Privacy Policy

1. Controller

Daniel Schmid

Hiltenspergerstr. 78, 80796 München, Germany

Email: dcschmid@murena.io

2. Hosting & Access Logs

We host on Render (render.com). Render processes server logs (IP address, timestamp, requested URL, user agent) to ensure site stability and security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Logs are deleted automatically on a rolling basis. Depending on the Render region, data may be processed in the EU or transferred to the USA under appropriate safeguards (e.g., SCCs).

3. Analytics with Fathom

We use Fathom Analytics, a privacy-friendly, EU-hosted analytics service that does not set identifying cookies. Fathom processes anonymized page views and referrers. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding site usage). You can opt out via Do Not Track in your browser; Fathom respects DNT.

4. AI-Generated Content

Some text and images are generated or assisted by OpenAI services. No personal data is intentionally sent to OpenAI. If you contact us and share personal information, we do not use that content in AI prompts without your consent.

5. Contact

If you email us, we process your message, contact details, and metadata to respond. Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication) or Art. 6(1)(f) GDPR (legitimate interest in replying to inquiries). Data is kept only as long as needed.

6. Your Rights

You have the rights of access, rectification, erasure, restriction, objection (including to processing based on Art. 6(1)(f) GDPR), and data portability. You may also lodge a complaint with your local supervisory authority. In Bavaria, this is the BayLDA (Bayerisches Landesamt für Datenschutzaufsicht).

7. Data Retention

We retain personal data only as long as necessary for the stated purposes or legal obligations and then delete or anonymize it.

8. Updates

We may update this policy to reflect legal or technical changes. Last updated: 04/12/2025.