Privacy Policy
Last updated: August 12, 2026
This policy describes what personal data we process in connection with saltyroad.cz — the Salty Road Meet event and the Salty Road shop — why, and what rights you have. Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll., on personal data processing.
1. Data Controllers
- Zephyron Tech s.r.o., Company ID (IČO) 23793538, Čermákova 2587/60, Jižní Předměstí, 301 00 Plzeň, Czech Republic, operates this website and the Salty Road shop and is the controller for personal data processed in connection with running them — technical data, website communication, and shop orders (name, contact details, delivery/billing details, order content and status). Contact: info@saltyroad.cz.
- David Šmídmajer, Company ID (IČO) 22171347, Mírová 1013, Prachatice, 38301, Czech Republic, organizes the Salty Road Meet event and is the controller for personal data processed in connection with vehicle registration for the event. In the shop, he acts as the seller — the contracting party of the purchase agreement, see the shop's terms and conditions. Contact: shop@saltyroad.cz.
2. What data we process
- Event registration form: first name, last name, email, Instagram (optional), vehicle brand, model and year, vehicle description, vehicle photos.
- Registration and payment status: internal approval status, registration fee payment status, event arrival confirmation.
- Technical data: when visiting the site we process anonymized, aggregated traffic data (Vercel Web Analytics) — this service does not use cookies or store data that could identify an individual.
- Shop: name, email, phone, delivery and/or billing address, order contents, chosen payment and delivery method, payment details generated for the order (QR payment/variable symbol), and IP address as a safeguard against fraudulent orders.
- Billing and accounting data for shop orders — to meet obligations under Czech accounting and VAT law.
3. Purpose and legal basis of processing
- Organizing your vehicle's registration for the event and communicating about its status — performance of a contract / pre-contractual steps (Art. 6(1)(b) GDPR).
- Publishing approved vehicles on the website (name, photo, description) — performance of a contract based on the consent given at registration.
- Website operation and security, registration administration and event entry management — legitimate interest of the controller (Art. 6(1)(f) GDPR).
- Aggregated website traffic (Vercel Analytics) — legitimate interest of the controller, without processing personal identifiers.
- Concluding and performing the shop purchase agreement — processing the order, payment, delivery, and communicating about its status — performance of a contract (Art. 6(1)(b) GDPR).
- Issuing tax documents and meeting accounting/tax obligations for orders — compliance with a legal obligation (Art. 6(1)(c) GDPR).
4. Cookies
The website only uses technical cookies necessary for the admin and crew (organizing team) login to the non-public part of the site (PIN entry). These cookies do not track visitors and do not require consent under Czech Electronic Communications Act § 89. Website analytics (Vercel Web Analytics) does not use cookies.
5. Recipients and processors
- Vercel Inc. — website hosting, photo storage and analytics (processor).
- Resend — sending registration and order status emails (processor).
- Database provider (PostgreSQL) — storing registration and order data (processor).
- Delivery companies (e.g. Zásilkovna, Česká pošta) — delivering shop orders (processor).
- We do not share your data with third parties for marketing purposes.
6. Retention period
We retain event registration data for the duration of the event preparation and the event itself, and for a reasonable period afterwards (in particular for handling complaints), but no longer than 12 months after the event. We retain shop order data for as long as needed to process the order and handle any complaints or withdrawal; billing and tax documents (invoices) are retained for the period required by law, i.e. 10 years from the end of the tax period in which the supply took place.
7. Your rights
- Right to access your personal data and receive a copy.
- Right to rectification of inaccurate data.
- Right to erasure ("right to be forgotten").
- Right to restrict processing and right to object.
- Right to data portability.
- Right to lodge a complaint with the Czech Office for Personal Data Protection (uoou.cz).
8. Contact
You can exercise your rights by emailing info@saltyroad.cz (event registration and general inquiries) or shop@saltyroad.cz (shop orders).