This notice explains how the data controller shown below processes personal data on the Sushi Fest Praha website.
Data we process
Updates list: your email address, the site language, the consent version and the time you gave it.
Restaurant registration: name, company ID (IČO), city, website or Instagram, contact person, email, phone and your message.
Partner enquiry: company name, contact person, email, phone, city, website and your message.
For every submitted form we also store a technical submission number that stops the same request being stored twice.
Website operation: technical data your browser sends when loading a page, such as your IP address. With your consent, also data from the measurement tools described on the Cookies page.
Why we process it
We send updates on the basis of your consent under Article 6(1)(a) GDPR. Analytics and advertising cookies, and the measurement based on them, rely on the same basis.
We process restaurant and partner enquiries to reply and to arrange possible cooperation, under Article 6(1)(b) and (f) GDPR.
Running and securing the website, and the basic traffic measurement without cookies or a visitor identifier described below, rely on our legitimate interest under Article 6(1)(f) GDPR.
Filling in the forms is voluntary, but without those details we cannot reply or send you updates. We do not carry out automated decision-making or profiling with legal effects.
Who receives the data
Our suppliers process the data to run the website, deliver email and store submitted forms. They may use it only on our instructions.
With analytics or advertising consent, we send measurement data to Google and Meta. Even without consent, Google receives basic data about the pages viewed and interactions on the site, with no cookies and no visitor identifier. For every accepted registration and business enquiry we send Meta your email, and for enquiries your phone number too, only ever as a one-way hash, never in readable form. We do not send them your message or the contact person's name.
We do not sell your data.
Transfers outside the EU
Some suppliers, including our hosting provider Vercel and the companies Google and Meta, may process data outside the European Union. Those transfers are covered by the European Commission's Standard Contractual Clauses or other safeguards under GDPR.
How long we keep it
Updates list email: until you withdraw consent, and no longer than the end of the 2027 edition.
Restaurant and partner enquiries: while we handle them and for as long as the law requires afterwards.
Your cookie choice: 180 days. Individual cookie lifetimes are on the Cookies page.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object to processing based on legitimate interest. Just write to the contact shown above.
You may withdraw consent at any time; withdrawal does not affect processing before it. Change cookie consent with the Cookie settings link in the footer, and withdraw consent for updates at the contact shown above.
You may also lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.