This privacy notice explains how Organ Desk Mist collects, uses, shares, retains, and deletes personal data in connection with the website and its contact features. It is written as a data lifecycle notice so you can follow the path of information from collection through closure.
This introduction outlines how information is handled, what rights may apply, and where to direct policy-related questions.
Data handling overview
This section outlines the categories of personal information we may process, where that information comes from, the types of cookies used on the site, and the controls available to you.
When you use the contact form or otherwise interact with the website, we may process your name, email address, phone number if you provide it, inquiry message, and service preferences. We also process limited technical data such as server request metadata and browser or device information to support delivery, diagnose issues, and protect the site.
We receive personal data from you when you complete forms, send a message, or choose to share contact details and preferences. Technical data is generated automatically by your browser and our servers during normal site use, including information needed for security, routing, and basic operational logs.
The website uses essential cookies for operation and cookies that store privacy choices. Essential cookies help the site load and function properly, while preference cookies remember your selected consent or privacy settings. We do not state that analytics or marketing cookies are active unless they are separately enabled and disclosed.
We use essential cookies and cookies that remember privacy preferences. Essential cookies support core site functions, while preference cookies help record your selected settings. Where your browser allows it, you may block or delete cookies, but some functions may not work as intended if essential cookies are disabled.
We use personal data to respond to contact requests, manage service preferences, deliver the website technically, maintain security, and keep records needed for administration or legal compliance. We do not use the data for purposes that are incompatible with the reason it was collected unless the law allows or requires a different use.
We may share data with service providers that assist with hosting, technical delivery, security, or message handling. These recipients act only for the operational purpose for which the data is shared and are expected to protect it under appropriate confidentiality and security obligations.
We may disclose personal data to public authorities, courts, or other recipients when required to comply with law, enforce our rights, protect the website, or respond to a lawful request. Any disclosure is limited to the information reasonably necessary for the stated purpose.
You may have rights to know what data is held, correct inaccurate information, request deletion where appropriate, object to certain processing, and ask for limits on use in specific cases. Some requests may be partially satisfied rather than fully granted if the law requires us to keep certain records or continue processing for a valid purpose.
To exercise a right, submit a clear request through one of the contact channels listed in this policy and identify the data or activity involved. We may ask for information needed to verify identity, understand the request, and confirm whether any legal exception applies. Once reviewed, we will respond with the action taken or the reason a request cannot be fully completed.
We keep personal data only for as long as it is needed to answer an inquiry, maintain the website, meet legal duties, resolve disputes, or support security and technical records. When the relevant purpose ends, the data is deleted, anonymized, or retained only to the extent required by law or a legitimate operational need that still applies.
If we make material changes, we will update this page and use a suitable notice method for the circumstances. The revised version will apply from the effective date shown in the policy, and earlier versions may be kept for reference where needed for compliance or recordkeeping.
Where GDPR applies, we process personal data on a lawful basis that matches the relevant activity, such as responding to a request, meeting a legal obligation, protecting the website, or relying on consent where it is required. We limit processing to what is necessary for the stated purpose and keep records only for as long as the data remains needed for that purpose or for compliance.
Because Organ Desk Mist is based in Spain and serves users in the European Union, GDPR principles apply where the regulation governs our processing activities.
Where applicable, you may request access, rectification, erasure, restriction, portability, or objection, and you may withdraw consent where processing depends on consent. We will assess each request against the legal basis for processing, any retention duty, and any limitation that applies under EU law before taking action.
Use the listed service channels for privacy questions, rights requests, or policy clarifications.
