1. Data controller
Paul Georg Mura & Alexandra Anna Mura
Calle Magnolio 35, 03191 Pinar de Campoverde (Pilar de la Horadada), Alicante, Spain
Email: info@polasymbiosis.com
2. General information and legal bases
We take the protection of personal data seriously. Processing is carried out in accordance with the General Data Protection Regulation (GDPR) and the supplementary Spanish data protection law (LOPDGDD).
Where we process personal data, we rely on the following legal bases depending on the purpose:
- Art. 6 (1) (a) GDPR – your consent (e.g. for Google Analytics)
- Art. 6 (1) (b) GDPR – handling your enquiry via the contact form or by email
- Art. 6 (1) (f) GDPR – our legitimate interest in the secure and technically error-free operation of the website
3. Hosting
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes on our behalf the data technically required to deliver the website (processing under Art. 28 GDPR). The legal basis is Art. 6 (1) (f) GDPR.
As Vercel is a US provider, data may be transferred to the USA. Vercel is certified under the EU-US Data Privacy Framework; in addition, the EU Commission's Standard Contractual Clauses (SCCs) apply. Further information: vercel.com/legal/privacy-policy
4. Server log files
When you visit the website, information transmitted by your browser is automatically recorded in server log files:
- browser type and version
- operating system used
- referrer URL
- IP address
- date and time of the server request
5. Cookieless traffic measurement (Vercel Analytics & Speed Insights)
We use Vercel Web Analytics and Vercel Speed Insights to measure page views and load times. These services set no cookies and store no personal data; visitors are recognised only by a transient hash derived from request data that cannot be traced back to an individual. The legal basis is Art. 6 (1) (f) GDPR. Further information: vercel.com/docs/analytics/privacy-policy
6. Cookies and consent
On your first visit to our website, only strictly necessary entries are set (e.g. to store your cookie decision in your browser's local storage). Non-essential services – in particular Google Analytics – are used only with your consent (Art. 6 (1) (a) GDPR).
Via the consent banner, you decide for yourself whether to allow Google Analytics. You can withdraw your consent at any time with effect for the future by clicking "Cookie settings" in the footer and changing your selection.
7. Google Analytics
With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies to analyse the use of the website. In Google Analytics 4, IP addresses are not logged or stored.
The legal basis is your consent under Art. 6 (1) (a) GDPR. The service is only loaded after you have given your consent. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. Further information: policies.google.com/privacy
8. Contacting us
If you contact us via the contact form, by email, phone or WhatsApp, we process the data you provide – for the contact form: name, email address, phone number (optional), company (optional) and your message – solely to handle your enquiry.
To send form messages we use the service Resend (Resend, Inc., USA) as a processor. This may involve a transfer of data to the USA, which is safeguarded by Standard Contractual Clauses. If you contact us via WhatsApp, the privacy policy of WhatsApp Ireland Ltd. also applies.
The legal basis is Art. 6 (1) (b) GDPR or Art. 6 (1) (f) GDPR. We store your enquiry until it has been fully processed and then delete it, unless statutory retention periods require otherwise.
9. Recipients and transfers to third countries
The following service providers process data on our behalf or as recipients:
- Vercel Inc. (USA) – hosting and cookieless traffic measurement
- Google Ireland Limited / Google LLC (USA) – Google Analytics (only with consent)
- Resend, Inc. (USA) – delivery of contact form messages
10. Rights of data subjects
Within the statutory framework, you have the following rights:
- Access to your stored data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of consent given, with effect for the future (Art. 7 (3) GDPR)
11. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is in particular the Spanish data protection authority: Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, Spain – www.aepd.es. To exercise your rights, an informal email to info@polasymbiosis.com is sufficient.
12. Data security
We use technical and organisational measures to protect your data against unauthorised access, loss or destruction. Data is transmitted over an encrypted HTTPS connection.
13. Changes to this privacy policy
We reserve the right to amend this privacy policy in response to changes to our website or legal requirements. The current version published on this page always applies.