PRIVACY NOTICE

Effective from: 9 September 2026
Version: 1.0

1. Data Controller

The controller of your personal data is:

Framepic Creative s.r.o.
Company ID: 23119781
VAT ID: CZ23119781
Registered office: Korunní 2569/108, Vinohrady, 101 00 Prague 10, Czech Republic
Email: info@framepic.cz
Telephone: +420 774 264 576
Website: www.framepic.cz

Hereinafter referred to as “Framepic”, “we” or the “Controller”.

This Privacy Notice explains how we process personal data relating to website visitors, prospective clients, clients, business partners, suppliers, production team members and other individuals involved in our projects.

2. Personal Data We Process

Depending on how you communicate or cooperate with us, we may process:

your first and last name and company name;
your job title and relationship with a company;
your email address and telephone number;
your website and professional social media profiles;
billing and identification details;
information provided in an enquiry, brief or order;
the selected service, production scope, budget and requested timing;
project communication, comments and approvals;
payment and invoicing information;
photographs, video recordings, voice and other audiovisual materials produced during a project;
IP address, browser and device information, technical logs and cookie data;
information about your use of our website and interaction with marketing communications.

We do not intentionally process special categories of personal data unless this is necessary for a particular project and appropriate arrangements have been agreed in advance.

3. Purposes and Legal Bases

Enquiries and quotations

We use information submitted through contact forms, calculators, email, telephone or social media to respond to enquiries, recommend an appropriate service, prepare a quotation and discuss potential cooperation.

The legal basis is taking steps before entering into a contract and our legitimate interest in communicating with representatives of prospective business clients.

Services and project management

We process personal data to plan and deliver production, post-production, distribution, advertising, consulting and workshop services, communicate with the Client, deliver materials, issue invoices and manage changes or complaints.

The legal basis is performance of a contract, compliance with legal obligations and our legitimate interest in the proper management of projects.

Audiovisual production

During a production, we may process the image, voice and other personal data of individuals appearing in photographs or videos.

Depending on the circumstances, the legal basis may be a contract, legitimate interest or consent. Permissions relating to the use of a person’s image, voice or performance may also be governed by contracts, release forms or other appropriate authorisations.

Accounting and legal obligations

We process billing, payment and contractual data to maintain accounting records, comply with tax obligations and meet other statutory requirements.

The legal basis is compliance with a legal obligation.

Protection of legal claims

We may retain contracts, communication, approvals and project records to protect our rights, demonstrate proper performance and resolve potential disputes.

The legal basis is our legitimate interest.

Business communications

We may send reasonable communications about our services to existing or prospective business contacts where permitted by applicable law.

The legal basis is our legitimate interest or consent where consent is required. You can opt out of business communications at any time.

Analytics and marketing

With the visitor’s consent, we may use analytics and marketing tools to measure website traffic, evaluate campaigns, conduct remarketing and improve our website.

The legal basis is consent provided through the cookie banner. Consent can be changed or withdrawn at any time through the cookie settings.

Website operation and security

We may process technical information to maintain website security, prevent abuse, diagnose errors and provide essential website functionality.

The legal basis is our legitimate interest in operating a secure and functional website.

4. Sources of Personal Data

We obtain personal data:

directly from you through forms, email, telephone or social media;
from the company or organisation you represent;
during a business or project relationship;
from a client who has involved you in a production;
from publicly available professional sources, company websites, public registers, professional social networks or business databases;
from business partners or referrals;
through cookies and similar technologies.

For business contacts obtained from public or professional sources, we process only information connected with their professional activities, such as their name, position, employer and professional contact details.

5. Retention Periods

We retain personal data only for as long as it is required for the relevant purpose:

unsuccessful or unconverted enquiries are generally retained for no longer than two years after the last communication;
contacts used for individual B2B outreach are generally retained for no longer than 12 months without an active response;
contractual and project documentation is retained for the duration of the relationship and subsequently for the period required to protect legal claims;
accounting and tax records are retained for the statutory period, generally up to ten years;
audiovisual materials are retained for the period arising from the contract, licence, legitimate purpose or relevant authorisation;
data used for consent-based marketing is retained until consent is withdrawn and only while that consent remains current and demonstrable;
cookie data is retained for the period stated in the cookie settings.

If you object to business communications, we may retain limited information about your opt-out to ensure that you are not contacted again.

6. Recipients and Processors

Where necessary, personal data may be disclosed to:

website hosting, email and technical support providers;
cloud storage, communication and project management providers;
accounting, tax and legal advisers;
production partners, crew members, freelancers and suppliers involved in a particular project;
analytics and advertising providers where you have provided the relevant consent;
public authorities where disclosure is required by law.

These recipients receive only the information necessary for their activities and must ensure an appropriate level of protection.

We do not sell personal data.

7. Transfers Outside the European Economic Area

Some cloud, analytics, communication or advertising providers may process information outside the European Economic Area.

Where this occurs, we use an appropriate legal mechanism, such as an adequacy decision adopted by the European Commission, Standard Contractual Clauses or another safeguard required by the GDPR.

8. Cookies and Similar Technologies

Our website uses cookies necessary for its operation and may also use analytics or marketing cookies.

Necessary cookies may be used without consent where they are required to operate and secure the website or remember your privacy preferences.

Analytics and marketing cookies are activated only after you provide consent. They may be used to:

measure website traffic and usage;
evaluate the performance of individual pages;
measure advertising campaigns;
conduct remarketing and display more relevant advertising.

The current list of cookies, providers, purposes and retention periods is available in the cookie banner settings. You can change or withdraw your consent at any time using the “Cookie Settings” link.

Refusing analytics or marketing cookies does not affect the essential operation of the website.

9. Whether Providing Data Is Mandatory

Providing information through a contact form is voluntary. However, without the required contact details, we may not be able to respond to your enquiry or prepare a quotation.

Information required to enter into a contract, issue invoices or deliver a project is a contractual or statutory requirement. We may not be able to provide the service without it.

10. Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you.

After you provide consent, advertising platforms may create their own user profiles in accordance with their respective terms and privacy policies.

11. Your Rights

Depending on the circumstances, you have the right to:

obtain confirmation as to whether we process your personal data;
request access to your personal data;
request correction of inaccurate or incomplete data;
request deletion of your personal data;
request restriction of processing;
receive your information in a structured and machine-readable format where the conditions for data portability are met;
object to processing based on legitimate interests;
object to direct marketing at any time;
withdraw your consent at any time;
lodge a complaint with a supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

You can exercise your rights by contacting info@framepic.cz. We may reasonably verify your identity before processing your request.

12. Supervisory Authority

If you believe that your personal data has been processed unlawfully, you may lodge a complaint with:

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
www.uoou.gov.cz

We would appreciate the opportunity to address your concerns before you submit a formal complaint.

13. Processing on Behalf of Clients

When providing certain services, we may process personal data on the Client’s instructions as a data processor. In such cases, processing is governed by the agreement with the Client and, where appropriate, a separate data processing agreement.

The Client is responsible for ensuring that it has an appropriate legal basis for providing and using such personal data.

14. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

Access is limited to individuals who require the information for their work or to meet contractual or legal obligations.

15. Changes to This Privacy Notice

We may update this Privacy Notice, particularly when our services, tools or legal requirements change.

The current version will always be published at www.framepic.cz.