Personal Data Protection – Czech Brew Star

Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 110/2019 Coll., on the Processing of Personal Data, as amended.

1. Data Controller

The data controller is Beer Academy s.r.o., Company ID (IČO): 04814291, with its registered office at Višňová 632, 664 82 Říčany u Brna, Czechia.
Contact e-mail for all matters relating to personal data: info@czechbrewstar.com.

2. Definitions

• Personal Data: any information relating to an identified or identifiable natural or legal person.
• Participant: any natural or legal person submitting beer samples to the Czech Brew Star competition.
• Processing: any operation or set of operations performed on personal data, including collection, storage, use, disclosure, or deletion.

3. Purposes of Processing and Legal Bases

Purpose of Processing	Categories of Data	Legal Basis (GDPR)
Registration and communication with participants	name, address, e-mail, telephone, Company ID (IČO)	performance of a contract (Art. 6(1)(b))
Evaluation of the competition and announcement of results	expert assessments, submitted samples	legitimate interest (Art. 6(1)(f))
Publication of winners and marketing purposes	name, photographs, video recordings, company logo	legitimate interest (Art. 6(1)(f))
Archiving of competition documentation	all of the above categories	compliance with a legal obligation (Art. 6(1)(c))

4. Recipients of Personal Data

Personal data may be disclosed to the following third parties:

1. Expert partners of the competition:
   
   • Faculty of Agronomy, Mendel University in Brno
   • LabiChem spol. s r.o.
     Purpose: professional support for the competition (e.g., evaluation of samples, organization).
2. Media partners and other third parties:
   
   • Television, print, radio, online media
     Purpose: marketing and promotion of the competition results.
3. External IT service providers and data archiving vendors:
   
   • Server management, e-mail services, database management
     Purpose: technical support for personal data processing; all providers are bound by a data protection agreement.
4. Governmental authorities and administrative bodies:
   
   • Only where required by law (e.g., tax or accounting obligations).

5. Retention Periods

• Registration and communication data: retained for the duration of the competition plus ten (10) years thereafter.
• Audiovisual materials and marketing publications (photographs, video recordings, logos): retained until withdrawal of consent by the participant, but no later than 31 December 2099.
• Competition documentation (sample evaluations, internal reports, correspondence): retained for ten (10) years from the end of the competition, unless otherwise required by law.

After the expiration of the retention periods, all personal data will be securely deleted, anonymized, or archived in accordance with legal requirements.