1. Controller

This Privacy Policy explains how personal data is processed when you visit www.papiturco.com.

The controller responsible for processing personal data on this website within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR) is:

Papi Turco Productions

Farhad Amid

Bismarckstraße 43

40210 Düsseldorf

Germany

Email: info@papiturco.com

2. Website Hosting through Framer

This website was created and is hosted using Framer, a service provided by Framer B.V., Netherlands.

When you access this website, Framer and infrastructure providers engaged by Framer may process technical data required to deliver and secure the website. This may include your IP address, date and time of access, requested pages and files, referrer URL, browser type and version, operating system, device information and server log data.

Processing is necessary to provide a secure, stable and functional website. It is based on Article 6(1)(f) GDPR. Our legitimate interests are the reliable presentation, security and technical operation of this website.

Where Framer processes personal data on our behalf, processing is governed by a data processing agreement pursuant to Article 28 GDPR.

Framer or service providers engaged by Framer may process data outside the European Union or European Economic Area. Information concerning international data transfers is provided in Section 8.

Further information is available in Framer’s Privacy Statement:

https://www.framer.com/legal/privacy-statement/

3. Consent Management with Cookiebot

We use Cookiebot CMP, provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.

Cookiebot is used to obtain, store and document your choices regarding cookies and similar technologies and to prevent non-essential technologies from being activated before consent has been granted.

Cookiebot may process information including your consent status, the date and time of consent, part of your IP address, browser user agent, website domain and a unique encrypted consent key. A necessary cookie is stored on your device so that your selection can be remembered. Consent records are generally retained for 12 months.

Consent management is used to comply with statutory consent and documentation obligations. Processing is based on Article 6(1)(c) GDPR and, where applicable, Article 6(1)(f) GDPR. Access to or storage of information on your device that is strictly necessary for consent management is based on Section 25(2) TDDDG.

You can change or withdraw your consent at any time using the Privacy Trigger displayed on this website. Withdrawal applies to future processing and does not affect the lawfulness of processing carried out before withdrawal.

Further information is available in Cookiebot’s Privacy Policy:

https://www.cookiebot.com/en/privacy-policy/

4. Cookies and Similar Technologies

This website uses cookies and similar technologies. Cookies are small text files stored on your device. Similar technologies may include pixels, tags, local storage and comparable identifiers.

Strictly necessary technologies are used where required to provide the website and its essential functions. Access to or storage of information on your device for these purposes is based on Section 25(2) TDDDG. Any subsequent processing of personal data is based on Article 6(1)(f) GDPR or, where required, Article 6(1)(c) GDPR.

All non-essential technologies, including technologies used for preferences, statistics, advertising, conversion measurement and remarketing, are activated only after your explicit consent. The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR.

You may accept or reject non-essential categories separately. You may change or withdraw your selection at any time using the Privacy Trigger.

Detailed and current information about the cookies and similar technologies used, their providers, purposes and storage periods is provided in the Cookie Declaration on this page.

5. Analytics, Advertising and Conversion Tracking

Subject to your consent, we use the following technologies to measure campaign performance, understand visits and actions on our website, attribute conversions, create advertising audiences and display or optimise advertising.

TikTok Pixel

The TikTok Pixel is provided in the European Economic Area by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, together with other TikTok group companies.

TikTok may process information including your IP address, browser and device information, pages visited, buttons or links clicked, referrer and campaign information, timestamps and cookie or advertising identifiers.

If you are logged into TikTok, TikTok may associate this information with your TikTok account. We use the TikTok Pixel for conversion measurement, campaign attribution, audience creation and retargeting.

Further information:

https://www.tiktok.com/legal/page/eea/privacy-policy/en

Meta Pixel

The Meta Pixel is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Meta may process technical and device information, page views, link or button clicks, campaign information and cookie or advertising identifiers.

If you are logged into Facebook or Instagram, Meta may associate this information with your account. We use the Meta Pixel for conversion measurement, campaign attribution, audience creation and retargeting.

Further information:

https://www.facebook.com/privacy/policy/

Google Ads Conversion Tracking and Remarketing

Google Ads services are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google may process technical data, advertising identifiers, campaign and referrer information and actions performed on this website. This information may be used to measure conversions, attribute campaigns and create remarketing audiences.

If you are logged into a Google account, Google may associate this information with your account depending on your Google settings.

Further information:

https://policies.google.com/privacy

Campaign Parameters and Outbound Link Events

Links leading to this website may contain campaign parameters such as UTM values or platform-specific click identifiers. We may process these parameters to determine which campaigns, advertisements or platforms generated visits and subsequent actions.

