← Explore

Privacy policy

1. Data controller

Owner: Gerard Caula Cortés · Tax ID: 40345158F · Address: C/ Remences 3, 17152 Sant Martí de Llémena (Girona) · Email: garciadepou@gmail.com

2. What data we process and why

  • Contact and "Add a piano" forms: name (optional in the suggestion form), email address, message and language. Purpose: answering your enquiry or handling the piano suggestion. Legal basis: your consent (Art. 6(1)(a) GDPR). Retention: up to 12 months after the reply.
  • Location ("Search near me"): only if you grant permission in your browser. Your coordinates are used on the spot to sort pianos by distance; they are never stored or linked to your identity.
  • Guestbook (comments on piano pages): name, comment text, language and date. Purpose: publishing your comment on the page after moderation. Legal basis: your consent (Art. 6(1)(a) GDPR). The name you enter is published next to the approved comment; neither your email nor your IP address is collected. You may request its deletion at any time by writing to the contact address.

This portal has no user accounts and uses no analytics, advertising, profiling or remarketing tools.

3. Recipients and third-party connections

We do not share your data with third parties. While using the portal, your browser may connect to external services that receive your IP address:

  • OpenStreetMap (search map): required to display the map. Typefaces are served from the portal itself, with no third-party connection.
  • Google Maps (map on each piano page) and YouTube/Vimeo (videos): only loaded if you accept third-party cookies.

Connections to Google may involve international transfers covered by the EU–US Data Privacy Framework and standard contractual clauses.

4. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to garciadepou@gmail.com. We will reply within one month at most. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

5. Security

Admin access is protected with hashed passwords. Contact messages are stored in a restricted-access database and deleted once their retention period expires.