Slovak Roasting Masters
SK
Privacy policy

What we dowith your data.

No fluff: the entry form is the only place where we collect anything from you. Here is exactly what, why and for how long.

In force since 27 July 2026

  1. Who processes your data

    The controller is Marko production s.r.o., Jakabova 57, 821 04 Bratislava, Slovakia, company ID 47 708 441, VAT ID SK2024062854 — the organiser of Slovak Roasting Masters Bratislava 2026.

    For anything to do with your data, write to info@slovakroastingmasters.sk. A person answers, not a bot.

  2. What we collect

    Exactly what you fill in on the entry form, and nothing else:

    • email and phone — so we can reach you
    • competitor name
    • billing name, registered address, company ID, tax ID and VAT ID — for the entry fee invoice
    • your roastery website or social media (optional)
    • any notes you write us (optional)
    • the language of your entry, the time we received it and a record that you ticked both consents
  3. Why we need it and on what legal basis

    Each purpose has its own legal basis, not one for the whole form:

    So we do not process most of the data because you ticked a box — we need it to perform our agreement on your participation and to comply with the law.

    You can object to any processing that rests on legitimate interest. Just write to info@slovakroastingmasters.sk.

    • registering you, confirming your place and sending instructions for the training and the competition day — performance of our agreement, Art. 6(1)(b) GDPR
    • issuing and booking the invoice for the entry fee — legal obligation, Art. 6(1)(c) GDPR; that is why we ask for the company ID, tax ID and VAT ID
    • keeping a record of when and on what terms the entry was submitted — our legitimate interest in being able to demonstrate it and to defend against any claims arising from the competition, Art. 6(1)(f) GDPR
  4. What is mandatory and what happens if you leave it out

    Without the required fields and without both consents ticked, the form will not send your entry — not out of spite, we simply cannot register you without them.

    The website and notes fields are optional. Leave them empty and nothing happens.

  5. Who else sees your data

    We do not sell it, we do not trade it and we do not use it for third-party advertising. Only those without whom the entry form would not work are on the route:

    • the competition organisers — the small group of people running it
    • Supabase Pte. Ltd. (Singapore) — the database your entry is stored in and the server function that processes it
    • Plus Five Five, Inc., the operator of Resend (USA) — sending email notifications and confirmations
    • Render Services, Inc. (USA) — hosting for this website
    • the accountant handling the entry fee invoice
  6. Where the data is stored and where it travels

    The entries themselves live in a database in Frankfurt, Germany. Not everything stays inside the European Union though, and we are not going to pretend otherwise:

    These transfers are covered by standard contractual clauses approved by the European Commission (decision 2021/914). The US providers additionally adhere to the EU-US Data Privacy Framework, but that supplements the clauses rather than replacing them.

    • the database is operated for us by Supabase Pte. Ltd., based in Singapore, which uses sub-processors in the USA
    • the server function that receives and stores your entry runs in the location closest to you — that need not be in the EU
    • emails about your entry are delivered by Resend (Plus Five Five, Inc., San Francisco). Their content — your name, contact details and addresses — and the records of sending them are kept in the United States, and choosing a European sending region does not change that
    • this site is hosted by Render Services, Inc. (USA) and delivered through a global network of servers, so it loads from the one nearest to you
  7. How long we keep it

    Once the period is over, we delete the record.

    • the entry fee invoice and accounting records for 10 years — required by Slovak accounting law
    • your entry and contact details until the end of the edition and then for another 3 years, while something may still need documenting
    • the record of your consents for as long as the entry itself
  8. No cookies, no tracking

    This website stores nothing in your browser. No cookies, no analytics, no tracking scripts. Even the fonts are on our own server, so nothing is sent to Google when the page loads. That is why you will not find a cookie banner here — there is nothing to click away.

    The result of the competition is decided by the jury at the cupping. We use no automated decision-making and no profiling.

  9. How we protect the data

    Your entry travels over an encrypted connection straight to the server that processes it. Nothing can be written to the database from a browser — writing is done solely by a server function that checks the data first.

    Only a logged-in administrator can reach the stored entries. Nobody else can read them, even knowing the database address.

  10. Your rights

    Just write to info@slovakroastingmasters.sk. We will get back to you within one month at the latest.

    Some of them have limits and it is fairer to say so upfront: invoices and accounting records have to be kept by law, so we will not delete or transfer them on request until that period ends. The right to object applies only to data we process on the basis of legitimate interest.

    • I want to know what data you hold about me
    • I want it corrected
    • I want it deleted
    • I want its processing restricted
    • I want it in a form I can take elsewhere
    • I object to it being processed
  11. If you think we are handling your data badly

    Write to us first. Most things get sorted in one email.

    If you are not satisfied, you have the right to lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic, Galvaniho Business Centrum II, Galvaniho 7/B, Bratislava, Slovakia, dataprotection.gov.sk.

  12. When we change this text

    We will change the date at the top of this page and publish the new wording here. The old wording stops applying.