Privacy Policy
1. Controller
Paul Georg Mura & Alexandra Anna Mura
C/ Agrupación Coral Ritmo y Juventud 29B
03186 Torrevieja, Spain
Email: info@paulmura.com & info@olamura.com
2. General information and legal bases
We take the protection of personal data seriously. Processing is carried out in accordance with the General Data Protection Regulation (GDPR) and the supplementary Spanish data protection rules (LOPDGDD).
Where we process personal data, we rely on the following legal bases depending on the purpose:
- Art. 6(1)(a) GDPR – your consent (e.g. for Google Analytics)
- Art. 6(1)(b) GDPR – handling your enquiry via the contact form or by email
- Art. 6(1)(f) GDPR – our legitimate interest in the secure and technically faultless operation of the website (e.g. server log files)
3. Hosting
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes the data technically required to deliver the website on our behalf (data processing pursuant to Art. 28 GDPR). The legal basis is Art. 6(1)(f) GDPR.
As Vercel is a US provider, data may be transferred to the USA. Vercel is certified under the EU-US Data Privacy Framework; additionally, the EU Commission's Standard Contractual Clauses (SCC) apply. More information: vercel.com/legal/privacy-policy
4. Server log files
When the website is accessed, information is automatically collected in so-called server log files transmitted by your browser. This includes:
- browser type and version
- operating system used
- referrer URL
- IP address
- date and time of the server request
This data is not merged with other data sources and is used solely for the technical operation and security of the website. The legal basis is Art. 6(1)(f) GDPR. The log files are deleted after a short period.
5. Cookies and consent
On your first visit, only technically necessary entries are set (e.g. to store your cookie decision in your browser's local storage). Non-essential services – in particular Google Analytics – are only used with your consent (Art. 6(1)(a) GDPR).
Using the consent banner, you decide for yourself whether to allow Google Analytics. You can withdraw your consent at any time with effect for the future by clicking “Cookie settings” in the footer below and changing your selection. The lawfulness of processing carried out up to the withdrawal remains unaffected.
6. Google Analytics
With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Analytics uses cookies and similar technologies to analyse the use of the website (e.g. pages visited, time spent, approximate regional origin, device and browser used). In Google Analytics 4, IP addresses are not logged or stored. The analysis helps us improve our offering.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. The service is only loaded after your consent.
In the course of using Google Analytics, data may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework; additionally, Standard Contractual Clauses apply. For more information, see Google's privacy policy: policies.google.com/privacy
You can withdraw your consent at any time via “Cookie settings” in the footer.
7. Contacting us
If you contact us via the contact form or by email, we process the data you provide – in the contact form: name, email address, phone number (optional) and your message – solely to handle your enquiry.
To send the form messages, we use the service Resend (Resend, Inc., USA) as a processor. This may involve a transfer of data to the USA, which is safeguarded by Standard Contractual Clauses.
The legal basis is Art. 6(1)(b) GDPR (handling your enquiry) or Art. 6(1)(f) GDPR (responding to general enquiries). The data is not passed on to any other third parties.
We store your enquiry until it has been fully processed and then delete it, unless statutory retention periods apply.
8. Recipients and transfers to third countries
Your data is only transferred to the extent described above. The following service providers process data on our behalf or as recipients:
- Vercel Inc. (USA) – hosting
- Google Ireland Limited / Google LLC (USA) – Google Analytics (only with consent)
- Resend, Inc. (USA) – sending contact form messages
Where data is transferred to the USA, this takes place on the basis of the EU-US Data Privacy Framework and/or the EU Commission's Standard Contractual Clauses pursuant to Art. 46 GDPR.
9. Rights of data subjects
Within the framework of the statutory provisions, you have the following rights:
- access to your stored data (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (“right to be forgotten”, Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing (Art. 21 GDPR)
- withdrawal of a given consent with effect for the future (Art. 7(3) GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is, in particular, the Spanish data protection authority:
Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, Spain – www.aepd.es
How to exercise your rights
To exercise these rights, an informal email to info@paulmura.com or info@olamura.com is sufficient.
10. Data security
We use technical and organisational measures to protect your data against unauthorised access, loss or destruction. Transmission takes place via an encrypted HTTPS connection.
11. Changes to this privacy policy
We reserve the right to adapt this privacy policy in the event of changes to our website or legal requirements. The current version published on this page always applies.
12. Online dispute resolution pursuant to Art. 14(1) ODR Regulation
The European Commission provides a platform for online dispute resolution:
Last updated: