Privacy Policy

Last updated: July 2026

This privacy policy explains how Cendenta Limited collects, uses, and protects your personal information when you visit our website or use our services.

Data Controller

Cendenta Limited
Registered in Ireland (808587)

North Lodge, Avonmore House, Annamoe, Co. Wicklow, A98 AE75

Email: contact@cendenta.ie

Information We Collect

We may collect the following types of information:

• Contact Information: If you contact us via email, we collect your email address and any information you choose to provide in your message.
• Technical Data: Our web servers automatically collect standard technical information such as IP addresses, browser type, and pages visited. This data is used for security and performance monitoring.

This website does not currently use cookies or tracking technologies for advertising or analytics purposes.

How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and provide customer support
• To provide, maintain, and improve our services
• To comply with legal obligations and protect our rights
• To detect and prevent fraud or security threats

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

• Legitimate Interests (Article 6(1)(f)): We collect server logs and technical data for website security, performance monitoring, and fraud prevention. This processing is necessary for our legitimate interest in maintaining a secure and functional website.
• Consent (Article 6(1)(a)): When you contact us via email, you consent to us processing your contact information to respond to your inquiry.
• Contract Performance (Article 6(1)(b)): If you engage our services, we process data necessary to fulfil our contractual obligations to you.
• Legal Obligation (Article 6(1)(c)): We may process data to comply with legal requirements, such as tax, regulatory, or record-keeping obligations under Irish or EU law.

Third-Party Services

This website is hosted and delivered by Bunny (BunnyWay, informacijske storitve d.o.o., Ljubljana, Slovenia), a content delivery and storage provider based in the European Union. When you visit our site, your data may be processed by Bunny's infrastructure. Bunny's privacy and data-protection practices are described in their own privacy and data-protection notice, available at bunny.net/gdpr.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

International Data Transfers

This website's content is stored on Bunny's storage infrastructure in Frankfurt, Germany — a region within the European Economic Area (EEA) — with no replication regions. Bunny (BunnyWay, informacijske storitve d.o.o., Ljubljana, Slovenia) is itself a provider based in the European Union and acts as our data processor under a data-processing agreement in accordance with Article 28 of the GDPR. Your personal data is not stored on a durable basis outside the EEA.

Bunny's content delivery network serves cached content from edge locations around the world so that the site loads quickly for visitors in different regions. The only personal data that reaches the edge is limited technical data — your IP address and browser type — which Bunny may transiently process at an edge location outside the EEA. Where this occurs, the processing is carried out by Bunny as our EU-based data processor under the safeguards of our Article 28 data-processing agreement and Bunny's GDPR compliance commitments, which keep such technical data to the minimum necessary and retain it only transiently.

You may request information about the safeguards in place by contacting us at contact@cendenta.ie.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact Inquiries: Up to 2 years from last communication, or longer if required for ongoing business relationship
• Server Logs: Up to 90 days for security and performance analysis
• Legal/Compliance Records: As required by Irish and EU law (typically 6-7 years for financial/tax records)

After the retention period expires, personal data is securely deleted or anonymised.

Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will post any changes on this page and update the "Last updated" date. We encourage you to review this policy periodically.

Your Rights Under GDPR

As a data subject in the European Union, you have the following rights under the General Data Protection Regulation:

• Right of Access (Article 15): You can request a copy of the personal data we hold about you.
• Right to Rectification (Article 16): You can request correction of inaccurate or incomplete data.
• Right to Erasure (Article 17): You can request deletion of your personal data ("right to be forgotten") where there is no compelling reason for continued processing.
• Right to Restrict Processing (Article 18): You can request that we limit how we use your data.
• Right to Data Portability (Article 20): You can request your data in a structured, commonly used, machine-readable format.
• Right to Object (Article 21): You can object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent (Article 7(3)): Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at contact@cendenta.ie. We will respond within one month as required by GDPR. In complex cases, this may be extended by a further two months with notice.

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC):

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you. All decisions regarding our services are made by human review.

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at:

Cendenta Limited
Email: contact@cendenta.ie