Privacy policy

I. Controller

The controller of personal data under Article 4(7) GDPR is SCA Czech Republic z.s., ID 07766114, Ruprechtická 495/151, 460 14 Liberec, Czech Republic.

Contact: info@scacr.coffee · +420 724 269 354.

No data protection officer has been appointed.

II. Data we process

We process identification and contact data you provide, and data needed to fulfil membership, registration, orders or event participation.

III. Legal bases and purposes

• contract performance (Art. 6(1)(b) GDPR),
• legitimate interest in direct marketing / newsletters (Art. 6(1)(f)),
• your consent for marketing where required (Art. 6(1)(a)).

We do not carry out automated individual decision-making under Art. 22.

IV. Retention

Contract-related data: as long as needed to exercise rights and claims (up to 15 years after the relationship ends). Marketing based on consent: until withdrawn, max. 5 years.

V. Recipients

Processors involved in payments, service operation and marketing. Transfers outside the EU may involve mailing or cloud providers.

VI. Your rights

Access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. You may lodge a complaint with the Czech Office for Personal Data Protection.

VII. Security & updates

We apply appropriate technical and organisational measures. This policy may be updated on this page. Effective since 1 November 2023.