GDPR Compliance

This notice supplements our Privacy Policy and applies to residents of the European Economic Area (EEA), the United Kingdom, and Switzerland. It explains how MitePresscomplies with the General Data Protection Regulation (“GDPR”).

1. Data controller

MitePressis the “controller” of personal data collected through the Service. You can reach us through the contact channels listed on our website.

2. Legal bases for processing

We rely on the following legal bases to process your personal data:

• Consent — where you have opted in, for example for personalized advertising or non-essential cookies;
• Contract — to operate accounts and provide services you request;
• Legitimate interests — to secure the Service, prevent abuse, and measure aggregate usage in ways that do not override your rights; and
• Legal obligation — where we must retain or disclose information to comply with applicable law.

3. Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete information;
• Erase(“right to be forgotten”) personal data where the legal conditions are met;
• Restrict or object to certain types of processing;
• receive a copy of your data in a structured, commonly used format (data portability);
• withdraw consent at any time for processing based on consent; and
• lodge a complaint with your local supervisory authority.

4. International transfers

The Service may be operated from outside the EEA. Where we transfer personal data outside the EEA, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect your information.

5. Data retention

We keep your personal data only for as long as necessary for the purposes described in our Privacy Policy, or as required by law. When no longer needed, data is deleted or anonymized.

6. Cookies and tracking

Non-essential cookies (such as those used for analytics and personalized advertising) are set only with your consent. You can change your preferences at any time through your browser or our consent banner.

7. How to exercise your rights

To exercise any of the rights above, please contact us through the channels listed on our website. We may ask you to verify your identity before responding. We aim to reply within one month.

8. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

9. Changes

We may update this notice when our practices change. Material changes will be reflected by updating the “Last updated” date at the top of this page.