Privacy Policy
Last updated: May 2026
Data Controller
VELITES FITNESS S.L., CIF B71248983, Travesía Etxesakan 5 Oficina B6, Edificio Bidekoa, 31180 Zizur Mayor, Navarra, Spain. Email: legal@velitessport.com
Data We Collect
When you register on The Wall we collect: first name, last name, email address, country, city, CrossFit box name, Instagram handle (optional), and the photo you upload after completing The Murph Workout. We also record your Murph time, dedication text, and whether you used Velites grips. A secure token cookie (wall_own_token) is stored in your browser to allow you to access and manage your plaque without a password.
Purpose of Processing
Your data is processed to: (1) display your permanent plaque on The Wall memorial; (2) send you transactional emails (confirmation, unique plaque link, Murph Day reminder); (3) sync with ActiveCampaign for event communications if you consented to marketing; (4) display your approximate location on the live map.
Third Parties
We use the following processors: Supabase Inc. (database and photo storage, servers in EU and US — Standard Contractual Clauses apply); Vercel Inc. (hosting, US — SCC apply); ActiveCampaign LLC (email marketing, US — SCC apply, only if marketing consent given); Mapbox Inc. (map rendering, US — approximate location only, no exact coordinates stored).
Data Retention
Your plaque data is retained for 5 years after The Murph Workout event (25 May 2026), after which it is anonymised. Photos are stored in Supabase Storage and deleted on erasure request. The wall_own_token cookie expires after 1 year.
Your Rights
Under GDPR you have the right to access, rectify, erase, restrict, or port your data, and to object to processing. To exercise any right — including plaque removal — email legal@velitessport.com with subject 'The Wall — Data Request'. We will respond within 30 days. You also have the right to lodge a complaint with your national supervisory authority (Spain: AEPD, aepd.es).
Cookies
The Wall uses one functional cookie: wall_own_token (session management, 1-year expiry). No advertising or tracking cookies are set by this application. Third-party services (Mapbox, Vercel Analytics) may set their own cookies subject to their respective policies.
Governing Law
This policy is governed by Spanish law and EU Regulation 2016/679 (GDPR). Disputes are subject to the jurisdiction of the courts of Navarra, Spain.
The Wall · Murph 2026 · Velites Sport S.L.