Privacy notice
How we handle website requests and correspondence, the providers we use, and the rights available to you.
01Controller and scope
Sentico Labs GmbH is responsible for the processing described in this notice.
- Company
- Sentico Labs GmbH
- Registered office
- Mariahilfer Straße 123/3, 1060 Wien, Austria
- Contact
- office@sentico-labs.xyz
- Company register
- FN 545238 x · Handelsgericht Wien
This notice covers the public company website sentico-labs.xyz, its read-only development data and correspondence with our contact address. It does not describe the complete account, wallet, trading or settlement processing of app.sentico-labs.xyz. Following a link to that application is a separate interaction.
Use the email or postal address above for privacy requests. Do not send passwords, private keys, seed phrases or unnecessary sensitive information.
02What we process and why
| Activity and data | Purpose | Legal basis |
|---|---|---|
| Website requests: IP address, time, URL, HTTP headers, browser/device details, response status and diagnostics. | Deliver pages and data, maintain availability, investigate faults and protect against abuse. Our legitimate interests are a reliable and secure information service. | Article 6(1)(f) GDPR, limited to necessary processing and balanced against visitors' rights. |
| Contact messages: email address, name if supplied, message, attachments and correspondence metadata. | Answer inquiries and necessary follow-up. For general and business-contact messages, our legitimate interest is communicating with the person contacting us. | Article 6(1)(b) for steps you request toward a contract with you; otherwise Article 6(1)(f). |
| Incident or transfer reports: contact details, transaction references, public addresses and relevant evidence. | Investigate the event, communicate about it and establish, exercise or defend rights. | Article 6(1)(f); Article 6(1)(c) where a specific legal disclosure or preservation duty applies. |
| Legally required records: relevant correspondence and transaction documents. | Meet applicable accounting, tax and other statutory obligations. | Article 6(1)(c), including applicable Austrian accounting and tax retention rules. |
Request data comes from your browser and delivery infrastructure. Contact and report data comes from you or the person communicating with us; reports may also refer to public transaction records. We do not use website visits to build advertising profiles or sell visitor data.
03Hosting, security and email
We use these providers to operate the website and handle correspondence:
- Hetzner: hosting in Falkenstein, Germany; technical data needed to host and secure the service. Hetzner privacy information.
- Cloudflare: content delivery and traffic protection; network and request information, including security checks where triggered. Cloudflare privacy information.
- Google Workspace / Gmail: business email delivery and storage; message content, attachments and communication metadata. Visiting this website does not itself send an email to Google. Google Workspace data-processing terms.
Access within Sentico is limited to people who need the information for their task. Other recipients can include professional advisers dealing with a specific matter and authorities or courts where disclosure is legally required or necessary to establish or defend rights. Providers may use subprocessors described in their published processing information.
04Processing outside the EEA
Hosting in Germany does not mean all processing stays in the European Economic Area. Cloudflare and Google operate internationally; processing or support access can involve the United States and other countries.
For transfers covered by the EU–US Data Privacy Framework, the providers describe reliance on their certified US entities and the European Commission's adequacy decision. For restricted transfers not covered by an applicable adequacy mechanism, their processing terms provide European Commission Standard Contractual Clauses and the safeguards described there. These mechanisms apply according to the recipient, service and transfer scope.
See Cloudflare’s Data Processing Addendum and Google’s Cloud Data Processing Addendum. Request information about safeguards applicable to your data, and a copy where applicable, at office@sentico-labs.xyz.
05Cookies, fonts and browser connections
The company website serves fonts locally. It does not automatically embed the trading application, load Google Fonts, connect a wallet or request a transaction signature. Market and protocol information comes from Sentico's public data API; those requests transmit technical information needed to return the data.
The website application does not use advertising cookies, a visitor-tracking SDK or persistent localStorage preferences. Chart controls and navigation state are held in memory. Your browser may cache website files during normal page delivery.
Cloudflare may set security cookies when a protection feature or challenge is triggered. These protect the service rather than personalise advertising. For example, Cloudflare describes a 30-minute inactivity expiry for __cf_bm; challenge-related cookies and their lifetime depend on the feature applied. Cloudflare cookie information.
Optional tracking or nonessential device storage introduced in future requires a separate assessment and, where required, prior consent. Reading this notice or continuing to browse is not consent. External links contact the destination when you choose to open them.
06Public development data
Analytics describes protocol tests, not the behaviour of visitors to this website. We display aggregate activity and market information. The company website does not display individual trader rankings or wallet-address lists.
Company contract addresses and transaction references may be visible as technical sources. Public availability does not make information anonymous. If you contact us about a reference connected to you, we use the information to investigate and answer your request as described above. Public blockchain records are maintained by their networks; removing information from this website does not erase the underlying record.
07Retention and deletion
Our website retention policy limits storage by data category:
- Routine access and diagnostic logs: a maximum of 14 days from collection for fault and security analysis. If a specific incident is identified, only relevant records are retained separately for investigation and resolution.
- General inquiries: deletion within six months after the inquiry and necessary follow-up conclude, unless the correspondence becomes a record covered by a legal obligation or specific dispute.
- Incident, transfer and dispute files: relevant records until the matter is resolved and any applicable preservation duty or necessary legal-claim retention ends. We review the continuing need when the matter closes; unrelated routine logs are not retained with it.
- Accounting and business records: where Austrian statutory retention duties apply, relevant documents are generally kept for seven years under § 132 BAO or § 212 UGB. The period runs from the end of the relevant calendar year, determined by the applicable record, accounting period or receipt or dispatch of the business correspondence; pending proceedings can require longer preservation. This does not apply to every email or website request.
We delete information earlier when its purpose has ended and no justified retention ground remains. These rules cover records under our control, including processor-held copies. Provider processing for independently determined purposes is described in its own privacy information. A legal hold does not justify keeping unrelated data indefinitely.
08Your rights
Subject to the GDPR's conditions, you can request access, correction, erasure or restriction. Data portability applies where its conditions are met, including automated processing based on consent or a contract. You may withdraw consent at any time without affecting processing lawfully carried out before withdrawal.
Send requests to office@sentico-labs.xyz. We respond without undue delay, normally within one month. A legally justified extension of up to two further months is possible; we will explain it within the first month. Where there are reasonable doubts about identity, we may request proportionate additional information.
09Complaints and choices
You may complain directly to a competent supervisory authority, especially in the EU country where you live, work or believe an infringement occurred. You do not need to contact us first.
In Austria: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien; dsb@dsb.gv.at. See the official complaint information.
Providing contact information is voluntary, but we need sufficient details to reply or investigate. Network data is necessary to deliver requested pages. We do not make decisions about visitors with legal or similarly significant effects through automated profiling. Security systems may challenge or block suspicious requests; contact us if a legitimate request is affected.
10Changes to this notice
We update this notice when the website, providers or processing materially change. The date above identifies this version. We provide additional information before using data for a new purpose where required. See Legal for development status and Website Terms of Use for website use.