Responsibility depends on the selected plan and accepted scope. Some responsibilities belong to MySiteCare, some remain with the Client, and some depend on third-party providers.
MySiteCare respects your privacy and processes personal data only where there is a clear purpose and lawful basis.
This Privacy Notice explains how MySiteCare handles personal data when you visit our website, contact us, request information, use our services, communicate with us, or become a client.
This Notice is mainly about personal data MySiteCare processes for its own business purposes.
When MySiteCare processes personal data contained in a Client website solely on that Client's behalf, MySiteCare may act as a data processor rather than the data controller. That processing is handled separately under the applicable service agreement and, where required, a Data Processing Agreement.
1. Who We Are and Data Controller
For personal data collected through this website, inquiries, account administration, billing, service communications, and MySiteCare's own business operations, the data controller is:
Jeanjen Sisoy Luberio, doing business as MySiteCare Website Application Services
Registered business identity: MySiteCare Website Application Services DTI Business Name No.: 7934250 Registered country: Republic of the Philippines Registered / Business Address: Tampocon II, 6210 Ayungon, Negros Oriental, Philippines MySiteCare primarily serves business customers in the Philippines and also offers digital website services to business customers in Europe and other international markets. Email: info@mysitecare.eu Phone: +63 931 825 9615 Website: mysitecare.eu
The controller decides why and how personal data is processed for MySiteCare's own website, client relationship, billing, communication, security, and service-administration purposes.
2. Scope of This Notice
This Notice applies to personal data processed by MySiteCare in connection with:
Visits to mysitecare.eu.
Contact forms and email inquiries.
Service requests.
Quotations and onboarding.
Client accounts or portals where enabled.
Website projects.
Billing, invoices, and subscriptions.
Customer support and service communication.
Technical security and audit records.
Cookies and similar technologies.
MySiteCare's own business administration.
This Notice does not fully govern personal data that belongs to a Client's own customers, website visitors, booking users, form submitters, or other end users where MySiteCare processes that data solely on the Client's behalf.
That processing is usually handled under the Client's own privacy notice and, where required, a Data Processing Agreement between the Client and MySiteCare.
3. When MySiteCare Acts as Controller
MySiteCare usually acts as a controller when it processes personal data for its own purposes.
This may include:
Responding to inquiries.
Preparing quotations.
Managing client relationships.
Creating and managing accounts.
Providing support.
Sending service communications.
Issuing invoices.
Managing payments and subscriptions.
Keeping business and accounting records.
Securing MySiteCare systems.
Maintaining audit logs.
Managing disputes, complaints, or legal matters.
Improving MySiteCare's own website and services.
Complying with legal obligations.
In those cases, MySiteCare determines why the data is processed and how it is handled.
4. When MySiteCare Acts as Processor
MySiteCare may act as a processor when it handles personal data contained in or collected through a Client website solely to provide services to that Client.
This may happen when MySiteCare provides:
Hosting.
Backups.
Maintenance.
Monitoring.
Website administration.
Technical support.
Troubleshooting.
Recovery assistance.
Migration assistance.
Other agreed website-management services.
In that situation, the Client generally decides why the data is collected and how it is used.
MySiteCare processes that data on the Client's behalf and according to the agreed service terms.
Where GDPR requires it, this processor relationship should be governed by a Data Processing Agreement or equivalent data-processing terms.
The Client remains responsible for its own privacy notices, lawful basis, cookie compliance, customer-data practices, and other controller obligations unless MySiteCare has expressly accepted a specific obligation in writing.
5. Personal Data We May Collect
Depending on how you interact with MySiteCare and which services you use, we may process the following categories of personal data.
Contact and Business-Contact Data
Name.
Business or organisation name.
Role or job title where relevant.
Email address.
Phone number.
Website URL or domain.
Country or general location.
Contact preferences.
Inquiry and Communication Data
Messages sent through contact forms.
Emails.
Support conversations.
Service requests.
Questions about plans or pricing.
Website check or onboarding information.
Notes from calls or discussions.
Attachments or files you choose to send.
Account and Portal Data
Where accounts or portals are enabled, we may process:
Account identifiers.
Login email.
Authentication records.
Password reset events.
Account status.
