Version: 1.2
Last updated: 20 October 2026
This notice explains how Brenthix processes personal data when you use an account on the Brenthix website, and what your rights are.
1. Who we are
The Brenthix platform is operated by:
ForBITS s. r. o.
Jazerná ulica 8025/9
921 01 Piešťany
Slovak Republic
Company ID: 51 892 634
Registered in the Commercial Register of the District Court of Trnava, section Sro, file no. 42881/T.
Contact for data protection matters: support@brenthix.eu
In this notice it is referred to as "Brenthix" or "we".
2. When we are the controller and when the organizer is
Brenthix is a platform through which you register for events of different organizers. Two parties are therefore involved with your data:
• The event organizer is the controller of the data you provide when you register for its event (participant details, form answers, event consents). The organizer decides what it uses this data for. Information about this processing and the event's consents are shown when you register for the event. Brenthix processes this data for the organizer as a processor, that is, only on the organizer's instructions and to run the registration. • Brenthix is the controller of the data about your user account and of the data needed to run and secure the platform. This notice covers that processing.
Please direct questions about your event registration data to the organizer first; its contact is shown on the event page. If you contact us, we will pass your request on to the organizer.
3. What data we process
Account. E-mail address, name, password, preferred language and whether your e-mail address is verified. We store your password only as a one-way hash, so not even we know it.
Contact details. If you save them in your account, your phone number and delivery address (street, city, postal code, country). We use them only to fill them in for you when you order; they become part of an order only when you submit it.
Saved participants. If you save yourself or other people in your account, we store the details you enter about them: first and last name, date or year of birth, gender, country, city, club, e-mail and phone. If you save another person's details (for example a child's or a family member's), make sure you are entitled to do so and that the person knows this notice.
Orders. An overview of the orders linked to your account: order number, event, registrations, amounts and payment status. We do not process payment card details; you enter them directly with the payment service Stripe.
Technical data. Sign-in and session data (for example the time of sign-in, IP address and browser type) and records created while running and securing the service.
4. What we use the data for and on what legal basis
• Running your account: creating and managing the account, signing in, contact details, saved participants and the order overview. Legal basis: performance of the contract you enter into with us by creating the account (Art. 6(1)(b) GDPR). • Account communication: e-mail verification, password reset and account messages. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). • Security and abuse prevention: protecting accounts and the platform, detecting fraud and handling incidents. Legal basis: our legitimate interest in running the service securely (Art. 6(1)(f) GDPR). • Legal obligations: for example keeping records required by law or answering public authorities. Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR). • Legal claims: where needed to establish, exercise or defend our legal claims. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
We do not sell the data from your account and do not use it for our own marketing or advertising. Marketing consents given during registration are given to the event organizer, not to us.
Creating an account is voluntary. You can place an order without one; without the data listed above, however, we cannot run an account.
5. Who we share the data with
• The event organizer: the registration and order data for its event. The organizer does not see your whole account or your registrations for other organizers' events. • Our suppliers (processors) who run the platform for us: application hosting (Vercel), database and file storage (Neon) and e-mail delivery (ZeptoMail). They process the data only on our instructions and under a data processing agreement. • The payment service Stripe, which processes payments for orders on the organizer's account. Stripe acts as an independent controller under its own privacy policy. • Public authorities, where the law requires us to.
6. Transfers outside the European Economic Area
Some of our suppliers are based in the United States or in other countries outside the European Economic Area, or may access data from there. We safeguard such transfers with an adequacy decision of the European Commission (for example the EU-US Data Privacy Framework) or with standard contractual clauses approved by the European Commission.
7. How long we keep the data
• Account, contact details and saved participants: for as long as the account exists. After the account is closed we delete or anonymise the data unless we need it for the reasons below. • Orders: for the period required by law (in particular accounting and tax law) and for the period in which claims arising from the order can be made. • Technical and security records: only for as long as needed to secure the service.
You can change or remove a saved participant and your contact details in your account at any time. You can close your whole account with the "Delete account" button in your account or by writing to support@brenthix.eu.
8. Your rights
You have the right: • to access your personal data and receive a copy of it, • to have inaccurate or incomplete data corrected, • to have your data erased ("right to be forgotten"), • to restrict processing, • to data portability, • to object to processing based on our legitimate interest, • to withdraw consent where processing is based on consent; withdrawal does not affect the lawfulness of processing before it.
To exercise your rights, write to support@brenthix.eu. We will reply without undue delay and within one month at the latest; where justified we may extend this period and will let you know.
You also have the right to lodge a complaint with a supervisory authority. In Slovakia this is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk. You may also complain to the supervisory authority of the European Union member state where you live or work.
9. Automated decision-making
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.
10. Cookies and browser storage
We use only technologies necessary for the site to work: cookies for signing in and for remembering your chosen language, and browser storage to keep an unfinished order. We do not use analytics or advertising cookies. Stripe's payment form may use its own cookies needed for payment security.
11. Security
We protect the data with appropriate technical and organisational measures: the connection to the site is encrypted (HTTPS), passwords are stored only as hashes, only authorised people can access the data to the extent their work requires, and an organizer sees only the data of its own events.
12. Changes to this notice
We may update this notice, for example when the service or the law changes. The current version is always published on this page. We will inform you of significant changes.
13. Language versions
The published language versions of this notice are intended to have the same meaning. In the event of an unintended discrepancy between them, the English version prevails unless mandatory law requires otherwise.