1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on the subject of data protection can be found in my privacy policy listed below.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator:
Alexandra Mura
Calle Magnolio 35
03191 Pinar de Campoverde, Alicante, Spain
Email: info@olamura.com
How do I collect your data?
Your data is collected when you provide it to me. This may be data you enter in a contact form, for example. Other data is collected automatically or with your consent when you visit the website by IT systems. This is primarily technical data (e.g. internet browser, operating system, or time of page access).
What do I use your data for?
Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze usage behavior.
What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. Under certain circumstances, you have the right to request the restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.
2. Hosting
I host this website with Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes personal data on my behalf (Art. 28 GDPR). For details, please refer to Vercel's privacy policy: https://vercel.com/legal/privacy-policy.
Third-country transfer: As Vercel Inc. is based in the United States, data processing may take place in the US. A data processing agreement is in place with Vercel that includes EU Standard Contractual Clauses under Art. 46(2)(c) GDPR plus supplementary technical and organizational measures as transfer safeguards (see vercel.com/legal/dpa).
The use of Vercel is based on Art. 6(1)(f) GDPR. I have a legitimate interest in the most reliable presentation of my website. Where consent has been requested, processing is based exclusively on Art. 6(1)(a) GDPR.
3. General Information and Mandatory Disclosures
Data Protection
I take the protection of your personal data very seriously. I treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Please note that data transmission over the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.
Responsible Party
The responsible party for data processing on this website is:
Alexandra Mura
Calle Magnolio 35
03191 Pinar de Campoverde, Alicante, Spain
Email: info@olamura.com
Storage Duration
Unless a more specific storage period is mentioned within this privacy policy, your personal data will remain with me until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless I have other legally permissible reasons for storing your personal data.
Legal Bases
Data processing on this website is based on the following legal grounds:
- Art. 6(1)(a) GDPR (Consent): You have given your consent to the processing.
- Art. 6(1)(b) GDPR (Contract): Processing is necessary for the performance of a contract or pre-contractual measures.
- Art. 6(1)(f) GDPR (Legitimate Interest): Processing is necessary for the purposes of legitimate interests.
Your Rights
You have the following rights under GDPR:
- Right of Access (Art. 15 GDPR): You may request information about your processed data.
- Right to Rectification (Art. 16 GDPR): You may request the correction of inaccurate data.
- Right to Erasure (Art. 17 GDPR): You may request the deletion of your data.
- Right to Restriction (Art. 18 GDPR): You may request the restriction of processing.
- Right to Data Portability (Art. 20 GDPR): You may request your data in a machine-readable format.
- Right to Object (Art. 21 GDPR): You may object to data processing.
- Right to Complain: You may lodge a complaint with a data protection supervisory authority. The competent authority in Spain is the Agencia Española de Protección de Datos (AEPD), www.aepd.es.
4. Data Collection on This Website
Server Log Files
The hosting provider (Vercel) automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources. This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of their website.
Contact Forms
When you send me inquiries via contact form (design consultation, project request, or general inquiry), your details from the form, including the contact data you provided, will be stored for the purpose of processing the inquiry and in case of follow-up questions. I do not share this data without your consent.
The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on my legitimate interest in the effective handling of inquiries addressed to me (Art. 6(1)(f) GDPR).
The data you enter in the form will remain with me until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory statutory provisions, in particular retention periods, remain unaffected.
Email Delivery via Resend
I use the service Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) for sending form data. Resend processes your data on my behalf (Art. 28 GDPR) to ensure email delivery. Details can be found in Resend's privacy policy: https://resend.com/legal/privacy-policy.
Third-country transfer: As Resend is based in the United States, processing may take place in the US. The transfer is based on EU Standard Contractual Clauses under Art. 46(2)(c) GDPR within the data processing agreement with Resend (see resend.com/legal/dpa).
5. Analytics and Marketing Tools
Google Analytics 4
With your consent I use Google Analytics 4, a web analytics service from Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). Data processing in the United States is handled by Google LLC. Google Analytics uses cookies (including _ga, _ga_CL8YETEBXP) to collect pseudonymous usage data (page views, device and browser type, approximate location at city or country level, dwell time). IP addresses are truncated by GA4 prior to any storage (IP anonymization).
Joint controllership: For data collection via GA4, I act as joint controller with Google LLC under Art. 26 GDPR. A joint controller arrangement is in place (see business.safety.google/controllerterms).
Consent Mode v2: I use Google Consent Mode v2. Before you give consent, all consent signals (analytics_storage, ad_storage, ad_user_data, ad_personalization) are set to "denied"; Google tags only load after your consent. Without consent no tracking pings are sent.
Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time via the "Cookie settings" link in the footer, with effect for the future.
Third-country transfer: Processing may also take place in the United States. The legal basis is the European Commission's adequacy decision of 10 July 2023 (EU-US Data Privacy Framework). Google LLC is certified under the DPF.
Data retention in GA4: 14 months. A data processing agreement under Art. 28 GDPR is additionally in place with Google.
Google Ads Conversion Tracking
With your separate consent to the "Marketing" category I use Google Ads Conversion Tracking (Google Ireland Limited). This measures whether visitors who arrived via a Google ad completed a specific action (e.g. submitting a form). No personal data is collected for identification purposes, only conversion events and a pseudonymous click ID. Cookie: _gcl_au (90 days). The Consent Mode signals ad_user_data and ad_personalization are also controlled separately via the Marketing category.
Legal basis: Art. 6(1)(a) GDPR (consent). Withdrawal at any time via the "Cookie settings" link.
Vercel Speed Insights
I use Vercel Speed Insights to measure website performance. This service uses no cookies and does not collect personal data for identification purposes. Only anonymized performance metrics are recorded (e.g. Largest Contentful Paint, Cumulative Layout Shift). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a technically optimized website).
6. Cookies and Consent
Cookies on this site are only set with your consent. The only exception is a strictly necessary cookie that stores your consent choice.
| Name | Provider | Purpose | Retention | Category |
|---|---|---|---|---|
om_consent | Ola Mura (first party) | Stores your cookie consent choice | 12 months | Necessary |
_ga | Google (third party) | Distinguishes unique visitors | 2 years | Statistics |
_ga_CL8YETEBXP | Google (third party) | Session state for GA4 | 2 years | Statistics |
_gcl_au | Google (third party) | Google Ads conversion linker | 90 days | Marketing |
You can change or withdraw your selection at any time via the "Cookie settings" link in the footer.
7. SSL/TLS Encryption
This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
8. Changes to This Privacy Policy
I reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to reflect changes to my services. The new privacy policy will then apply to your next visit.
Last updated: May 2026