Privacy Policy
Your privacy matters to me. I process personal data in accordance with applicable legislation, in particular Regulation (EU) 2016/679 (the GDPR).
This policy explains what personal data I process, why I need it, how long I retain it and what rights you have.
1. Who is the data controller?
The controller of your personal data is:
Kateřina Ceralová
Business ID: 74247930
Registered address: Drtinova 10, 150 00 Prague 5, Czech Republic
Email: fotografka@katerinaceralova.cz
Phone: +420 776 450 446
Website: katerinaceralova.cz
If you have any questions about the processing of your data, please contact me using the email address above.
2. What personal data do I process?
I process only the information you provide, for example by email, when booking a photography session or when ordering my services. This may include:
- your first and last name;
- email address and telephone number;
- company name, business ID and billing information where necessary;
- information contained in your message;
- photographs created while carrying out an assignment;
- information required for accounting documents.
When you visit the website, technical information such as your IP address, device information and data collected through cookies may also be processed.
3. Why do I process personal data?
I process personal data to respond to enquiries, prepare quotations, enter into and perform contracts, provide photography or website design services, issue accounting and tax documents, comply with legal obligations, protect legitimate legal interests and send newsletters where you have given consent.
4. Legal basis for processing
Personal data is processed where it is necessary for the performance of a contract or steps taken before entering into a contract, compliance with a legal obligation, a legitimate interest such as client communication or the protection of legal claims, or your consent. You may withdraw consent at any time by email or through the unsubscribe link in a newsletter.
5. How long do I retain personal data?
I retain personal data only for as long as necessary. Contractual and accounting information is retained for the period required by law. Enquiry data is retained for the time needed to complete the communication. Data processed on the basis of consent is retained until that consent is withdrawn. After the relevant period, the data is securely deleted or anonymised.
6. Who may have access to the data?
I do not share your data with third parties unless this is necessary to provide my services or comply with the law. Recipients may include hosting, accounting, invoicing, booking, email, analytics and marketing service providers, including Google Analytics 4 and, where used, Meta. If a provider is located outside the European Union, data is transferred only under the safeguards required by the GDPR.
7. Cookies and analytics
This website uses cookies needed for its operation. Optional analytics or marketing cookies are used only after you give consent, which you may change at any time through the cookie settings. Google Analytics 4 is activated only after consent to analytics cookies. If consent is refused or withdrawn, analytics measurement remains disabled.
8. How do I protect your data?
I use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Access is limited to people who need the data to perform their work or provide the requested service.
9. Your rights
Under the GDPR, you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing and data portability. You may object to processing, withdraw consent at any time and lodge a complaint with the Czech Office for Personal Data Protection or the competent supervisory authority in your country.
10. Changes to this policy
I may update this policy if legislation or my processing practices change. The current version and its latest update date will always be published on this page.