PRIVACY

Updated 9 October 2026

Who handles your data

StrandLine s. r. o., company ID 57 053 634, operates accounts and the Smash Klub programme at smashthat.sk. Contact: strandline.official@gmail.com, +421 952 189 281. Bistro contact location: Hradská 8833/7A, Bratislava.

Accounts and loyalty cards

Registration uses your first name, surname, email and phone. Passwords are stored as one-way hashes. Your phone uniquely identifies your card; the required details are needed to open it. We record stamps and card changes: time, staff member, correction reason and the item issued as a reward. Authorized staff can find a card by its QR or phone.

At the bistro, staff can create a card at your request using only a phone and optional name, without email or sign-in credentials. You can link it to an online account with a one-time code issued by staff, preserving your stamps and history. Removing a card from the staff list archives it reversibly; it does not close your account or fulfil a data-erasure request.

Google sign-in

Google is optional; email sign-in is also available. Google sign-in provides your Google account identifier, email and basic profile, such as your name and profile picture, to create or connect your account. We request only email and profile permissions. We cannot access Gmail messages, Drive files, contacts or Google payment details. You add your phone and the details needed for your card on our website. You can revoke the connection in your Google settings. Google handles data under its own privacy policy; its services may process data outside the EEA using Google's safeguards.

Purpose, legal basis and retention

We manage accounts, sign-in and stamps to provide the Smash Klub service you request. Security controls and correction records protect accounts and the programme against misuse under our legitimate interests. Account and card history are retained while you use your account; contact the email above to request closure. On closure we remove your profile, customer card and its history, unless particular records are needed for a legal obligation or ongoing dispute. Technical logs and backups are retained for the period needed to secure and restore operations.

Technical information and recipients

WordPress uses essential sign-in cookies. The server may record IP addresses, times and request information; sign-in limits repeated attempts. A previously used cart may retain chosen items locally in your browser. Websupport provides hosting; access is limited to authorized administrators and staff according to their role. Google sign-in data is used for authentication and account management, not sold or supplied for advertising or AI training. This configuration has no marketing or analytics tracker. Website purchases and payments are currently disabled; Wolt and Bistro links open separate services with their own rules.

Your rights

You may request access, correction, deletion, restriction and portability where the relevant right applies, and object to processing based on legitimate interests. Contact us at the email above; we verify identity before fulfilling requests. We do not use automated decisions with legal or similarly significant effects. You can complain to the Slovak Office for Personal Data Protection.