Privacy policy
This is a plain, static website. It sets no cookies, runs no analytics and loads nothing from another company’s servers. The one exception is the entry form, which sends what you type to a form service. This page explains the little data that is involved and what happens to it.
Who is responsible
Giesen Roasting Solutions is the controller for the personal data described on this page. The postal address and contact are in the imprint.
For any question about this policy, or about data we hold on you, write to the address in the imprint.
What the website itself collects
Nothing you have to agree to. The pages carry no cookies, no analytics, no tracking pixels and no embedded content from anyone else. The typefaces are served from this domain, so your browser never contacts Google Fonts or any other font host.
Our host writes an ordinary server log every time a page is requested. It records your IP address, the page you asked for, the date and time, the page you came from, and the version of your browser and operating system. These logs exist so the site can be delivered and defended against attack and abuse. The legal basis is our legitimate interest under Article 6(1)(f) GDPR.
The entry form
When you send the entry form, the details you typed — your roastery, country, name, email address, telephone number if you gave one, your years of roasting and your message — are transmitted to Formspree, Inc., which runs the form service for us and forwards your entry to our inbox.
That inbox is run by Alrighty Coffee, who organise the championship together with Giesen Roasting Solutions. We use your entry to handle it: to reply, to enter you in the draw for the twelve places and, if you are drawn, to send the entry pack and the invoice. The legal basis is Article 6(1)(b) GDPR, steps taken at your request before a contract.
The form also carries a hidden field recording which language version of the site you used, so that we answer you in the right language, and a hidden anti-spam field that should stay empty.
The form also asks you to tick a box agreeing that your roast data may be published during the championship. That is consent under Article 6(1)(a) GDPR. You may withdraw it at any time by writing to us; withdrawing it does not undo anything already published.
Writing to us
If you email us for any other reason, we keep your message and your address so that we can answer. The legal basis is our legitimate interest under Article 6(1)(f) GDPR, or Article 6(1)(b) where your message concerns an entry.
Who else is involved
The site is hosted by Vercel Inc. under a data processing agreement, and is served from Vercel’s Frankfurt region, so requests are handled inside the European Union. Vercel is a United States company, so access from outside the EU cannot be ruled out. The transfer safeguards agreed with Vercel apply to any such access.
Entries are handled by Formspree, Inc., United States. Formspree runs its technical infrastructure in the United States, so sending the entry form transfers your data outside the European Economic Area. Formspree receives only what you type into the form; it has no access to anything else on this site.
Alrighty Coffee receives the entries that Formspree forwards, as described above.
There is no other processor. We do not sell your data and we do not pass it on for advertising.
How long we keep it
- Server logs: for as long as our host keeps them for security and diagnostics, then deleted.
- Entries: for the run of the championship, and afterwards for as long as commercial and tax law require the related records to be kept. A copy also sits in the Formspree account until we delete it there.
- Other correspondence: until the matter is settled, unless we are required to keep it longer.
Your rights
Under the GDPR you may ask us at any time for:
- a copy of the data we hold on you (Article 15)
- correction of anything wrong (Article 16)
- erasure (Article 17)
- restriction of processing (Article 18)
- your data in a portable form (Article 20)
- an objection to processing based on legitimate interest (Article 21)
- withdrawal of a consent you gave us (Article 7(3))
Complaints
You may complain to a data protection authority. Ours is the Autoriteit Persoonsgegevens in the Netherlands. You may instead complain to the authority where you live or work.
No automated decisions
We do not use your data for automated decision-making or for profiling.
Changes to this page
If what the site does with your data changes, we update this page first. The date below says when it last changed.
Last updated: August 21, 2026