01 / Data controller
Who is responsible for processing your data
The operator of aquablasting.eu and controller of personal data submitted through its forms is:
02 / Data scope
Which data we process
When you send an enquiry, we may process your full name, company, phone number, email address, selected product, message and any photos or technical information you voluntarily attach.
During normal website operation, technical systems may briefly record data needed for security and diagnostics, such as request time, requested address and IP address.
Do not include other people's personal data or sensitive information that is unnecessary for assessing your enquiry in the form or photos.
03 / Purpose
Why we need the data
Handling enquiries and preparing quotations
We use the data to assess your request, recommend a suitable product, communicate technical details and prepare a quotation. The legal basis is taking steps at your request before entering into a contract under Article 6(1)(b) GDPR.
Security and reliable operation
We may process technical data to protect forms from abuse, diagnose errors and secure the website. The legal basis is our legitimate interest under Article 6(1)(f) GDPR.
Legal obligations
If the correspondence leads to a business relationship, we may retain selected data to the extent and for the periods required by accounting, tax or other legislation.
Fields marked with an asterisk are required to submit the form. Without them, we cannot properly handle the enquiry. Other data is optional.
04 / Recipients
Who may access the data
Only authorised company staff and essential technical suppliers providing hosting, website operation or the internal CRM system have access. We disclose data only to the extent needed to provide the service and protect our systems.
We do not sell personal data or provide it to third parties for their own marketing. Transfers outside the European Economic Area take place only under GDPR conditions and with appropriate safeguards.
Our own server infrastructure in the European Union and the Cloudflare protection network deliver the website and protect it from attacks. Cloudflare processes technical request data, including IP addresses, for this purpose. We process visitor statistics using a self-hosted Plausible instance on our own server in the European Union; we do not provide this data to any third party.
05 / Retention
How long we retain data
We retain enquiry data while handling the request and subsequent business correspondence. We then delete or anonymise it when it is no longer needed for its original purpose, unless the law requires further retention or it is needed to protect legal claims.
We retain technical security records only as long as needed for diagnostics and system protection. The exact period may vary with the record type and severity of the security incident.
06 / Analytics
Plausible Analytics without advertising profiling
We use Plausible Analytics to measure traffic and improve the website, hosting it ourselves on our own server in the European Union. This is not a third-party service, so traffic data stays within our infrastructure and is not shared with others. We deliver the analytics script from our own aquablasting.eu domain, so loading a page sends no request to a third-party server.
This analytics uses no cookies, stores no IP addresses, creates no advertising profiles and does not allow us to identify an individual visitor. We process IP addresses only transiently when receiving a request to derive aggregate indicators such as country or device type; they are not stored afterwards.
We track only aggregate data: pages visited, how visitors reached the site, device type and completion of key actions such as sending an enquiry.
The legal basis is our legitimate interest in understanding website use and improving its functionality. Since the analytics uses no non-essential cookies, it does not require a cookie banner.
08 / Your rights
You control your data
Depending on the circumstances, you have the right to request access to your data, correction, deletion, restriction of processing or portability. You may object to processing based on legitimate interest.
Send your request to info@aquablasting.eu. We may reasonably verify your identity before handling the request. We will respond within the time limit set by GDPR.
If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.
We do not carry out automated decision-making or profiling that has legal or similarly significant effects on you.