Role or permission information.
Portal activity.
Service dashboard data.
Security and access logs.
MySiteCare should not publish exact credential-security details that could create unnecessary security risk.
Client and Service Data
Selected plan.
Accepted quotation, order, or service scope.
Website requirements.
Website configuration details.
Domain or hosting information.
Technical instructions.
Approvals.
Service history.
Support history.
Maintenance records.
Monitoring or uptime records where applicable.
Backup and recovery records where applicable.
Billing and Transaction Data
Invoice details.
Billing name and business details.
Billing address where required.
Tax or VAT details where applicable.
Payment status.
Subscription status.
Transaction references.
Refund or credit records.
Payment-provider references.
Accounting records.
Where payment details are collected directly by a payment provider, MySiteCare may not receive or store full card credentials. This must match the actual payment setup before publication.
Technical and Security Data
IP address.
Browser and device information.
Operating system.
Referring page.
Pages visited.
Date and time of activity.
Login attempts.
Security events.
Server logs.
Application logs.
Error logs.
Audit records.
Cookie and Consent Data
Cookie preferences.
Consent choices.
Consent timestamps.
Analytics identifiers where enabled.
Page activity where analytics is enabled.
Advertising identifiers where advertising is enabled.
Advertising technologies are currently disabled unless expressly indicated otherwise.
If advertising is activated on eligible public pages, this Notice and the Cookie Notice should identify the applicable provider, processing purposes, and consent choices before optional advertising technologies are enabled.
Client Website Data
Where MySiteCare acts as a processor for a Client website, personal data may include data submitted through that website by the Client's own customers, visitors, leads, patients, guests, booking users, or other end users.
The exact data depends on the Client website.
This may include names, contact details, messages, booking details, form submissions, account details, logs, or other information collected by the Client website.
The Client is normally the controller for that data.
6. Where We Obtain Personal Data
We may collect personal data from:
You directly, when you contact us, submit a form, create an account, or use our services.
Your business or organisation, where another authorised person communicates with us.
Your website, systems, or accounts where needed to provide services.
Payment, billing, hosting, communication, security, analytics, or technical providers.
Public business websites, directories, professional profiles, public listings, referrals, or other lawful sources where we carry out legitimate business-development activity.
Where GDPR Article 14 applies because personal data was not obtained directly from the individual, MySiteCare will provide required information about the source and processing within the applicable period.
7. Purposes and Legal Bases
We process personal data only where we have a purpose and a lawful basis.
The exact legal basis may depend on the situation.
Purpose | Personal data involved | Legal basis
Responding to inquiries | Contact details, message content, website URL | Steps before entering into a contract and/or legitimate interests in responding to business inquiries
Preparing quotations or service proposals | Contact, business, website, service-requirement data | Steps before entering into a contract
Creating and managing client accounts | Account, contact, authentication, service data | Contractual necessity
Providing MySiteCare services | Client, website, technical, support, account data | Contractual necessity
Hosting, maintenance, monitoring, backups, and support | Service and technical data | Contractual necessity and/or processor processing on behalf of the Client
Billing, invoicing, subscriptions, and payment administration | Billing and transaction data | Contractual necessity and legal obligations where applicable
Accounting, tax, compliance, and legal records | Invoices, payment records, business records | Legal obligation where applicable
Security, abuse prevention, audit logs, and system protection | IP, device, logs, security events | Legitimate interests in protecting systems, services, clients, and business operations
Service administration and internal organisation | Account, support, service, communication records | Legitimate interests in operating and managing the business
Handling complaints, disputes, chargebacks, or legal claims | Account, billing, communication, service records | Legitimate interests and/or legal obligation
Optional analytics | Cookie and usage data | Consent where required
Optional advertising technologies | Cookie, device, usage, or advertising data | Consent where required
Service emails and operational notices | Contact and account data | Contractual necessity or legitimate interests
Optional marketing communications | Contact data and preferences | Consent or another lawful basis where applicable
Where we rely on legitimate interests, those interests may include running the business, responding to professional inquiries, securing systems, preventing abuse, maintaining service records, improving services, and protecting legal rights.
You may object to processing based on legitimate interests where GDPR gives you that right.
