01 · Data controller
- Sebrona s.r.o.
- Budatínska 3230/16A
- 851 06 Bratislava-Petržalka, Slovakia
- IČO 57 639 272 · Mestský súd Bratislava III · Sro 199728/B
- info@sebrona.com
Privacy notice.
Sebrona collects almost nothing. This page names what we do collect, why, for how long, and the rights you keep over it. Issued per Regulation (EU) 2016/679 (GDPR) Articles 13 and 14.
Effective · 2026-05-27
02 · Purposes of processing
Two purposes only. (a) Handling inbound inquiries you send via the contact form or to info@sebrona.com — your message and email address. (b) Anonymous telemetry on this website — a Sentry session UUID with no IP, no personal identifiers, used to surface client-side errors so we can fix them.
03 · Lawful basis
Inquiry handling runs on legitimate interest (GDPR Art. 6(1)(f)) — operating the practice and responding to prospective clients. Telemetry runs on legitimate interest (Art. 6(1)(f)) limited to anonymous error reporting. No cookies are set without consent; see /cookies for the full list (currently empty).
04 · Categories of data
From you: email address, message contents, anything you choose to include in the message (name, company, role). From your browser: anonymous Sentry session UUID, browser user-agent string, error stack traces. We do not collect IP addresses, do not run analytics, do not embed third-party trackers, do not fingerprint.
05 · Retention
Inquiry emails: 24 months from last contact, then deleted (matches the /security commitment). Sentry telemetry: 90 days, then rolled off on Sentry's default schedule (anonymous UUIDs only — there is nothing personal to delete). Engagement-stage data is governed by the signed engagement contract and Article 28 DPA — see /dpa.
06 · Recipients and sub-processors
Three sub-processors handle this website: Cloudflare (EU edge + Pages hosting), Sentry (error telemetry, EU instance where available), Brevo (transactional email relay for contact-form submissions). Each is listed at /security with region and purpose. We do not sell, rent, or share your data with any other party for marketing, advertising, or AI-training purposes.
07 · Your rights
Under GDPR Articles 15 to 22 you may request: access to your data, correction, deletion, restriction of processing, data portability, and objection to processing on legitimate-interest grounds. To exercise any of these, email info@sebrona.com from the address whose data you want covered. We respond within 30 days.
08 · Supervisory authority
If you believe Sebrona has mishandled your personal data, you may lodge a complaint with the Slovak supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky (ÚOOÚ SR), Hraničná 12, 820 07 Bratislava 27 — https://dataprotection.gov.sk.
09 · Contact
Questions about this notice, or about how Sebrona handles your data, go to the lead architect.