: ⟨ to be supplied before publication ⟩.

Contact form. If you use the contact form, we process the name, email address, phone number (if provided), company (if provided), and message you enter, in order to answer your enquiry (Art. 6(1)(b) GDPR — pre-contractual measures, or Art. 6(1)(f) GDPR — our legitimate interest in responding to enquiries). At present, submitted messages are not transmitted to or stored on any server — the form validates and confirms in your browser only, and no enquiry is currently forwarded to us. This will change once message delivery is enabled; this policy will be updated at that time.

Ordering a package. If you place an order, we process the contact, billing, and engagement details you enter (name, email, phone, company, VAT ID if provided, billing address, website URL, and the details of your engagement) in order to process the order (Art. 6(1)(b) GDPR). Order data is currently stored in your browser only (localStorage/sessionStorage) and is not transmitted to or stored on any server. Payment is processed in a demonstration mode: no card data is captured, transmitted, or stored, anywhere, at any point.

Cart. Items you add to the cart are stored in your browser's local storage (mysticalseo.cart.v1) so your cart persists between visits. This is not transmitted to us.

3. Cookies and local storage

See the Cookie Policy for the full list of cookies and storage keys used, and how to manage your preferences. In summary: essential storage runs the cart and remembers your cookie choice and requires no consent; Google Analytics 4 is used only with your explicit, opt-in consent and does not load before you give it.

4. Google Analytics 4

With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). GA4 uses cookies and similar technologies to analyse how visitors use the site. This processing involves a transfer of data to Google, including to the United States; Google is certified under the EU-U.S. Data Privacy Framework and/or relies on the European Commission's Standard Contractual Clauses as an additional safeguard. You can withdraw your consent at any time via "Cookie settings" in the footer, with effect for the future. Legal basis: Art. 6(1)(a) GDPR (consent).

5. Recipients of data

Data is not sold or passed to third parties for their own marketing purposes. Where a processor acts on our behalf (e.g. a hosting provider or, once enabled, Google as described above), processing is governed by a data-processing agreement under Art. 28 GDPR.

6. Retention

We retain data only for as long as necessary for the purpose it was collected for, or as required by German commercial and tax law (typically 6–10 years for business correspondence and invoices, per §§ 147 AO / 257 HGB). Cart and checkout data stored in your browser is retained until you clear it or it expires per the Cookie Policy.

7. Your rights

Under the GDPR, you have the right to: access the data we hold about you (Art. 15); have inaccurate data corrected (Art. 16); have data erased (Art. 17); restrict processing (Art. 18); receive your data in a portable format (Art. 20); and object to processing based on legitimate interest (Art. 21). To exercise any of these rights, contact support@mysticalseo.com. You also have the right to lodge a complaint with a supervisory authority — for this business, the competent authority is the Landesbeauftragte für den Datenschutz Niedersachsen (LfD Niedersachsen).

8. Security

The site is served over HTTPS. No payment card data is captured, transmitted, or stored by this site at any point.

9. Changes to this policy

We may update this policy as the site or applicable law changes. The date at the top of this page reflects the most recent revision.