8. Cookies, Analytics, and Advertising Technologies
MySiteCare uses cookies and similar technologies only as described in the Cookie Notice and actual cookie settings.
Strictly necessary cookies or similar technologies may be used where needed for website operation, security, consent management, account access, or service functionality.
Optional analytics, advertising, or similar non-essential technologies are used only where actually enabled and where the required consent has been obtained.
You can change or withdraw cookie consent through the Cookie Settings where available.
Belgian data-protection guidance states that non-essential cookies generally require prior valid consent, and the Belgian authority also explains that consent should be withdrawable. The website's actual cookie behavior must match this Notice and the Cookie Notice.
9. Recipients and Service Providers
We do not sell personal data.
We may disclose personal data only where there is an appropriate purpose and lawful basis.
Depending on the service involved, recipients may include:
Hosting, cloud, database, and infrastructure providers.
Email and communication providers.
Security, logging, monitoring, and anti-abuse providers.
Payment and billing providers where enabled.
Accounting, tax, banking, or bookkeeping providers.
Professional advisers.
Analytics providers where enabled.
Advertising providers where enabled and consented to where required.
Domain, DNS, registrar, or technical-service providers.
Support, project-management, or customer-portal providers.
Public authorities, regulators, courts, tax authorities, or law enforcement where legally required or permitted.
Some recipients act as processors on MySiteCare's instructions.
Others may act as independent controllers for particular activities, such as payment providers, banks, accountants, professional advisers, or public authorities.
Where a provider processes personal data for MySiteCare as a processor, MySiteCare uses appropriate contractual terms where required.
MySiteCare does not disclose private customer-account, billing, tax, or service information to advertising providers for advertising purposes.
10. International Data Transfers
Personal data may be processed in countries outside the European Economic Area.
This may happen where MySiteCare personnel, service providers, infrastructure, support systems, hosting systems, communication tools, payment tools, or technical systems lawfully access or process information from another jurisdiction.
Where GDPR rules on international transfers apply, MySiteCare uses an applicable lawful transfer mechanism where required.
These mechanisms may include:
An adequacy decision.
The European Commission's Standard Contractual Clauses.
Another transfer safeguard permitted under GDPR.
A permitted derogation where applicable.
The European Commission recognises Standard Contractual Clauses as pre-approved clauses for certain personal-data transfers outside the EEA, but the correct mechanism depends on the actual data flow and parties involved.
Information about applicable transfer safeguards may be requested using the contact details in this Notice.
Before publication, MySiteCare should confirm the actual countries, providers, hosting locations, access locations, and transfer mechanisms used.
11. Data Retention
We keep personal data only for as long as needed for the purposes described in this Notice, unless a longer period is required or permitted by law.
The exact period depends on the type of data, purpose, legal requirements, account status, dispute risk, security needs, and service relationship.
Indicative retention rules are:
Data category | Typical retention approach
Inquiry and contact-form records | Up to 12 months after the last meaningful contact, unless converted into client records or needed for another lawful purpose
Prospect and business-development records | Retained only while there is a relevant business purpose, objection has not been made, and retention remains lawful
Active client account records | While the client relationship remains active
Service and support records | While needed to provide, document, defend, or improve the service
Contracts, invoices, accounting, and tax records | Retained for the period required by applicable accounting, tax, legal, or audit obligations
Payment and billing records | Retained while needed for payment administration, accounting, disputes, chargebacks, fraud prevention, and legal obligations
Security and audit logs | Retained for a period appropriate to security, fraud prevention, investigation, and system-protection needs
Cookie consent records | Retained while needed to demonstrate or manage consent choices
Analytics data | Retained according to the analytics provider settings and Cookie Notice where analytics is enabled
Backups | Retained according to the applicable backup cycle, provider limits, plan terms, and deletion schedule
Processor data from Client websites | Retained according to the service agreement, Data Processing Agreement, Client instructions, backup cycles, provider limits, and applicable law
Data may be deleted, anonymised, restricted, archived, or retained longer where necessary for legal claims, accounting, tax, security, dispute handling, fraud prevention, or compliance.
A deletion request does not always require immediate deletion where retention is still legally required or otherwise permitted.
