Privacy Policy
(GDPR)

1. Who is the data controller?

As a sole trader, I process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Czech Act No. 110/2019 Coll. on personal data processing.

2. What data do I process and why?

a) Contact form and e-mail communication

If you contact me via the website form or by e-mail, I process:

• First and last name
• E-mail address
• Phone number (optional)
• Content of the message (inquiry, question, feedback)

Purpose: Answering your inquiry and arranging cooperation on photography, graphic design or web development services.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) or performance of a contract (Art. 6(1)(b)).
Retention period: For the duration of communication and max. 1 year after it ends.

b) Orders and contractual relationships

As part of fulfilling an order (photography, graphic work, web development), I process the client's contact and billing details:

• First and last name, or company name and registration number
• Billing address
• E-mail and phone number

Purpose: Issuing tax documents, bookkeeping and fulfilling legal obligations.
Legal basis: Performance of a contract and fulfilling a legal obligation (Art. 6(1)(b) and (c) GDPR).
Retention period: 10 years from the end of the tax period, per accounting law.

c) Photographic work

Photographs of individuals taken as part of an order (portraits, corporate shoots) are processed only on the basis of your consent or a contract. Photographs from public events (motorsport, sports, concerts) are taken in accordance with Art. 85 GDPR and Czech Civil Code No. 89/2012 Coll. (§ 84–86) — depicting individuals in public for reportage and documentary purposes does not require prior consent.

d) Cookies and website analytics

This website uses cookies. Analytics cookies from Google Analytics (traffic tracking) are activated only after your consent. Technically necessary cookies (storing your consent/rejection) are managed locally in your browser.

• Necessary cookies — website functionality, storing your cookie choice (no consent required)
• Analytics cookies — Google Analytics GA4, consent-based only

3. Processing overview

4. Who may receive your data?

I do not sell your personal data or provide it to third parties for their own purposes. It may only be shared with the following processors, to the extent necessary for the website and services to function:

• EmailJS — delivering the contact form message to my e-mail
• Google LLC — website analytics (consent-based only), based outside the EU, transfer secured by standard contractual clauses
• Google Workspace / Gmail — e-mail communication
• Accounting software — record keeping (data remains within the EU)

5. What rights do you have?

Under the GDPR you have the following rights, which you can exercise by e-mail or post:

• Right of access — information about what data I process about you
• Right to rectification — correction of inaccurate or incomplete data
• Right to erasure — "right to be forgotten", if the purpose of processing no longer applies
• Right to restriction of processing — while a dispute or objection is being resolved
• Right to data portability — receiving your data in a machine-readable format
• Right to object — particularly against processing based on legitimate interest
• Right to withdraw consent — at any time, without affecting prior processing
• Right to lodge a complaint — with the Czech Office for Personal Data Protection (uoou.cz)

I will respond to your request without undue delay, no later than within 30 days.

6. Contact for exercising your rights

7. Changes to this policy

This policy may be updated from time to time, particularly in the event of changes to my business or legislative requirements. The current version is always available on this page. The date of the last change is shown at the top of the document.