Privacy Policy

Who we are and what this notice covers

This notice covers the public pages, public business profiles, and appointment-booking functions available on BlueMark24.com. It does not currently cover the separate business account service at panel.bluemark24.com. Participating businesses may publish their own privacy notices for their services and their handling of appointment information.

BlueMark24.com is a business being developed in Toronto, Canada. Its registered legal entity, full postal address, and dedicated privacy contact. BlueMark24 has not yet confirmed an EU representative. This working draft must not be published as a final privacy notice until those details and the allocation of privacy responsibilities between BlueMark24 and participating businesses have been legally confirmed.

BlueMark24 determines how technical website data, language preferences, and direct communications are handled. Whether BlueMark24 acts as a processor, separate controller, or joint controller for appointment information. BlueMark24's Canadian commercial processing may also be subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).

Information we process and why

Website delivery and security. When you access BlueMark24.com, the Host Europe server processes technical request and connection information, which may include your IP address, request time, requested resource, response information, and technical errors. IP anonymization is enabled during log rotation, and server logs are retained for no longer than seven days. The purposes are to deliver the website, maintain security and reliability, prevent misuse, and investigate faults. Where the GDPR applies, the legal basis is BlueMark24's legitimate interests under Article 6(1)(f) GDPR.

Language preference. When you select a supported language, BlueMark24 stores the selected language code in Local Storage under bluekortex.public-panel.language. It contains no unique visitor identifier and is not used for tracking. It remains until you change it or clear the site's browser data. This storage provides a language preference expressly requested by you and is treated as necessary under section 25(2)(2) TDDDG. To the extent the preference is personal data, the GDPR basis is Article 6(1)(f).

Appointment requests. When you request an appointment, BlueMark24 processes your name, email address, selected business and service, appointment start and end time, booking status, creation and update timestamps, and hashed confirmation or cancellation tokens. These details are used to check availability, submit and manage the request, verify your email address, allow confirmation or cancellation, send service messages, and provide the appointment to the selected business. Name and email address are required for the standard public booking flow; BlueMark24 cannot process that request without them. To the extent BlueMark24 is a controller, processing requested to arrange the appointment is based on Article 6(1)(b) GDPR, while security and abuse-prevention processing is based on Article 6(1)(f). The final role allocation and legal bases remain.

Booking invitations and direct contact. A participating business may provide your name and email address to BlueMark24 so that BlueMark24 can send an invitation to book. In that situation, the participating business is the source of the information. If you contact BlueMark24 by email, BlueMark24 processes your address, message, and related correspondence to answer you. Contract-related inquiries are handled under Article 6(1)(b) GDPR; other inquiries are handled under Article 6(1)(f). BlueMark24 does not use this information for marketing, AI, profiling, or decisions based solely on automated processing.

Recipients, service providers, transfers, and retention

BlueMark24 does not sell or rent personal information. Appointment details—name, email address, selected service, and appointment time—are made available to the participating business with which you requested the appointment. That business handles the information for its own appointment and service purposes under its own privacy responsibilities.

Host Europe GmbH, c/o Spaces, Gertrudenstraße 30–36, 50667 Cologne, Germany, provides the virtual private server, application hosting, and MySQL database infrastructure. The server and database are located in France. Host Europe may process website and booking information on BlueMark24's behalf when providing infrastructure or technical support. Whether the required data-processing agreement has been concluded.

Microsoft Azure Communication Services is used to send booking invitations, verification messages, confirmations, status messages, and cancellation links. Microsoft may receive the recipient's email address and the business, service, appointment, and link information included in the message. Microsoft states that email content is processed in real time using the configured data location, that diagnostic data required to provide the service is collected, and that recipient addresses associated with hard bounces may be retained temporarily for abuse prevention. The Azure contracting entity, configured data location, diagnostic settings, and applicable international-transfer safeguards.

BlueMark24 is based in Canada, so information relating to European users may be accessed or otherwise processed in Canada. The European Commission recognizes Canada as adequate for transfers to commercial organizations, but whether that decision covers BlueMark24's final legal entity and each relevant data flow. Any required EU representative and additional transfer safeguards must be established before publication.

Server logs are retained for up to seven days. The Local Storage language preference remains until it is changed or cleared. Retention periods for appointment records, booking invitations, correspondence, and Microsoft email records. The current booking implementation has no automatic deletion schedule, so a retention schedule must be approved and implemented before this notice is published. No separate automated hosting backups are currently configured.

• Host Europe privacy statement
• Microsoft privacy statement
• Azure Communication Services data-residency information

Optional analytics

With your consent, BlueMark24 loads Google Analytics to measure visits and website interactions. Google receives usage data including pages visited, browser and device information, and pseudonymous cookie identifiers. Rejecting analytics does not affect booking. The tag stays unloaded before acceptance, and advertising storage, advertising user data and personalized advertising remain disabled.

Your choice and its date are stored for 180 days in Local Storage under bluekortex.public-panel.analytics-consent. We then ask again. Without browser storage, the choice applies only to the current page. Analytics cookies use the bk_public prefix and expire after 180 days, without extending expiry on each visit. You can change your choice through Cookie settings on any page. Rejection stops future collection and clears these cookies; it does not erase data already sent to Google.

• Google privacy policy

Your rights, complaints, and changes

Depending on the law that applies, you may request access to and correction of your personal information, ask for deletion or restriction, receive certain information in a portable format, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent for the future. GDPR rights are subject to their statutory conditions and exceptions. BlueMark24 may need to verify your identity before responding to a request.

For questions about a particular appointment or a participating business's services, contact that business through the details on its public profile. Requests concerning BlueMark24's own processing should be sent.

You may raise a concern with the Office of the Privacy Commissioner of Canada. If the GDPR applies, you may also lodge a complaint with a supervisory authority, particularly in the EU or EEA country where you live, work, or believe an infringement occurred. These complaint rights do not prevent you from using other administrative or judicial remedies.

BlueMark24 may update this notice when its service, providers, or legal obligations change. The current version and its update date will be published on this page. Material changes will be communicated through an appropriate channel where required.

• Office of the Privacy Commissioner of Canada
• EU and EEA data-protection authorities