1. Who processes your data
Controller: Teapot, s.r.o., Pri Zvonici 4140/29, 821 04 Bratislava, Slovak Republic, Company ID (IČO): 503 496 86, VAT ID: SK2120298290.
EU branch: Teapot Agency s.r.o., Příčná 1892/4, Nové Město, 110 00 Praha 1, Czech Republic, Company ID (IČ): 244 08 042, VAT ID: CZ24408042.
Contact person: Patrik Magoš, tel.: +420 739 467 241.
Privacy contact email: privacy@teapot.sk.
The postal address for serving requests is the same as the registered office. We have not appointed a Data Protection Officer.
2. What data we process
- Identification and contact data: first name, last name, company, email, phone, address, Company ID/Tax ID, message text.
- Website usage data: IP address (processed in hashed form for abuse prevention), cookie identifiers, device and browser type, time and duration of the visit, pages visited, referer.
- Marketing identifiers and segments derived from your activity on the website after consent is granted.
3. Purposes and legal bases
| Purpose | Legal basis | Retention period |
|---|---|---|
| Responding to a contact-form inquiry and pre-contractual communication | performance of a contract or steps prior to entering into a contract [Art. 6(1)(b) GDPR] | max. 12 months from the last communication |
| Service delivery, account management and invoicing | performance of a contract [Art. 6(1)(b) GDPR] | for the duration of the contract and 4 years thereafter |
| Accounting and statutory obligations | legal obligation [Art. 6(1)(c) GDPR] | as required by law, typically 10 years |
| Website security, abuse prevention (Cloudflare Turnstile, rate limiting), server logs | legitimate interest [Art. 6(1)(f) GDPR] | up to 31 days |
| Traffic analytics (Google Analytics 4) | consent [Art. 6(1)(a) GDPR] | until consent is withdrawn, typically 2 to 14 months depending on the cookie |
| Marketing and remarketing on the website and social networks (Google Ads, Meta) | consent [Art. 6(1)(a) GDPR] | until consent is withdrawn, typically 3 to 24 months depending on the cookie |
| Protection of legal claims and consent/withdrawal records | legitimate interest [Art. 6(1)(f) GDPR] | until expiry of the limitation periods |
We do not install optional analytical or marketing cookies without your consent.
4. Source of data
We collect data directly from you (e.g. from the contact form) or automatically from your device when you use teapot.sk.
5. Recipients and processors
- Vercel Inc. – hosting and CDN platform for the website (USA, EU regions).
- Resend, Inc. – transactional email delivery for the contact form (USA).
- Cloudflare, Inc. – Turnstile service for spam and bot protection (USA, EU).
- Google Ireland Limited (or Google LLC where applicable) – Google Analytics 4 and Google Ads after consent.
- Meta Platforms Ireland Limited (or Meta Platforms, Inc. where applicable) – pixel and remarketing after consent.
- IT and hosting providers, accountants, legal advisors.
These entities may act as independent controllers or processors depending on the specific service.
6. International transfers
When using Vercel, Resend, Cloudflare, Google and Meta, data may be transferred to countries outside the EEA, in particular the USA. Transfers rely on the providers' contractual mechanisms (Standard Contractual Clauses and supplementary measures). Details are available in the privacy policies of the respective providers. Consent to marketing and analytics tools also constitutes consent to such transfers.
7. Cookies and similar technologies
We use cookies for:
- strictly necessary site functions,
- traffic analytics (after consent),
- personalised advertising and remarketing (after consent).
Consent management
On your first visit we display a consent banner. You can change or withdraw your consent at any time through the cookie settings on the site or in your browser. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Cookie inventory
| Cookie | Category | Purpose | Duration |
|---|---|---|---|
| teapot_cookie_consent | strictly necessary | stores your consent choice | 120 days |
| cf_clearance | strictly necessary | Cloudflare – browser security challenge | 30 days |
| _ga | analytics (consent) | Google Analytics – user differentiation | 2 years |
| _ga_* | analytics (consent) | Google Analytics 4 – session state | 2 years |
The exact list and durations may change as the underlying services evolve.
8. Profiling and automated decision-making
For marketing purposes we may build basic audiences and segments based on website behaviour. We do not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).
9. Your rights
You have the right of access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interest and the right to withdraw consent at any time.
You can exercise your rights in writing at the registered office, by email at privacy@teapot.sk or by phone at +420 739 467 241.
You also have the right to lodge a complaint with a supervisory authority. The Slovak supervisory authority is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk. EU residents may also contact their local supervisory authority.
10. Security
We apply appropriate technical and organisational measures to protect data against loss, misuse and unauthorised access. Access to data is granted only to persons who need it for their work duties and contractual obligations.
11. Minors
The website and services are not directed at persons under the age of 16. We do not knowingly process personal data of such persons.
12. Changes to this policy
We may update this text from time to time. The new wording will be published on this page.
Effective from: 30 April 2026.
Controller: Teapot, s.r.o., Pri Zvonici 4140/29, 821 04 Bratislava, IČO: 503 496 86.
Privacy contact: privacy@teapot.sk, tel.: +420 739 467 241.