Privacy & Cookies

1. Who is responsible for your data

The data controller is Mitchell Strategic Solutions Group (MSSG), registered with the Ministry of Finance of Spain under NIF Z0827204Z and with Dun & Bradstreet under D-U-N-S number 374032976.

Privacy enquiries can be sent to info@mitchellgroup.eu.

2. Information we process

Website security and delivery

Our hosting and security providers may process technical information such as IP address, browser and device information, requested pages, timestamps and security signals. This is necessary to deliver the website, prevent abuse and maintain its security.

Privacy-friendly analytics

We use Plausible Analytics to understand aggregate website use, including page views, referral sources, countries, device types and interactions such as contact enquiries or document downloads. Plausible does not use cookies, persistent identifiers or cross-site tracking, and does not build individual visitor profiles.

Contact enquiries

If you use the contact form, we receive the name, email address, organisation and message you provide. We use this information only to assess and respond to your enquiry, discuss possible cooperation and keep an appropriate record of the correspondence.

3. Legal grounds

Contact data is processed to take steps at your request before entering into a contract, or on the basis of our legitimate interest in responding to professional enquiries. Website security, basic traffic measurement and service improvement are based on our legitimate interests in operating a secure and effective business website.

4. Cookies

The website does not use advertising or analytics cookies. Our security provider Cloudflare may set the strictly necessary__cf_bm cookie to distinguish legitimate visitors from automated traffic and protect the website from abuse. It expires after approximately 30 minutes of inactivity and is not used by MSSG to identify or profile visitors.

Because this cookie is necessary for website security, it does not require consent. If we introduce any non-essential cookies in the future, we will request consent before they are used.

5. Service providers and international transfers

We use service providers for website security and delivery, privacy-friendly analytics, contact-form processing and email. They process information only as needed to provide those services. Providers currently include Cloudflare, Plausible, home.pl and Google Workspace services.

Where a provider processes data outside the European Economic Area, we rely on applicable safeguards required by EU data-protection law.

6. Retention

Contact correspondence is kept only for as long as reasonably necessary to handle the enquiry, maintain business records and meet legal obligations. Aggregated analytics are retained according to our analytics plan and are not used to identify individual visitors. Security records are retained according to the relevant provider's security and operational requirements.

7. Your rights

Subject to the conditions of applicable law, you may request access to, correction or deletion of your personal data, restriction of processing, data portability, or object to processing based on legitimate interests. Contact info@mitchellgroup.eu to exercise these rights.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) or the competent supervisory authority in your country.

8. Changes to this notice

We may update this notice when the website, our service providers or legal requirements change. The current version and update date will always be available on this page.