Privacy Policy

1. Introduction

Welcome to MYCOTRON. We operate the website https://mycotron.eu (including its alias https://mycotron.com), hereinafter referred to as the “Service”. We are committed to protecting your personal data and respecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and applicable local data protection laws.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, register an account, make a purchase, leave product reviews, or subscribe to our newsletter.

2. Data Controller

The data controller responsible for your personal data is the operator of MYCOTRON.eu. If you have any questions about this Privacy Policy or our data protection practices, please contact us via email at: support@mycotron.eu.

3. What Personal Data We Collect and Why We Collect It

A. User Registration & Account Data

• Data Collected: Name, email address, username, encrypted password, and date of registration.
• Purpose: To create and maintain your user profile, allow access to saved system settings, and manage your custom mushroom cultivation presets.
• Legal Basis: Performance of a contract (Art. 6(1)(b) GDPR).

B. E-Commerce & Purchase Data

• Data Collected: First and last name, billing address, shipping address, phone number, email address, and order details.
• Payment Data: Payment transactions are processed securely via third-party payment gateways. We do not store your raw credit card numbers or banking credentials on our servers.
• Purpose: To process payments, ship the MYCOTRON device and accessories, handle potential warranty/returns, and combat financial fraud.
• Legal Basis: Performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal tax/accounting obligations (Art. 6(1)(c) GDPR).

C. Product Reviews and Comments

• Data Collected: Name/Username, email address, IP address, browser user agent string, and the text of your review or comment.
• Purpose: To allow users to share feedback on our automated cultivation boxes. The IP address and user agent string are collected strictly to assist in automated spam detection.
• Legal Basis: Legitimate interests (Art. 6(1)(f) GDPR) to maintain website security and display authentic user testimonials.

D. Email Newsletter Subscription

• Data Collected: Email address.
• Purpose: To send you product updates, notifications regarding firmware updates, tips for mushroom cultivation, and promotional offers.
• Legal Basis: Consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time by clicking the “Unsubscribe” link at the bottom of any newsletter.

E. Technical & Cookies Data

• Data Collected: IP addresses, browser type, device type, operating system, and interaction data.
• Important Technical Notice: To maximize your privacy and optimize website speed, all typography fonts are hosted locally on our servers (Local Google Fonts) and do not leak user tracking data to external networks.
• Purpose: To maintain website stability, monitor server performance, and improve the user experience of our online store.
• Legal Basis: Consent for analytical cookies (Art. 6(1)(a) GDPR) and Legitimate interests for strictly necessary functional cookies (Art. 6(1)(f) GDPR).

F. Google Analytics Tracking

• Data Collected: IP addresses (automatically anonymized by Google Analytics 4), cookie identifiers, device characteristics, operating system, browser type, and behavioral data (such as pages visited, time spent on the site, and e-commerce purchase events).
• Purpose: To analyze user behavior, measure the performance of our marketing campaigns, and improve the shopping experience for the MYCOTRON device. This data helps us understand which features of our growbox automation are of most interest to our audience.
• Data Location: Data collected via Google Analytics may be transferred to and stored on servers managed by Google LLC outside the European Economic Area (EEA), primarily in the United States.
• Legal Basis: Consent (Art. 6(1)(a) GDPR). Google Analytics will only activate and place tracking cookies on your device if you explicitly grant permission via our cookie consent banner. You can revoke your consent or opt out of tracking at any time by clearing your browser cookies or adjusting your consent banner preferences.G. Third-Party Authentication (Google Sign-In)

G. Third-Party Authentication (Google Sign-In)

• Data Collected: When you choose to log in or register an account on our Service using your Google Account, we collect your public profile information (specifically your first name, last name, and profile picture URL) and your verified email address provided by Google via the OAuth 2.0 protocol. We do not receive, access, or store your Google Account password.
• Purpose: To streamline the registration and login process, verify your identity, auto-fill your customer profile in our e-commerce checkout, and link your MYCOTRON device settings to a secure account without requiring a separate password.
• Legal Basis: Consent (Art. 6(1)(a) GDPR) granted by you at the moment you click the “Sign in with Google” button and approve the access prompt, or Performance of a contract (Art. 6(1)(b) GDPR) to manage your store account. You can revoke our access to your Google account at any time via your Google Account Security Settings or by requesting the deletion of your site account.

4. Media and Uploads

If you register an account and upload images to the Service (for example, uploading photos of your mushroom harvest to your product reviews), you should avoid uploading images with embedded location data (EXIF GPS) included. Other visitors to the website can download and extract any location data from images on the website.

5. How Long We Retain Your Data

• Account & Store Data: We store your personal information for as long as your user account remains active. Accounting and transaction records are kept for up to 5–10 years to comply with EU and national tax regulations.
• Comments & Reviews: If you leave a comment or review, the comment and its metadata are retained indefinitely so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
• Newsletter Data: We retain your newsletter email address until you choose to unsubscribe or withdraw your consent.

6. Data Sharing and Third-Party Disclosures

We do not sell or rent your personal data to third parties. We only share information with trusted service providers necessary to run our e-commerce operations, including:

• Delivery & Logistics Providers: (e.g., Omniva, DPD, or local postal networks) to physically ship your MYCOTRON units.
• Payment Gateways: To process secure credit card or bank transfers.
• Hosting Providers: Secure server infrastructure located within the European Union.
• Spam Protection Services: Visitor comments and reviews may be checked through an automated spam detection service.
• Google LLC (Google Identity Services / OAuth): To provide a secure and simplified user authentication mechanism via Google accounts.

7. Your GDPR Rights

As a resident of the European Union, you possess the following data protection rights:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): You can request that we delete your personal data, subject to legal retention duties (like tax invoices).
• Right to Restrict Processing: You can request that we limit how we process your data.
• Right to Data Portability: You can request a digital export of your data in a machine-readable format.
• Right to Object: You can object to our processing of your personal data based on legitimate interests.

To exercise any of these rights, please submit an official request to our support email. If you believe we are mishandling your data, you have the right to lodge a complaint with your local Data State Inspectorate (Datu valsts inspekcija in Latvia, or your local EU equivalent).

Notice to California and US Residents (CCPA/CPRA): We do not “sell” or “share” your personal data with third parties for monetary or other valuable consideration, as defined under the California Consumer Privacy Act (CCPA). All data sharing is strictly limited to infrastructure service providers necessary to fulfill your orders (e.g., shipping and payment processing).

8. Security of Your Data

We utilize commercial-grade security measures, including SSL/TLS encryption for all data transfers across https://mycotron.eu and https://mycotron.com. While we take every reasonable engineering step to safeguard your data, no method of transmission over the internet is 100% secure.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy text on this page and updating the “Effective Date” at the top. You are advised to review this Privacy Policy periodically for any changes.