Privacy Policy

Last updated: 17 August 2026

This page explains what personal data mochita-music.com (“the Site”) collects, why it is collected, how long it is kept and what rights you have over it. The Site is a single page with no user accounts and no advertising. Audience measurement runs only if you consent to it, and you can change your mind at any time.

Who is responsible

The data controller is:

The controller is based in the United Kingdom, so the UK GDPR and the Data Protection Act 2018 apply.

What data is collected

• Contact form. Name, email address, the subject line and the message you write. Nothing else is requested and nothing is pre-filled.
• Server logs. The Site is hosted by KreativMedia (Zürich, Switzerland). Like every web server, its servers record standard technical data (IP address, browser, operating system, time of the request) in log files, for security and to keep the Site running.
• One technical cookie. cookie_consent, storing your answer to the cookie notice so it is not shown again. It expires after 12 months, records only “accepted” or “declined”, and contains no identifier.
• Analytics cookies, only with your consent. If you accept, Google Analytics 4 sets its own cookies (_ga and similar, up to 24 months) to count visits and see which pages are read. IP addresses are anonymised and Google advertising signals are switched off, so the data is not used for advertising or profiling.

Nothing related to analytics is loaded until you accept. If you decline, or simply ignore the notice, no request is ever made to Google Analytics.

Why, and on what legal basis

• To answer your message: the data you submit is used only to reply to you. Legal basis: your consent, given by ticking the box before sending.
• To keep the Site secure and available: server logs. Legal basis: legitimate interest.
• To remember your answer to the cookie notice: strictly necessary technical cookie, no consent required.
• To measure how the Site is used: Google Analytics. Legal basis: your consent, given through the cookie notice. You can withdraw it at any time from Cookie settings in the footer, with the same single click it took to give it.
• To keep the video section up to date: a request to the public feed of the Mochita YouTube channel (see “Third parties” below). Legal basis: legitimate interest in showing current content.

The Site takes no automated decisions about you and builds no profile of you.

Third parties

• KreativMedia (Zürich, Switzerland) hosts the Site and processes the technical data described above (server logs) on its servers in Switzerland. See the KreativMedia privacy policy.
• Web3Forms processes the contact form and forwards the message by email. Your data passes through their servers. See the Web3Forms privacy policy.
• Google Analytics 4 measures audience, but only after you accept. Data may be transferred to Google servers outside the United Kingdom, covered by Google's Standard Contractual Clauses. See Google's privacy policy.
• rss2json.com converts the public feed of the Mochita YouTube channel so the three video cards stay up to date. The request is made by your browser, which exposes your IP address to that service; no cookie is set and nothing about you is sent. Cover images of newly published videos, when present, are served by YouTube's image servers (i.ytimg.com), which likewise see your IP address only.
• YouTube videos are not loaded until you click play. Until then no YouTube cookie is set. Once you press play, YouTube's own terms apply; the Site uses the youtube-nocookie.com domain to limit what is stored.

The typeface and every icon are served directly from this website: no font or icon request reaches Google Fonts, a CDN or any other third party.

Your data is never sold, rented or shared for marketing purposes.

International transfers

The Site is hosted in Switzerland, a country the United Kingdom recognises as providing an adequate level of data protection. Where the third parties above process data outside the United Kingdom or Switzerland (Google and Web3Forms may do so, typically in the United States), the transfer is covered by the safeguards those providers offer: Standard Contractual Clauses together with the UK International Data Transfer Addendum.

How long it is kept

Messages sent through the contact form are kept for as long as necessary to handle your request and any follow-up correspondence. Server logs are kept by the hosting provider for a limited period, in line with its standard configuration. Analytics data is retained for 14 months, then deleted automatically by Google.

Your rights

You have the right to:

• ask what data is held about you and get a copy of it;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to the processing;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting what was lawful before.

To exercise any of these, send a message through the contact form. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO).

Security

The Site is served over HTTPS. Appropriate technical and organisational measures are in place to protect personal data against unauthorised access, loss or alteration. No method of transmission over the internet is completely secure, and no absolute guarantee can be given.

Changes to this policy

This policy may be updated. The date at the top always reflects the current version.