Last updated: 27 July 2026
Privacy & Cookies
This notice explains what information is processed when you visit mitchellgroup.eu or contact Mitchell Strategic Solutions Group.
1. Who is responsible for your data
The data controller is Mitchell Strategic Solutions Group (MSSG), registered with the Ministry of Finance of Spain under NIF Z0827204Z and with Dun & Bradstreet under D-U-N-S number 374032976.
Privacy enquiries can be sent to info@mitchellgroup.eu.
2. Information we process
Website security and delivery
Our hosting and security providers may process technical information such as IP address, browser and device information, requested pages, timestamps and security signals. This is necessary to deliver the website, prevent abuse and maintain its security.
Privacy-friendly analytics
We use Cloudflare Web Analytics to measure aggregate page views, referral sources, countries, device types and site performance. It does not use analytics cookies or track visitors across websites. We do not send contact form contents to this service.
Contact enquiries
If you use the contact form, we receive the name, email address, organisation and message you provide. We use this information only to assess and respond to your enquiry, discuss possible cooperation and keep an appropriate record of the correspondence.
3. Legal grounds
Contact data is processed to take steps at your request before entering into a contract, or on the basis of our legitimate interest in responding to professional enquiries. Website security, basic traffic measurement and service improvement are based on our legitimate interests in operating a secure and effective business website.
4. Cookies
The website does not use advertising or analytics cookies. Our security provider Cloudflare may set the strictly necessary__cf_bm cookie to distinguish legitimate visitors from automated traffic and protect the website from abuse. It expires after approximately 30 minutes of inactivity and is not used by MSSG to identify or profile visitors.
Because this cookie is necessary for website security, it does not require consent. If we introduce any non-essential cookies in the future, we will request consent before they are used.
5. Service providers and international transfers
We use service providers for website security and delivery, privacy-friendly analytics, contact-form processing and email. They process information only as needed to provide those services. Providers currently include Cloudflare, home.pl and Google Workspace services.
Where a provider processes data outside the European Economic Area, we rely on applicable safeguards required by EU data-protection law.
6. Retention
Contact correspondence is kept only for as long as reasonably necessary to handle the enquiry, maintain business records and meet legal obligations. Aggregated analytics are retained according to our analytics plan and are not used to identify individual visitors. Security records are retained according to the relevant provider's security and operational requirements.
7. Your rights
Subject to the conditions of applicable law, you may request access to, correction or deletion of your personal data, restriction of processing, data portability, or object to processing based on legitimate interests. Contact info@mitchellgroup.eu to exercise these rights.
You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) or the competent supervisory authority in your country.
8. Changes to this notice
We may update this notice when the website, our service providers or legal requirements change. The current version and update date will always be available on this page.
Last updated: 8 September 2026
MSSG Publisher: Privacy and data deletion
MSSG Publisher is our internal tool for preparing, scheduling and publishing approved content to authorised MSSG Facebook and Instagram accounts. It is not a public sign-up service.
Who is responsible
Mitchell Strategic Solutions Group (MSSG), registered in Spain under NIF Z0827204Z, is responsible for personal data processed through this integration. Contact info@mitchellgroup.eu for privacy questions or requests.
Information the integration uses
- Authorised account and Page identifiers, names, usernames, linked Instagram account details and granted permissions.
- Access credentials needed to communicate with Meta. These are stored separately from public content and are not published.
- Approved captions, photographs, videos, publication times, and the usernames of people tagged or invited as collaborators. Content may contain identifiable people and their voices.
- Publishing records: upload and post identifiers, processing status, published links, error codes and audit timestamps. Account and publication insights may be retrieved when authorised for performance checks.
The current publisher does not collect private messages, contact lists or payment information, and does not operate advertising campaigns. An ordinary viewer does not need to connect a Meta account to this tool.
Why we use this information
We use it to identify the correct accounts, upload approved material, schedule publication, invite collaborators, check publication status, prevent duplicate posts and investigate failures. Our basis for operating and securing our own communications is our legitimate interest in running MSSG’s public channels. Where consent is required for particular content, that content requires the relevant permission separately; connecting an account does not provide consent on behalf of everyone shown in a video.
Storage and sharing
The publisher runs on Cloudflare Workers. Its database stores publishing jobs and audit records; Cloudflare R2 stores media supplied for publication. Access is restricted to authorised administration. Temporary signed media links allow Meta to retrieve uploads. Working copies of content and operational records may also be held on our controlled devices and in Google Drive.
Meta receives the information necessary to publish on Facebook and Instagram. Published content and collaborator invitations are then handled under Meta’s platform rules and privacy policies. Public posts can be viewed, shared or copied by others according to their platform visibility. MSSG does not sell information obtained through this integration.
Our separate LinkedIn publishing workflow uses Buffer. It is not a recipient of the Facebook or Instagram access credentials held by MSSG Publisher. Providers may process information outside your country; their applicable contractual data-protection and transfer arrangements govern that processing.
Retention and access
There is currently no automatic fixed-period purge of publishing jobs, media or audit records. We retain working material for publication, reuse and troubleshooting, and assess removal when it is no longer needed or a deletion request is received. Credentials are retained while the integration is authorised and needed, and must be revoked or replaced when access ends. A post already published on Meta is separate from its working copy in this tool.
Request deletion or disconnect the integration
Email info@mitchellgroup.eu with the subject “MSSG Publisher data deletion”. Tell us the relevant account username, post link or material and what you want removed. Do not send passwords or access tokens. We may ask for limited information to verify that you are entitled to make the request.
We will assess your request, remove relevant data from systems we control where required, and explain any retention required by law or for legal claims. You can also request access, correction, restriction or portability where applicable, or object to processing based on legitimate interests. You may complain to the Spanish Data Protection Agency (AEPD) or your competent supervisory authority.
An authorised account administrator can revoke the app’s permissions in Meta’s business or integration settings. Revocation stops future authorised access; it does not by itself delete existing posts or copies held by other people. If you also want a public MSSG post removed, identify it in your request so we can address it separately.
This notice covers MSSG Publisher. For our website, see the website privacy and cookies notice. We will update this page when the integration changes.