This privacy notice explains how Sweet Artisan Bakehouse processes personal data in connection with its website, contact channels, and bakery services in Topoľčany.
We process personal data to respond to enquiries, confirm orders or collection preferences, manage contact form submissions, support website security, and ensure technical delivery of the site. Where allergen information is provided voluntarily, it is used only to support the specific order or communication concerned.
Data may be shared with service providers that support website operation, technical delivery, security, or message handling. Such recipients act only on instructions relevant to their role and should process the data only for the agreed operational purpose.
Personal data may be disclosed where required by law, to respond to lawful requests, or to protect the rights, property, or security of the controller, users, or others. Any disclosure is limited to the extent necessary for the relevant legal or operational purpose.
Privacy data overview
We may process name, email address, phone number if provided, inquiry message, order specifications, event date or collection preferences, and allergen information voluntarily provided. We also process limited technical data such as server request metadata and browser and device information when the website is used.
Data is obtained from contact form submissions, email, telephone calls, in-person counter interactions, and order or collection arrangements. Technical data is collected through the operation of the website and related security and delivery functions.
Confirmed cookie use is limited to essential site operation and the storage of privacy preferences. Essential cookies support basic site functions, while preference cookies help retain selected privacy settings. Unconfirmed uses such as analytics or marketing are not described as active in this notice.
Only essential cookies and cookies used to remember privacy preferences are confirmed for this website. Where browser settings allow, users may block or delete cookies, but essential functions may be affected if those cookies are disabled.
Individuals may have rights to access, correction, deletion, restriction, objection, and data portability, as well as the right to withdraw consent where consent is the basis for processing. Requests are reviewed case by case and may be limited where legal obligations or legitimate operational needs require continued processing.
To exercise a right, the requester should provide sufficient information to identify the relevant data and the nature of the request. Additional information may be requested to verify identity or to clarify the scope of the request before a response is issued.
Personal data is kept only for as long as needed to handle the enquiry, order, service relationship, security requirements, or legal recordkeeping duties. When the relevant purpose ends, data is deleted, anonymised, or otherwise restricted in accordance with applicable law and internal retention rules.
When this notice is updated, the revised version will apply from the stated effective date. Material changes may be communicated through the website or by another suitable channel where appropriate.
The controller processes personal data on the basis of user requests, website operation, security needs, and other lawful grounds applicable under GDPR. Processing is limited to the purposes stated in this notice and to data that is relevant for those purposes.
Where GDPR applies, individuals may request access, rectification, erasure, restriction, objection, and portability, subject to legal limits and verification of identity where necessary. If consent is used for a specific processing activity, it may be withdrawn for future processing without affecting prior lawful processing.
Use the contact details below for privacy questions and rights requests.
