PRIVACY POLICY

In accordance with the General Data Protection Regulation (GDPR) and the Spanish LOPDGDD, the data controller responsible for processing personal data on this website is:

Mur Mur Creations

Owned by: Aleksandra Grechuta (Autónoma)

NIF: [insert]

Email: [insert]

Registered address: [insert]

Website: www.murmurcreations.es

We may collect the following categories of personal data:

2.1 Data Provided Directly by You

  • Name and surname
  • Email address
  • Phone number
  • Billing address
  • Shipping address
  • Payment information (processed through external providers; we do not store card numbers)
  • Messages or comments sent through contact forms or email
  • Account information (if you create an account)

2.2 Data Collected Automatically

Through cookies and similar technologies:

  • IP address
  • Browser type and version
  • Device information
  • Pages visited
  • Time spent on the site
  • Interaction with products, cart, and checkout

2.3 Data from Third Parties

  • Payment processors (Stripe, PayPal, etc.)
  • Shipping carriers (DHL or others)
  • Social media accounts (if you contact us via these platforms)

We process your personal data for the following purposes:

3.1 To Provide Our Services

  • Processing and managing orders
  • Producing and preparing items
  • Shipping products
  • Managing returns or complaints
  • Providing customer service

3.2 For Legal Compliance

  • Issuing invoices
  • Maintaining tax and accounting records
  • Complying with consumer and commercial regulations

3.3 For Communication

  • Responding to inquiries
  • Sending service emails (order confirmations, shipping updates, etc.)
  • Sending newsletters only if you opt in

3.4 For Website Functionality & Improvement

  • Analytics
  • Security monitoring
  • Personalizing user experience
  • Optimizing website performance

3.5 Marketing (With Consent Only)

  • Newsletters
  • Product updates
  • Promotional offers

You may withdraw consent at any time by contacting us at [email] or clicking “unsubscribe” in emails.

According to Articles 6 and 7 of the GDPR, the legal bases for processing your data are:

 

4.1 Contractual Necessity

When processing your order or providing customer service.

 

4.2 Legal Obligation

For tax, accounting, invoices, and regulatory compliance.

 

4.3 Consent

For:

  • Newsletter subscription
  • Use of non-essential cookies
  • Contact form submissions

 

4.4 Legitimate Interest

For:

  • Website security
  • Prevention of fraud
  • Analytics necessary for improvement
  • Responding to general inquiries

We store your data only for the necessary period:

  • Orders & invoices: 5 years (legal requirement)

  • Customer messages: 12 months

  • Account data: until the user deletes the account

  • Newsletter: until user unsubscribes

  • Analytics and cookies: according to cookie type (see cookie policy)

Once the retention period expires, data is securely deleted or anonymized.

Your data may be shared with:

6.1 Service Providers

  • Payment processors (Stripe, PayPal, etc.)

  • Shipping companies (DHL, etc.)

  • Web hosting provider

  • Email marketing platforms (if used)

  • IT and security service providers

These providers only process data as needed to perform their service.

6.2 Legal Authorities

When required by law, court order, or administrative procedures.

6.3 No Unauthorized Third Parties

We never sell, rent, or trade your data to third parties.

Some service providers (like analytics or email services) may store data outside the EU.

When international data transfers occur, we ensure they are protected via:

  • Standard Contractual Clauses (SCCs), or

  • Adequacy decisions by the European Commission

We only work with GDPR-compliant service providers.

As a user, you may exercise the following rights:

8.1 Right of Access

Request information about what personal data we have.

8.2 Right to Rectification

Correct inaccurate or outdated data.

8.3 Right to Erasure (“Right to Be Forgotten”)

Request deletion of your data when:

  • It is no longer needed

  • Consent is withdrawn

  • You object to processing

  • Processing is unlawful

8.4 Right to Restriction of Processing

Limit how we use your data in certain situations.

8.5 Right to Data Portability

Receive your data in a machine-readable format.

8.6 Right to Object

Object to:

  • Processing based on legitimate interest

  • Direct marketing

8.7 Right to Withdraw Consent

You may withdraw consent at any time.

8.8 Right Not to Be Subject to Automated Decision-Making

We do not engage in automated decision-making or profiling.

How to Exercise Your Rights

Email your request to: [insert your business email]

We will respond within 30 days, as required by law.

This website uses cookies.

Types of cookies include:

  • Essential (site functionality)

  • Analytical

  • Performance

  • Advertising (only if you allow them)

Users can modify cookie settings via the cookie banner or browser settings.

A full cookie policy is provided separately or below your banner (required by EU law).

We protect your data by implementing:

  • SSL encryption (https)

  • Secure servers

  • Access control

  • Regular security audits

  • Limited access for staff and contractors

  • Encrypted transactions handled by certified providers

Despite these measures, no system is 100% secure.

Mur Mur Creations does not knowingly collect personal data from children under 14 years of age.

If a parent or guardian believes such data has been collected, they may contact us to request deletion.

Mur Mur Creations may link to third-party sites.

We are not responsible for:

  • The content

  • Privacy practices

  • Security policies

of those external websites.

We may update this Privacy Policy at any time to comply with legal changes or improve transparency.

When changes occur:

  • We will update the “Last Updated” date

  • Significant changes may be communicated via email or website notice

For any questions regarding this Privacy Policy or to exercise your rights, please contact:

Mur Mur Creations

Email: [insert email]

Website: www.murmurcreations.es