Privacy

Information on the processing of personal data

Effective from: 19 October 2026 · Version 1.0

This page explains what personal data we process when you contact us via the bluesentra.com website, by email or by phone, or when you enter into a contract with us. We provide this information in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 18/2018 Coll. on the Protection of Personal Data.

1. Who is the controller

BlueSentra is the brand under which GardenKeeper s. r. o. offers its services.

We have not appointed a data protection officer (DPO). Please send any questions about personal data to the email address above or by post to our registered office.

2. Purposes and legal bases of processing

Purpose	What data	Legal basis	How long
Replying to your message from the contact form, email or phone call and preparing an offer	name and surname, company, email, phone where provided, number of users, topic and text of the message; for the form also technical submission data (IP address, time)	Art. 6(1)(b) GDPR – steps taken at your request before entering into a contract; if you contact us on behalf of a company, Art. 6(1)(f) GDPR – legitimate interest in responding to a business enquiry	no more than 12 months from the last communication if no contract is concluded; a copy in the Web3Forms form service according to that service’s settings
Concluding and performing a service contract (Microsoft 365 management)	identification and contact details of the client and its contact persons, communication about requests	Art. 6(1)(b) GDPR (contracting party – natural person); Art. 6(1)(f) GDPR (contact persons of a client that is a legal entity)	for the duration of the contract and then for the limitation period for contractual claims (general limitation period of 4 years under Section 397 of the Commercial Code)
Compliance with legal obligations (accounting, taxes)	data on invoices and accounting documents	Art. 6(1)(c) GDPR in conjunction with Act No. 431/2002 Coll. on Accounting and tax legislation	accounting documents (e.g. invoices) for 10 years following the year to which they relate (Section 35(3)(c) of Act No. 431/2002 Coll. on Accounting) and, where needed for tax administration, at least until the right to assess tax expires (Section 36(1) of the Accounting Act in conjunction with Act No. 563/2009 Coll.)
Website security and operation	server logs (IP address, time, requested page, browser)	Art. 6(1)(f) GDPR – legitimate interest in the secure operation of the website	according to the settings of the hosting provider Websupport

For accounts that we manage in a client’s Microsoft 365, we act as a processor and the client is the controller. This relationship is governed by a separate data processing agreement under Art. 28 GDPR, which forms part of the service contract.

3. Do you have to provide your data?

No, providing data is voluntary. However, without contact details (email or phone) we cannot reply to you, and without identification details we cannot conclude a contract.

4. Who we share data with (recipients and processors)

• Websupport s. r. o., Company ID (IČO): 36 421 928, Karadžičova 7608/12, 821 08 Bratislava – web hosting of bluesentra.com (Slovakia).
• Microsoft – email and documents in Microsoft 365, where form submissions and emails are received. Depending on how the licences are purchased, the contracting party is Microsoft Ireland Operations Limited (direct purchase) or the Microsoft partner (CSP) from which we buy the licences.
• Web3Creative (Web3Forms service) – receiving messages from the contact form and delivering them to our email. The service operator is based in India and uses further processors (e.g. Amazon Web Services, Cloudflare, Hetzner, CleanTalk, Akismet), including outside the EU. According to the service’s terms, transfers are safeguarded by the European Commission’s standard contractual clauses (Art. 46 GDPR).
• From 1 January 2027, the provider of our access point for electronic invoicing (Peppol).
• Public authorities, where required by law.

We do not sell personal data and do not use it for automated decision-making or profiling.

5. Transfers to third countries

Data may be transferred outside the EU/EEA when you use the contact form (Web3Forms and its processors) and through Microsoft 365, whose provider may also process data outside the EU in accordance with its contractual terms and safeguards. If you prefer not to use the form, please email us directly.

6. Cookies and analytics

The bluesentra.com website currently does not use cookies, analytics or advertising tools. Fonts are hosted on our own server, so no third-party content is loaded when you visit the website. Data is sent to a third party (Web3Forms) only when you submit the contact form.

7. Your rights

• right of access to your data (Art. 15 GDPR),
• right to rectification (Art. 16 GDPR),
• right to erasure (Art. 17 GDPR),
• right to restriction of processing (Art. 18 GDPR),
• right to data portability (Art. 20 GDPR),
• right to object to processing based on legitimate interest (Art. 21 GDPR).

Please send your request to the email address above. We will respond without undue delay and in any event within one month (Art. 12(3) GDPR).

8. Complaints

If you believe that we handle your data in breach of the law, you can file a petition to initiate proceedings with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Budova Park One, Námestie 1. mája 18, 811 06 Bratislava, dataprotection.gov.sk.

9. Changes

We may update this information, for example when the company name changes to BlueSentra s. r. o. or when our providers change. The current version is always available on this page.