Privacy and cookies
Information under Art. 13 of Regulation (EU) 2016/679 (GDPR), Czech Act No. 110/2019 Coll. on personal data processing and Section 89(3) of Czech Act No. 127/2005 Coll. on electronic communications. Effective from 9 November 2026. This is a translation. The Czech version is legally binding.
1. Data controller
Marek Ambrož, company ID (IČO) 21679151, Nové Město na Moravě, Czech Republic (“I”). Contact for all data protection matters: info@marekambroz.com. I have not appointed a data protection officer, as I am not required to.
2. Contact form and e-mail
| What data | name, e-mail address, selected topic and message; technically also the time it was sent |
|---|---|
| Purpose | replying to your enquiry, preparing a quote and arranging a shoot |
| Legal basis | steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR); for general enquiries, my legitimate interest in answering your message (Art. 6(1)(f) GDPR) |
| Retention | for as long as it takes to deal with your enquiry and any resulting work, then for up to 3 years in case you come back to it or a dispute arises. If we work together, tax documents are kept for the period required by tax law (up to 10 years). |
| Is it mandatory? | No, it is voluntary, but I cannot reply without your name and e-mail. |
The form's spam protection uses a hash of your IP address, which is deleted automatically within 24 hours.
3. Reviews
If you write a review using the form on the Reviews page, I process your name, an optional label (company, event), your rating, the text and, optionally, your e-mail. After approval, I publish the name, label, rating and text on this website. Your e-mail is never published and I only use it if I need to ask you something. The legal basis is your consent (Art. 6(1)(a) GDPR). The review stays on the website until you withdraw your consent. Just write to info@marekambroz.com and I will delete it. Reviews written on Google are subject to Google's terms. I display their public version (name, rating, text).
4. Event photos
In the galleries I publish photos from sports and other public events, which may show participants and spectators. I do so on the basis of my legitimate interest in documenting and reporting on these events (Art. 6(1)(f) GDPR), within the limits of Sections 88 to 90 of the Czech Civil Code, or under an agreement with the event organiser. Photos stay online while they have news or documentary value.
If you appear in a photo and do not want it published, write to info@marekambroz.com with a link to the photo and I will remove it without undue delay. The galleries do not use face recognition or any other biometric processing.
5. Cookies
Cookies are small files that a website stores in your browser. Essential cookies are always used because the website does not work without them. Analytics cookies are only stored if you give your consent in the cookie bar. Until then, the analytics code is not loaded at all.
| Name | Type and purpose | Set by | Expiry |
|---|---|---|---|
ma_consent | Essential: remembers your choice in the cookie bar. | this website | 6 months |
ma_theme | Essential (browser storage): remembers whether you chose dark or light mode. Only stored after you click the switch. | this website | until you delete it |
ma_admin, ma_trust | Essential: administrator login. Never stored for visitors. | this website | until the browser is closed / 30 days |
_ga, _ga_* | Analytics, only with consent: distinguishing visitors and measuring traffic (how many people visit, which pages they view, where they came from, what device they use). | Google Analytics | 2 years |
Google Analytics. The legal basis is your consent (Art. 6(1)(a) GDPR and Section 89(3) of the Czech Electronic Communications Act). The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which processes the data as my processor. Google Analytics does not store your IP address. Data may be transferred to Google LLC in the USA, which is certified under the EU–US Data Privacy Framework, covered by the European Commission's adequacy decision of 10 July 2023. I do not use analytics for advertising or profiling. Analytics data is kept for 14 months.
You can withdraw or change your consent at any time via (also linked in the footer of every page). Withdrawing consent deletes the Google Analytics cookies from your browser. This does not affect the lawfulness of processing before withdrawal.
6. Who else has access to the data
- WEDOS, a.s., company ID 28115694, Masarykova 1230, 373 41 Hluboká nad Vltavou, Czech Republic: website hosting and sending e-mails from the forms (processor).
- My e-mail provider: delivery of messages and reviews from the forms.
- BunnyWay d.o.o., Slovenia (Bunny Fonts): loading the website's fonts. Your IP address is passed to it when a page loads. According to the provider, it is not stored or tracked.
- Google Ireland Limited: traffic measurement, only with your consent (see section 5).
I do not sell your data or pass it on to anyone else unless required by law. There is no automated decision-making or profiling.
7. Your rights
You have the right:
- of access to your personal data (Art. 15 GDPR),
- to rectification of inaccurate data (Art. 16),
- to erasure (Art. 17),
- to restriction of processing (Art. 18),
- to data portability (Art. 20),
- to object to processing based on legitimate interest, e.g. to the publication of a photo (Art. 21),
- to withdraw your consent at any time without affecting the lawfulness of earlier processing (Art. 7(3)),
- to lodge a complaint with the supervisory authority: Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, uoou.gov.cz.
To exercise your rights, write to info@marekambroz.com. I will reply within one month at the latest.