Privacy policy

1 Who processes your data

The data controller is Petr Mareška, an event photographer based in Plzeň and the operator of this site. Contact details are above.

2 Inquiry form

When you write to me through the form, I store your name, e-mail, the type, date and place of the event, and your message. I need them to reply and prepare a quote (steps taken at your request before a contract, Art. 6(1)(b) GDPR).

The message is saved in the site's admin and also sent to me by e-mail. Your IP address is not stored; to block spam the site keeps only a one-way fingerprint of it, from which the address cannot be recovered.

I delete inquiries once they are no longer needed, at the latest three years after our last contact. If we sign a contract, I keep the data for as long as accounting and tax law requires.

3 Event photos

I publish event photos to show my work and for the guests who want to see them (legitimate interest, Art. 6(1)(f) GDPR). Published photos are resized and stripped of metadata, so they carry no GPS location, for example.

Are you in a photo and would rather not be? Tell me which one and I will remove it.

4 Cookies and browser storage

The site uses no analytics or advertising cookies and loads nothing from third parties; fonts and scripts are served from this server.

The only cookie is a technical session cookie (PHPSESSID). It is set on the contact form, where it protects against forged submissions, and when logging in to the admin. It is deleted when you close the browser. It needs no consent, because the form cannot work without it.

Your choice of light or dark mode is remembered only by your browser (localStorage) and is never sent to the server.

5 Server and technical logs

The site runs at a hosting provider, which may briefly keep technical access logs for operation and security, such as the IP address, the time and the address of the page visited.

6 Google Drive connection

The site is connected to my own Google Drive account, read-only. In the admin I pick photos from it, which the site resizes and publishes in the gallery. Only the site administrator has access; visitors never sign in to Google through this site, and the site receives nothing about them from Google.

The site never changes or deletes anything on the Drive. It uses data received from Google APIs only to select and publish photos and does not share it with anyone. The use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

The Drive access key is stored encrypted, and the connection can be revoked at any time in the site's admin or in the Google account settings.

7 Who receives your data

I do not sell your data or share it for advertising. Only the services the site needs to work handle it: the hosting provider whose server runs the site, and the e-mail provider that delivers inquiries to me.

8 Your rights

You have the right to know what data I hold about you, to have it corrected or deleted, to restrict its processing, to object, and to receive it in a machine-readable form. Just write to me; I will reply within a month.

If you believe I handle your data wrongly, you can complain to the Czech Office for Personal Data Protection (www.uoou.gov.cz).