Your data
Privacy policy
This policy explains how personal data is processed when you visit the MORRA website or submit a booking request.
1. Controller
Morra Raoofi
Herzogstrasse 50
40215 Düsseldorf
Germany
Email: [email protected]
2. Website delivery and security
This website is delivered through Cloudflare Pages. When you access the site, technical data such as IP address, browser and device information, time of access and requested content may be processed to provide the website, maintain security and prevent misuse.
The legal basis is our legitimate interest in a secure and reliable website under Article 6(1)(f) GDPR. Cloudflare may process data globally. Where required, appropriate safeguards are used for international transfers.
3. Turnstile security check
The booking form uses Cloudflare Turnstile to protect against automated misuse. Turnstile may process technical data, including IP address, browser and device characteristics and the outcome of the security check.
The legal basis is our legitimate interest in protecting the website and booking form under Article 6(1)(f) GDPR.
4. Booking requests
When you submit a booking request, we process the information you provide, including name, organisation, email address, event type, date, location and message. We use this data solely to review and respond to your booking request and, where applicable, to take steps before entering into a contract.
The legal basis is Article 6(1)(b) GDPR and, where applicable, Article 6(1)(f) GDPR.
5. Recipients and processing
Booking requests are sent through the n8n workflow service to Morra and authorised booking support. Email delivery providers process the message content as necessary for delivery. These recipients process data only for handling the booking request.
6. Retention
Booking data is retained only for as long as necessary to handle the request. If no booking results, it is generally deleted within six months after the final communication, unless statutory retention duties or a legitimate need for longer retention apply.
7. Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You may also lodge a complaint with a competent data protection supervisory authority.
8. External services
The Spotify player is embedded on this website and may process technical data once it loads. Spotify’s privacy policy applies to this processing. Links to YouTube, Instagram, Linktree and Google Drive are ordinary external links; when you follow a link, the privacy policy of the destination provider applies.
9. Changes to this policy
We may update this privacy policy where legal requirements or the services used on the website change.