Privacy Policy

Tomáš Loutocký, sole trader (OSVČ) — photographer of hotels, interiors and architecture.

Email: tomas@loutocky.com
Phone: +420 603 837 432

All matters related to your personal data can be raised at this email address.

Through the contact form on this site I collect only the data you voluntarily provide:

• Name — so I can address you in my reply.
• Email address — required, the primary contact channel.
• Phone — optional, if you prefer to talk by phone.
• Message content — your inquiry (typically project description, location, timing).

I do not collect any other personal data through the form. Additional details (e.g. invoicing data) are requested only at the contracting stage if we proceed to collaboration.

I process your data on the basis of my legitimate interest (Art. 6(1)(f) GDPR) — to respond to your inquiry and initiate communication about possible photographic collaboration.

If we proceed to collaboration, the legal basis for further processing becomes contract performance (Art. 6(1)(b) GDPR).

• If no collaboration follows, I delete the data within 12 months of our last communication.
• If collaboration happens, data is kept for the duration of the engagement plus 10 years to comply with statutory accounting record-keeping obligations.

The site relies on the following providers, who process your data as part of their technical role:

• Brevo (Sendinblue SAS, FR) — email delivery for new inquiry notifications. Brevo policy.
• Vercel Inc. (USA) — site hosting and runtime. Processes technical metadata (IP, user-agent). Vercel policy.
• Cloudinary (USA) — photo hosting. Cloudinary policy.
• Google Workspace (USA) — my email server (tomas@loutocky.com). Google policy.
• Google Analytics 4 (Google Ireland Ltd, IE) — anonymised site traffic, only after your consent via the cookie banner.
• Cloudflare (USA) — DNS management (no personal data is forwarded here).

All processors operate under appropriate safeguards (Standard Contractual Clauses for non-EEA transfers).

This site uses a minimum of cookies:

• Essential: loutocky-consent in browser localStorage — remembers your choice from the cookie banner. Cannot be disabled.
• Analytical (only with consent): Google Analytics 4 — aggregated traffic, anonymised IP. Vercel Speed Insights — page performance.

You can withdraw analytical consent at any time by clearing the loutocky-consent key in your browser (DevTools → Application → Local Storage).

Under GDPR you have the right to:

• access your data (request a copy of what I hold),
• correction of inaccurate data,
• erasure ("right to be forgotten") — unless a legal retention obligation applies,
• restriction of processing,
• raise an objection against processing based on legitimate interest,
• lodge a complaint with the supervisory authority — Czech Office for Personal Data Protection, www.uoou.cz.

You can exercise any of these rights by emailing tomas@loutocky.com. I reply usually within 14 days (max 30 days as required by law).

All communication with the site is encrypted via HTTPS (TLS). Brevo and Google Workspace accounts are protected by two-factor authentication. Project backups are stored in a private GitHub repository.

I may update this policy in the future. The current version is always published on this page. The last-updated date appears at the bottom.