Privacy Policy

1. Who We Are

This website is operated by Adam Cada, a freelance filmmaker and photographer based in Prague, Czech Republic. When you use this website, book a session, or register for the Client Zone, Adam Cada acts as the data controller for your personal information.

2. What Data We Collect

• Contact & booking forms — name, email address, phone number, date/time preferences, and your message.
• Client Zone accounts — name, email, password (hashed), XP/level data, and upload history. Accounts are created by invitation only, and we record the time of your consent.
• Google Sign-In (optional) — if you choose to sign in with Google, we receive your name, email address, and a Google account identifier. We never receive your Google password.
• Usage data — anonymous session identifiers (stored in your browser's session cookie) used to track portfolio likes. No persistent tracking cookies are used.
• Server logs — IP address, browser type, and pages visited — retained for up to 30 days for security purposes.

3. Why We Use Your Data

• To respond to booking enquiries and confirm appointments.
• To provide you access to your Client Zone (project files, galleries, feedback).
• To send you email notifications about your projects (new uploads, approvals).
• To improve the website and detect technical issues.

We never sell your data to third parties. We never use it for advertising.

4. Legal Basis (GDPR)

Processing is based on:

• Contract performance (Art. 6(1)(b)) — booking and client zone services.
• Legitimate interests (Art. 6(1)(f)) — server logs for security, and event photos in Vyvoláno galleries (section 9).

5. Data Retention

• Booking enquiries: 3 years from the date of the last contact.
• Client Zone accounts: for the duration of the business relationship + 1 year.
• Server logs: max 30 days.
• Event photos (Vyvoláno): until the gallery is deleted — details in section 9.

6. Your Rights

Under GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Withdraw consent at any time (where processing is based on consent).
• Object to processing based on legitimate interests (Art. 21) — for event photos see section 9.
• Lodge a complaint with the Czech Data Protection Authority (uoou.cz).

In your Client Zone profile you can download a copy of your data (JSON) and delete your account yourself at any time. For anything else, contact us using the details below.

7. Cookies

The public website also stores daily totals of page views, enquiry-button clicks and saved enquiries, grouped by page type and source (for example Instagram or email). These counters do not store IP addresses, visitor identifiers, full URLs or message text, and do not use analytics cookies. Private galleries and the Client Zone are excluded.

We use only essential and functional cookies: a session cookie that keeps you logged into the Client Zone, the ac_vid cookie with a random browser identifier (valid for up to 400 days) that remembers your likes, selected photos and your own comments in galleries, the ac_u_… cookie that remembers for up to 90 days that you unlocked a password-protected gallery, and the lang cookie with your language choice. No analytics or marketing cookies are used.

8. Third-Party Services

Photos and videos are stored directly on our own hosting (WEDOS Internet, a.s., Czech Republic — an EU data processor). Some videos may be embedded from Vimeo / YouTube, which have their own privacy policies.

Google Sign-In: if you use the "Continue with Google" button, Google LLC processes your login as an independent controller under the Google Privacy Policy. The button loads Google's sign-in library, which may set a functional cookie (e.g. g_state). Using Google Sign-In is entirely optional — you can always use a password instead.

9. Event Photos (Vyvoláno)

At dance and other events, Adam Cada takes photos that appear during the evening in an online gallery called Vyvoláno (adamcada.cz/vyvolano), so that participants can view and save them.

• Legal basis — legitimate interest (Art. 6(1)(f) GDPR) in documenting the event and giving participants their photos. You can object at any time, see below.
• Who can see the photos — the galleries are not public. They are not listed anywhere, search engines are told not to index them, and they open only with the gallery code or QR code that Adam hands out at the event. When a gallery is closed, its code stops working.
• What is processed — the photos from the event (including the people in them) and their technical data (time taken, camera settings). Location recording is switched off in the camera. For gallery visitors: the random browser identifier in the ac_vid cookie (for likes, selected photos and your own comments), the name or nickname and text of comments (comments are visible to everyone who has the gallery code), the optional reason given with a removal request, and, when a code is typed in, the IP address (for IPv6 only its network part) to protect against code guessing; it is kept for 24 hours and then removed by routine cleanup.
• How long — photos stay in the gallery until Adam deletes the gallery. Camera photos that Adam sets aside without publishing are deleted from the server after 7 days. Technical records about photo processing are deleted after 30 days, settled removal requests after 90 days.
• Removing a photo — every photo in the gallery has the option Nechci být na téhle fotce (“I don't want to be in this photo”). Adam sees the request and deletes the photo from the server; it disappears from open galleries with the next update. You can also email info@adamcada.cz with a link to or description of the photo. Copies that someone has already saved to their phone cannot be removed this way.

10. Contact