Privacy without small print.

The controller of personal data is Martin Eliáš. You can contact him about privacy at foto@elias.cz.

When you send an inquiry, the website processes your name, email, message and, when supplied, the type of photography, preferred timing and location—only to the extent you enter them.

Email-validation results, attempt counts and timestamps, and technical anti-abuse data are recorded to protect delivery. The application uses temporary shortened hashes of the IP address and email; the message itself is not stored in a public database.

For approved website administrators, the email address, one-time sign-in verification, session, and security limits are processed. This private administration does not affect ordinary visitors, and administrator passwords are not stored.

Inquiry data is used to reply, discuss a commission, and take steps before a possible agreement. Form protection, delivery records, and basic operational measurement rely on the legitimate interest in running a secure and dependable website.

Necessary processing is provided by Vercel (hosting, operational analytics and performance), Cloudflare Turnstile (form protection), Reoon (email validation), Emailit and the destination mailbox (delivery), Teable (the operational email ledger), and Redis (temporary abuse limits). Each processes only the information needed for its service under the relevant contractual and security terms.

Some listed providers may process data outside the European Economic Area. Any such transfer is governed by the relevant provider agreement and a GDPR transfer mechanism, such as an adequacy decision or standard contractual clauses.

An inquiry remains in the mailbox only as long as needed to handle it, continue a resulting collaboration, and protect legal claims. The operational email record is kept only as long as needed for delivery and abuse protection. Hashed request limits expire automatically within one hour.

The website stores only essential technical data: the language choice, secure administration sign-in state, and information required by Turnstile. Aggregate analytics and performance measurements are not used for advertising profiles.

Depending on the circumstances, you may request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests.

If you believe your data has not been handled correctly, you may also contact the Czech Office for Personal Data Protection.