Privacy policy
How BlueKiezel handles personal data on this website: what we collect, why, for how long, and your rights under the GDPR.
Effective September 15, 2026
This policy explains what personal data we collect on www.bluekiezel.com, why, for how long, and what rights you have under the General Data Protection Regulation (GDPR).
Who we are
BlueKiezel is the data controller for the personal data described in this policy. We are established in the European Union and provide Drupal migration, hosting and support services to organisations.
For any question about this policy or about your data, write to contact@bluekiezel.com. Our full company details appear on our proposals, contracts and invoices, and we provide them on request.
What we collect and why
We collect as little as we can. For each purpose, this is the data involved and the legal basis under Article 6 of the GDPR.
Answering your enquiry. When you use the contact form we collect the data you enter so that we can reply and, if you ask, prepare a proposal. Legal basis: Article 6(1)(b), steps taken at your request before entering into a contract, and Article 6(1)(f), our legitimate interest in responding to business enquiries.
Understanding how the site is used. If you accept analytics cookies we use Google Analytics 4 to see which pages are visited, from which country and device type, and how visitors arrive. Legal basis: Article 6(1)(a), your consent. Nothing is collected for this purpose until you give it.
Keeping the site available and secure. Our hosting provider records server logs containing your IP address, the requested URL, the time, the response status, the referring page and your browser's user agent string. We use these to detect abuse and diagnose errors. Legal basis: Article 6(1)(f), our legitimate interest in running a secure website.
We do not sell personal data and do not use it for automated decision-making.
Cookies
No cookie is set before you make a choice in the cookie banner. Declining is as easy as accepting.
| Name | Type | Set by | Purpose | Duration |
| --- | --- | --- | --- | --- |
| cookie_consent | localStorage entry, not a cookie | This site | Stores your choice, either "accepted" or "declined", so the banner does not reappear | 12 months |
| _ga | Cookie | Google Analytics 4 | Distinguishes one visitor from another. Only set after you accept | 2 years |
| _ga_* | Cookie | Google Analytics 4 | Keeps session state for the property. Only set after you accept | 24 months |
You can change or withdraw your choice at any time through the "Cookie settings" link in the footer, which reopens the banner. Withdrawing consent stops further analytics collection. It does not delete data already sent to Google; see your rights below for how to request that.
Contact form
The contact form asks for your name, your work email address, the topic of your enquiry and your message. You can also give the address of your website and tick a box to ask for a 30-minute video call; both are optional. The form contains a hidden honeypot field that a person cannot see; if it holds a value, the submission is treated as automated and discarded without being stored.
Submissions are sent to us by email through Cloudflare's email service. We keep messages and the email threads that follow for up to 24 months after the last contact with you, then delete them, unless the enquiry led to a contract, in which case the records follow that contract's retention rules.
Hosting and processors
We use two processors, each under a data processing agreement that meets Article 28 of the GDPR.
- Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, United States. Hosts the site, serves it through its content delivery network, protects it from abuse, transports contact form emails and processes server logs on our behalf.
- Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. Provides Google Analytics 4, used only after consent. IP addresses are anonymised before storage.
Both providers may transfer data outside the European Economic Area. Where that happens, transfers rely on the European Commission's standard contractual clauses.
Retention
- Contact form messages and follow-up email: up to 24 months after the last contact.
- Server logs: 30 days, held by Cloudflare.
- Google Analytics 4 event data: 14 months, after which Google deletes it automatically.
- Your cookie choice: 12 months, stored in your own browser.
When a retention period ends the data is deleted or anonymised.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you and receive a copy.
- Rectification of data that is inaccurate or incomplete.
- Erasure of your data where we no longer have a reason to keep it.
- Restriction of processing while a dispute about accuracy or lawfulness is resolved.
- Portability of the data you gave us, in a machine-readable format.
- Object to processing based on our legitimate interests.
- Withdraw consent at any time where processing is based on consent, without affecting what was done before.
To exercise any of these rights write to contact@bluekiezel.com. We answer within one month and may ask you to confirm your identity first.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state where you live or work. The European Data Protection Board lists them at https://edpb.europa.eu/about-edpb/about-edpb/members_en.
Changes to this policy
We update this policy when our practices, our processors or the law change. The effective date at the top of the page shows the current version. This policy is reviewed at least once a year.