Privacy Policy
Introduction
This privacy policy explains which personal data we collect when you visit mitero.net or place an order, why we collect it, who we share it with and what rights you have. We process your data in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
Controller of your data
The controller responsible for processing your personal data on mitero.net is:
Commerto Limited
Dositheou 5, PARABUILDING, BLOCK A, 1st floor, Flat/Office 102A
1071 Nicosia, Cyprus
Company registration number: HE 414808
Email: [email protected]
Commerto Limited is the seller and contracting party for orders on mitero.net and processes the data arising in that context as controller within the meaning of the GDPR. For payment processing we use payment service providers (see below). Where a payment service provider processes your payment data for its own purposes, for example fraud prevention or compliance with its own legal obligations, it is an independent controller for that processing and applies its own privacy policy.
What data we collect and why
When you place an order, we process the data required to fulfil it: your name, delivery address, email address, telephone number (if provided) and the order details. We receive this data directly from you during checkout.
Purpose: concluding and performing the purchase contract, dispatching your order, customer service and handling returns, refunds and our 90-day money-back guarantee.
Legal basis: performance of the contract with you and pre-contractual measures, including the 90-day money-back guarantee (Art. 6(1)(b) GDPR). We also process this data to comply with our legal obligations, such as tax and commercial record-keeping requirements (Art. 6(1)(c) GDPR), and to establish, exercise and defend legal claims on the basis of our legitimate interest (Art. 6(1)(f) GDPR).
When you pay, the payment is processed by the payment service provider you have chosen (see Payment Methods). You enter your payment details, such as card numbers, directly with the payment service provider or they are collected there; we do not store card data ourselves. From the payment service providers we receive information about the payment status (for example paid, failed, refunded).
Purpose: processing the payment and matching it to your order.
Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
When you contact us, we process the data in your message (name, email and anything else you tell us).
Purpose: answering your enquiry.
Legal basis: our legitimate interest in replying to you (Art. 6(1)(f) GDPR), or performance of the contract where your enquiry concerns an existing or planned order (Art. 6(1)(b) GDPR).
When you visit mitero.net, we process technical data such as your IP address, device and browser type and the pages visited. We also use cookies and similar technologies; for details, see our Cookie Policy.
Purpose: secure operation of the website and, where corresponding services are integrated through Google Tag Manager, understanding how the website is used.
Legal basis: your consent for non-essential cookies and similar technologies (Art. 6(1)(a) GDPR) and our legitimate interest in a secure, functioning website for essential cookies (Art. 6(1)(f) GDPR).
Providing personal data during checkout is voluntary, but it is necessary for concluding and performing a purchase contract. We do not use your data for automated decision-making or profiling that produces legal effects concerning you.
Marketing
Email. If you have bought from us, we may send you emails about our own similar products, based on our legitimate interest in direct marketing to existing customers (Art. 6(1)(f) GDPR in conjunction with Article 13(2) of the ePrivacy Directive 2002/58/EC and its national implementation). You may object at any time, free of charge: every marketing email contains an unsubscribe link, and you can also write to us at [email protected]. If you have consented to marketing communications, for example by ticking the relevant consent boxes during checkout, we use your contact details on the basis of that consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time.
Other channels. Where you have given us your consent, we may also send you offers and product information by SMS or telephone (Art. 6(1)(a) GDPR). You can withdraw this consent at any time by writing to us.
Online advertising and retargeting. Where advertising or retargeting services are integrated through Google Tag Manager, those services process certain data (such as cookie identifiers or information about pages visited) in order to show you relevant advertising. This takes place only on the basis of your consent (Art. 6(1)(a) GDPR). The providers concerned are independent controllers for the data they collect. For more on managing and withdrawing your consent, see Privacy Settings.
International data transfers
Where a processor or recipient is located outside the European Economic Area, we ensure an adequate level of protection through the European Commission’s standard contractual clauses or an adequacy decision.
How long we keep your data
We keep order data for as long as necessary to fulfil your order and our 90-day money-back guarantee, and after that for the retention periods required by tax and commercial law. We keep enquiries only for as long as necessary to handle them and for a reasonable period afterwards. We keep marketing data until you object or withdraw your consent; after that we no longer use it for marketing purposes. For the storage period of cookies and similar technologies, see the Cookie Policy.
Your rights
Under the GDPR you have the right to:
- obtain access to the data we hold about you,
- have inaccurate data rectified,
- have your data erased,
- have processing restricted or object to it,
- receive your data in a portable format,
- withdraw consent at any time (without affecting the lawfulness of processing carried out before the withdrawal).
To exercise these rights, write to us at [email protected]. You also have the right to lodge a complaint with a data protection supervisory authority, in particular the authority in your EU country of residence or the supervisory authority competent for us in Cyprus, the Commissioner for Personal Data Protection.
Changes to this policy
We may update this policy to reflect changes to our processing or the applicable legal situation. The current version is always available on mitero.net, with the date of the last update shown below.
Contact
Commerto Limited
Dositheou 5, PARABUILDING, BLOCK A, 1st floor, Flat/Office 102A
1071 Nicosia, Cyprus
Email: [email protected]
Further details are available on the Contact page.
Last updated: 24 September 2026