We may also record events when visitors click links to external platforms such as Spotify, Apple Music or YouTube.

These events show that an external link was clicked. They do not tell us what the visitor does after leaving our website unless the external provider separately reports aggregated or attributed conversion information.

All technologies described in this section are activated only after explicit consent. The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR. Consent can be changed or withdrawn at any time through the Privacy Trigger.

Depending on the respective service and processing activity, the provider may process certain data as an independent controller or jointly with us. Further information is available in the respective provider’s privacy and business terms.

These providers may process personal data outside the European Union or European Economic Area. Information concerning international data transfers is provided in Section 8.

Google Analytics 4 is not currently used on this website. Spotify and YouTube players are not currently embedded. If additional analytics services or embedded third-party content are introduced, this Privacy Policy and the Cookie Declaration will be updated before or when those services are activated.

6. External Links and Streaming Platforms

This website contains links to external music streaming, video and social media platforms, including Spotify, Apple Music, YouTube, Amazon Music, Boomplay, Anghami, Deezer, TIDAL, TikTok, Instagram and Facebook.

These links are implemented as ordinary external links. We do not currently embed players, videos or other content from these providers. Merely displaying a link therefore does not initiate a connection to the respective provider.

When you click an external link, you leave our website and establish a direct connection with the relevant provider. The provider may receive technical information such as your IP address, browser and device information, the referring page, and the date and time of your request. Any further processing is governed by the provider’s own privacy policy. We have no control over such processing.

Any measurement of outbound link clicks on our website is described in Section 5.

If streaming players, videos or other third-party content are embedded in the future, they will be activated only after any legally required consent has been obtained. This Privacy Policy and the Cookie Declaration will then be updated accordingly.

7. Contact by Email

If you contact us by email, we process the information you provide, including your email address, the content of your message and any additional data voluntarily submitted, in order to handle and respond to your request.

If your request concerns a contract or pre-contractual measures, processing is based on Article 6(1)(b) GDPR. In all other cases, processing is based on our legitimate interest in responding to enquiries and communicating with website visitors pursuant to Article 6(1)(f) GDPR.

Technical service providers used for email hosting may process this data on our behalf. Your data will not be disclosed to other recipients unless this is necessary to handle your request or required by law.

We retain correspondence only for as long as necessary to process the respective enquiry and to comply with applicable statutory retention obligations or establish, exercise or defend legal claims.

8. International Data Transfers and Storage Periods

Some of the service providers used on this website may process personal data outside the European Union or the European Economic Area, particularly in the United States.

Where the European Commission has adopted an adequacy decision, data transfers may be based on that decision. Transfers to participating US organisations may be based on the EU–US Data Privacy Framework.

In other cases, appropriate safeguards are used where required, particularly the European Commission’s Standard Contractual Clauses pursuant to Article 46 GDPR, together with supplementary safeguards where necessary.

Personal data is retained only for as long as necessary for the respective processing purpose or required by statutory retention obligations. Data may also be retained for the establishment, exercise or defence of legal claims.

The specific storage periods for cookies and tracking technologies are shown in the Cookie Declaration. Information processed independently by external providers is subject to their respective retention policies.

9. Your Data Protection Rights and Right to Complain

Subject to the applicable legal requirements, you have the following rights regarding your personal data:

• the right of access pursuant to Article 15 GDPR;

• the right to rectification pursuant to Article 16 GDPR;

• the right to erasure pursuant to Article 17 GDPR;

• the right to restriction of processing pursuant to Article 18 GDPR;

• the right to data portability pursuant to Article 20 GDPR; and

• the right to object to processing pursuant to Article 21 GDPR.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

Where we process personal data on the basis of legitimate interests, you may object to the processing for reasons arising from your particular situation. You may object to processing for direct marketing purposes at any time.

To exercise your rights, please contact us at:

info@papiturco.com

We may request appropriate information to verify your identity.

You also have the right to lodge a complaint with a data protection supervisory authority.

The supervisory authority responsible for our place of business is:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)

https://www.ldi.nrw.de/

We do not use automated decision-making that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.

10. Data Security and Changes to This Privacy Policy

We implement appropriate technical and organisational measures pursuant to Article 32 GDPR to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures include encrypted data transmission, access restrictions, data minimisation and the regular review of the services used on this website.

However, data transmission over the internet cannot be guaranteed to be completely secure. We therefore cannot guarantee absolute protection against every possible security risk.

We may update this Privacy Policy if legal requirements, our website, the services used or our data-processing activities change. The version published on this website at the time of your visit applies. Material changes will be reflected by updating the date below.

Last updated: July 2026