Principles of processing personal data


  1. These principles for processing of personal data (hereinafter referred to as the “Principles“) have been adopted by PHOTOMATE s.r.o., Commercial registration No.: 260 80 249, with the registered office at Prokišova 356/7, České Budějovice 6, 370 01 České Budějovice, the Czech Republic, registered in the Commercial Register under the file No. C 12740 maintained at the Regional Court in České Budějovice (hereinafter referred to as the “Operator“).

  2. These Principles explain the way in which we collect and treat personal data in connection with the operation of the website (hereinafter referred to as the “Website“) and in the provision of our products


  1. The controller of personal data is the Operator.


  1. Data provided by customers and potential customers. For the purposes of concluding a contract and its further performance, we process data provided directly by our customers. Personal data are provided in connection with the demand for the products offered, either via the Website or through our regular contact details. These data are typically identification data, contact details, and data related to the processing of the customer or its representative´s payment (name, surname, business name, commercial registration number, VAT number, address of registered office, residence, or place of delivery, telephone number, e-mail address).

  2. Data provided by the Website visitors and other persons outside the contract performance regime. Otherwise than in connection with the performance of the contract, we may also process personal data that you provide via the Website, contact forms, or through the usual contact details of our company in the context of the solution of your queries or observations. In this case, personal data typically include identification data and contact details (name, surname, business name, telephone number, e-mail address).

  3. Data generated by the Operator. We may assign additional data to the data that you provide yourselves, particularly data on the performance of the contract, including the payments made.

  4. Cookies. We use cookies on our Website. More information about cookies and the way in which we use them you can find at

  5. Summary analyses and statistics. The data provided may be used to produce summary analyses and statistics on an anonymous basis in order to evaluate the functioning of the Website. These analyses and statistics do not contain personal data.


  1. Conclusion of a contract and its further performance.

    We process personal data (name, surname, business name, commercial registration number, VAT number, address of registered office, residence, or place of delivery, telephone number, e-mail address) for the purpose of concluding contracts for the supply of our products and their subsequent performance, including administration of payments or claim management.

    In this case, processing is necessary for the performance of the contract concluded or for the implementation of pre-contractual measures. Without the provision of the above data to the extent necessary, the contract cannot be concluded and properly performed.

  2. Handling queries and other requirements.

    As regards a request outside the contract performance regime, the consent provided by you, typically granted in a web form or in communication with us, entitles us to process the personal data. If consent has not been given, we may process personal data on the basis of a legitimate interest in addressing the requirements of our potential customers. The provision of personal data is voluntary, however, without their provision it is not possible to address the requirements in a targeted way and inform you of the measures taken.

  3. Product promotion.

    We process personal data (name, surname, business name, address, telephone number, e-mail address) in order to promote our company and the products we offer.

    For existing customers, the processing may take place on the basis of our legitimate interest in accordance with the terms of the relevant legislation. Such processing may be challenged at any time. In other cases, the processing of personal data takes place only on the basis of your consent, typically given in a web form or in communication with us. The consent may be withdrawn at any time.

  4. Improvement of web presence.

    We process personal data (cookies and data obtained with the help of cookies) in order to improve the quality of the Website and streamline communication with potential customers.

    Processing takes place on the basis of your consent to the use of cookies granted in accordance with the information provided at The consent and the provision of personal data is voluntary. Only cookies ensuring the technically correct operation of the Website may be used without your consent.


  1. Commercial communication. You may unsubscribe from commercial communications at any time by clicking on the relevant link located at the footer of each e-mail commercial communication, or through the Operator´s contacts listed in these Principles. Unsubscribing from commercial communications will be considered a withdrawal of the consent or an objection to the processing of personal data, according to the legal reason on the basis of which the commercial communications are sent.

  2. Cookies. It is possible to withdraw consent to the use of cookies in accordance with the information referred to at

  3. Other data. If we process any other personal data based on a consent, you may withdraw it by means of standard communication you will send us through the contacts provided in these Principles.


  1. The Operator shall always have access to personal data.

  2. Personal data shall be stored and processed by the Operator and its staff. All persons having access to personal data are bound by confidentiality and this obligation continues even after the end of their cooperation with the Operator.