GDPR transparency rules require a retention period or criteria used to determine it. Before publication, MySiteCare should verify the real retention periods in its systems and update this table where needed.
12. Security
MySiteCare uses appropriate technical and organisational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.
Measures may include, where appropriate:
Access controls.
Authentication controls.
Role-based access.
Secure configuration.
Logging and monitoring.
Backups.
Separation of systems or environments where appropriate.
Provider security controls.
Internal access limitation.
Incident-response procedures.
The measures used depend on the nature, scope, context, and risk of the processing.
No online system can guarantee absolute security.
13. Personal Data Breaches
MySiteCare maintains procedures for assessing and responding to suspected personal-data breaches.
Where GDPR or another applicable law requires it, MySiteCare will notify the relevant supervisory authority, affected Client, affected individual, or other required party.
Notification depends on the nature of the incident, the role MySiteCare has in the processing, the risk involved, and applicable legal requirements.
Where MySiteCare acts as a processor for Client website data, MySiteCare will handle breach-related duties according to the applicable Data Processing Agreement or service terms.
14. Your GDPR Rights
Depending on the circumstances and legal basis, you may have the following rights under GDPR:
Right to access personal data.
Right to correct inaccurate or incomplete personal data.
Right to request deletion.
Right to restrict processing.
Right to data portability.
Right to object to processing.
Right to withdraw consent where processing is based on consent.
Right not to be subject to certain solely automated decisions.
Right to lodge a complaint with a competent supervisory authority.
These rights are subject to the conditions and limitations in GDPR.
Withdrawing consent does not affect processing carried out before withdrawal.
Some requests may be refused or limited where continued processing is required or permitted by law, such as for accounting, tax, legal claims, security, fraud prevention, or contractual recordkeeping.
15. How to Exercise Your Rights
To exercise your rights, contact MySiteCare using:
Email: info@mysitecare.eu
Your request should clearly identify:
Who you are.
Which right you want to exercise.
The personal data or account involved.
Any information needed to locate the relevant records.
MySiteCare may request information reasonably needed to verify your identity before acting on a request.
MySiteCare will normally respond without undue delay and within one month, subject to extensions permitted by GDPR for complex or numerous requests.
Under GDPR, the controller generally must respond to rights requests without undue delay and within one month, with a possible extension in certain circumstances.
16. Complaints to a Supervisory Authority
You have the right to lodge a complaint with a competent data-protection supervisory authority.
Depending on the circumstances, this may be the supervisory authority in the EU Member State where you live, work, or where the alleged infringement occurred.
Where the Belgian Data Protection Authority is competent, its current contact and complaint information is available through its official website.
17. Automated Decision-Making
MySiteCare does not currently use solely automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.
If this changes, MySiteCare will provide the information required under GDPR before such processing begins.
18. Third-Party Links
The MySiteCare website may contain links to third-party websites, platforms, payment pages, tools, or services.
MySiteCare is not responsible for the privacy practices, content, security, or data processing of third-party websites or services that it does not control.
You should review the privacy notices of those third parties before providing personal data to them.
19. Changes to This Notice
MySiteCare may update this Privacy Notice when its processing activities, service providers, technologies, legal obligations, business operations, or services change.
The current effective date and version will appear at the top of this page.
Where a change requires additional notice or renewed consent under applicable law, MySiteCare will provide that notice or obtain the required consent before the relevant processing begins.
Continued browsing is not treated as automatic consent to materially different processing where valid consent is required.
20. Privacy Contact
For questions about this Notice or how MySiteCare handles personal data, contact:
MySiteCare Website Application Services Email: info@mysitecare.eu Phone: +63 931 825 9615
A separate privacy email may be added later if MySiteCare decides to operate one.
Do not label any person as a Data Protection Officer unless a DPO has actually been appointed and the GDPR DPO requirements have been assessed.
Practical Summary
MySiteCare processes personal data for inquiries, client communication, account management, service delivery, billing, security, support, and website operation.
MySiteCare is usually the controller for its own website, client, billing, account, and business records.
MySiteCare may act as a processor when handling personal data inside a Client website on that Client's behalf.
We do not sell personal data.
Optional analytics, advertising, and similar technologies should only be used where actually enabled and where the required consent has been obtained.