Photobank

1. Data Controller

The data controller is:

Lukáš Krajíček
9. května 440
394 70 Kamenice nad Lipou, Czech Republic
Company ID: 02459531
e-mail: lukas@krajicek.net
tel.: +420 721 909 934

(hereinafter referred to as the "controller")

The controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and related legislation.

2. Personal Data We Process

The controller processes personal data provided by the buyer, in particular:

  • first name and surname
  • e-mail address
  • phone number
  • postal address (for delivery of printed photographs)
  • order details (purchased products, order history)

The controller does not process special categories of personal data (sensitive data).

3. Purposes of Processing

Personal data are processed for the purposes of:

  • processing orders and fulfilling the contract
  • communicating with the customer
  • bookkeeping and compliance with legal obligations
  • protecting the controller's rights (e.g. in dispute resolution)

4. Legal Basis for Processing

The processing of personal data is based on the following legal grounds:

  • performance of a contract (Art. 6(1)(b) GDPR)
  • compliance with a legal obligation (Art. 6(1)(c) GDPR)
  • legitimate interests of the controller (Art. 6(1)(f) GDPR)

5. Retention Period

Personal data are retained:

  • for the period necessary to fulfil the contract
  • for the period required by law (e.g. accounting records – generally 10 years)
  • for the duration of the controller's legitimate interest

After these periods have elapsed, data are deleted or anonymised.

6. Recipients of Personal Data

Personal data may be disclosed to third parties only to the extent necessary, in particular:

  • payment service providers
  • carriers (for printed photographs)
  • IT service providers (hosting, e-mail services, gallery platforms)

The controller does not transfer personal data to third countries outside the EU unless this is necessary for the operation of the service.

7. Digital Content and Photographs

In the course of providing services, photographs depicting natural persons may be processed. These photographs are taken at public sporting events.

Photographs are published and offered for sale in accordance with the controller's legitimate interest and in view of the nature of the event.

Persons depicted in photographs may request their removal where legitimate grounds exist.

8. Rights of the Data Subject

The buyer has the right to:

  • request access to their personal data
  • request rectification of inaccurate data
  • request erasure of personal data
  • request restriction of processing
  • object to processing
  • data portability

Rights may be exercised by contacting the controller via e-mail.

9. Security of Personal Data

The controller has implemented technical and organisational measures to protect personal data against unauthorised access, loss or misuse.

10. Final Provisions

This Privacy Policy is effective from 1 May 2026.

The controller reserves the right to amend or supplement this policy.