Privacy notice
Short and without the legal fog: what we know about you, why we need it and how you get rid of it.
This is an English translation for your convenience. The binding version is the Slovak one at Ochrana osobných údajov.
Who processes your data
The controller is JuliCake, s. r. o. · IČO 45887845, registered office Športová 3, 900 42 Dunajská Lužná, entered in the Slovak commercial register (Obchodný register Mestského súdu Bratislava III, oddiel Sro, vložka č. 68494/B).
What we know about you
If you send us the order form, we get exactly what you fill in: your name, phone number, the date and approximate time of collection, the text of your note and an inspiration image if you attach one. E-mail is optional — if you fill it in, the order confirmation goes there.
If you put your cake together in the order configurator, your choice of cake is added to that: size, variant, sponge, cream, fruit, topping, any decoration, who the cake is for and the message on it. That is data about the cake, not about you; it belongs to the order so that we bake it the way you want. The form does not ask for your address and the website has no analytics scripts.
When the form is sent, we also store with the order your IP address, the type of browser and how long filling it in took. This is used solely to protect against fake and mass-submitted orders and is deleted automatically after 30 days.
When you call us, send an e-mail or write through Messenger or Instagram, we have whatever you send us in that message. Those services are run by their owners under their own rules; if that bothers you, call or send an e-mail instead.
Why we need it
The purpose is handling your order — so that we know what you want, when you are coming to collect it and on what number we can reach you. The inspiration image is used solely to get close to what you have in mind.
If we agree on an order, we also need your contact details to tell you how it is going and when to collect it.
The legal basis is the preparation and performance of a contract between you and us. For orders we invoice, keeping the accounting records is required by law. The IP address and browser data are processed on the basis of our legitimate interest in protecting orders from abuse.
You give us the data voluntarily — no law requires it of you and nothing happens if you do not. Without a name and a contact we simply cannot answer you or hand the cake over. Once an order exists and we invoice it, the data needed for the accounting document is required by law.
How long we keep it
An enquiry that did not turn into an order is deleted within a year at the latest. If an order did come about, we keep the data for as long as tax rules require — for accounting documents that is ten years.
The inspiration image is deleted together with the enquiry — once the order is handled we no longer need it and we do not use it anywhere else. If we ever wanted to show it in the gallery, we would ask you first.
A submitted form and a message both end up in our e-mail inbox. The same periods apply to them as above — we delete them by hand, they do not disappear on their own. At the delivery service the record of sending is deleted automatically under its own rules, usually within days.
Who gets to see it
Nobody who does not have to. We do not sell it, we do not send it into advertising systems and we do not use it to send out offers.
If we invoice the order, our accountant also sees the document — it carries your name and billing address. She processes it solely for bookkeeping, she is bound by confidentiality and she works in Slovakia.
Apart from her, the only others who technically reach the data are the services without which the website would not work:
- Cloudflare — hosting of the website and processing of the submitted form. It sees the usual data about a visit, such as your IP address, like any web server. On the form it uses its Turnstile service to check that the form is not being sent by a robot, which looks at technical browser data and the IP address.
- Resend — delivery of the form into our e-mail inbox.
- MCW One Solutions — runs the system in which we record the order and track its status. It does so on our behalf and on our instructions, and is bound by confidentiality.
- Neon — the database in which that order is physically stored. The servers are in Frankfurt, that is, in the European Union.
- The provider of the e-mail service where our inbox is.
Cloudflare and Resend are American companies, so data may also be processed outside the European Union. The transfer is covered by standard contractual clauses, or by the EU-U.S. Data Privacy Framework.
Cookies and tracking
This website has no cookies of its own, no analytics, and it does not follow you around the internet. There is no Google Analytics or anything like it. The fonts are on our own server, so loading them does not connect you anywhere else.
The one exception is the Google map in the Contact section. When it loads, Google receives your IP address and stores its own cookies in your browser — which is why we do not load it until you allow it. If you decline, the map is not shown and a link that opens it directly at Google stays in its place.
Your answer is remembered in your browser storage so that you are not asked on every visit. It is the only record we store here, it stays on your device and it is not sent anywhere. Clearing the site data removes it and the website asks again.
What you can ask for
- to be told what data we hold about you
- to have it corrected if it is wrong
- to have it deleted
- to have us stop using it for a while until something is cleared up (restriction of processing)
- to be given it in a readable form
- to object to the way we use it
Just call or write — the contact details are in the footer and in the Contact section. We answer within a month at the latest.
If you were not happy with the way we handle your data, you can turn to the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava.