GDPR Information

Our Commitment to Data Protection

Ateliér Brno is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This document outlines how we comply with GDPR requirements and explains your rights as a data subject.

Data Controller

The data controller responsible for your personal information is:

Ateliér Brno
Masarykova 25
602 00 Brno
Czech Republic
Email: [email protected]

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual necessity: Processing is necessary to fulfill our tailoring services and contractual obligations to you
• Consent: You have given explicit consent for specific processing activities
• Legitimate interests: Processing is necessary for our legitimate business interests, such as improving services and maintaining customer relationships
• Legal obligation: Processing is required to comply with legal requirements, such as tax and accounting obligations

Your Rights Under GDPR

Right to Access

You have the right to request access to personal data we hold about you. We will provide a copy of your data in a commonly used electronic format.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction or completion of such data.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when you object to processing.

Right to Restriction of Processing

You can request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You may object to processing of your personal data when such processing is based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact information and measurement records: Up to three years after last service
• Project documentation and communication: Duration of project plus three years
• Payment records: Seven years for accounting and tax purposes

After the retention period expires, data is securely deleted or anonymized.

Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of sensitive data during transmission and storage
• Access controls limiting data access to authorized personnel only
• Regular security assessments and updates
• Staff training on data protection principles
• Secure backup procedures

International Data Transfers

Your personal data is processed and stored within the European Union. We do not transfer data outside the EU/EEA except when necessary for payment processing, in which case appropriate safeguards are in place.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
Subject line: GDPR Request

Please include sufficient information for us to verify your identity and understand your request. We will respond within one month of receiving your request, though this period may be extended by two additional months for complex requests.

Right to Lodge a Complaint

If you believe we have not adequately addressed your concerns regarding data protection, you have the right to lodge a complaint with the supervisory authority:

Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
Website: www.uoou.cz

Changes to This Information

We may update this GDPR information periodically. Any changes will be posted on this page with an updated revision date.