  3. The Operator may use services of other persons acting as Processors for partial processing of personal data. Such persons may include providers of emailing services, cloud or hosting services, providers of accounting systems, web-based tools for statistics and web analysis, or on-line marketing.

  4. The Operator also transfers personal data to carriers for the purpose of proper processing of orders. In this case, the handling of personal data is governed by the conditions of the specific carrier, who acts in relation to personal data as an independent controller.

  5. Data may also be transferred to the competent authorities and other authorized persons, if required by legislation, or by a binding decision of courts and other competent bodies.


  1. Personal data shall be always stored at least during the negotiations on the conclusion of the contract and for the duration of the contract between us and the customer. Furthermore, personal data are processed for the period required in particular by accounting, tax, and other relevant legislation. In order to defend the Operator´s rights, we maintain contracts and related documentation for the duration of the limitation periods provided by law, taking into account the fact that a lawsuit may be delivered several months after the expiration of the limitation period.

  2. Personal data processed in connection with the Operator´s promotion are processed only till the withdrawal of consent or cancellation of sending commercial communications.

  3. Processing of personal data for the purpose of handling complaints and other requirements takes place during their resolution, usually for a maximum of 6 months.

  4. Further processing takes place, if it is necessary for the fulfilment of obligations arising from legal provisions applicable to the Operator, or for any other reason in accordance with legal provisions, including the protection of legitimate interests on the part of the Operator.


  1. In the context of the processing of personal data, you may contact us with the following requirements:

    • Right of access to personal data. You have the right to information about the processed data, the purpose of processing, and the time of processing. At the same time, you have the right to a communication, where the personal data are obtained and how they are handled further. You may also request a copy of the personal data.
    • Right to rectify personal data. If you find any inaccuracies in the processed personal data, you have the right to make the necessary rectification or completion.
    • Right to erasure of personal data. If you meet the legal requirements, you have the right to erasure of personal data. Personal data shall be erased when they are no longer needed for the purposes for which they were processed. Please note that it is always first assessed, whether the destruction of data is not hindered by any statutory impediment or whether further processing of personal data is not necessary for another reason, including protection of legitimate interests on the part of the Operator.
    • Right to restriction of personal data processing. Processing restrictions are approached when you deny accuracy of the data, the processing takes place without a proper legal ground, or is not required for the specified purpose. Restrictions on the processing of personal data are usually temporary and last until the conditions for their further processing or erasure are verified.
    • Right to portability. You can request the transfer of personal data regarding personal data that you have provided yourselves and that are automatically processed on the basis of your consent or in connection with the performance of the contract. In exercising this right, we will transfer personal data in a commonly used format.
    • Right to object. If the processing of personal data takes place on the basis of legitimate interests, you have the opportunity to object to such processing. Subsequently, the processing of the personal data will be terminated, unless in a specific case there is a right or obligation to keep the data longer.
  2. Whenever you have the opportunity to address your complaint to Úřad pro ochranu osobních údajů (The Office for Personal Data Protection), if you believe that the right to protection of the personal data has been violated.


  1. The Operator shall ensure the security of your data. The handling of personal data shall take place in full compliance with the applicable legislation, including the General Data Protection Regulation. When processing personal data, we put a strong emphasis on the technical and organizational security of the processed data.

  2. Personal data are stored in databases and systems to which only persons who need to handle personal data directly for the purposes set out in these Principles have access and only to the extent necessary.


  1. The Operator processes personal data in the Member States of the European Union or the European Economic Area. The possible transfer of personal data abroad occurs only if the conditions required by the legislation are satisfied.


  1. The Operator reserves the right to change these Principles on an ongoing basis without prior notice, in particular in order to ensure the adequate level of personal data protection, to take into account the development of legal provisions or generally accepted practice. For this reason, we recommend ongoing follow-up of the Website, where you can always find the current version of the Principles.


  1. If you have any requests or complaints regarding these Principles and the processing of personal data, you may contact us by e-mail at


  1. These Principles shall take effect on 1 December 2020.