Personal Data Processing Policy

1. Personal Data Controller

The controller of your personal data is:

Name / Company Name: SVITLANA LUČYŠYNOVÁ / ABA Centrum s.r.o.

ID No. (IČO): 05852790

Registered Office: Rápošovská 110, Újezd ​​nad Lesy, 190 16 Prague

E-mail: info@aba-centrum.cz, px9dpn8

Phone: +420 601 506 756

2. What data I process and why

Handling inquiries and communication:

- Data: Name and surname, e-mail address, phone number, and any other information provided in the message.

- Legal basis: Negotiations regarding a contract at your request (Art. 6(1)(b) of the GDPR).

- Retention period: For the duration of mutual communication and the arrangement of the engagement; a maximum of [e.g., 6–12 months] from the last contact if no cooperation ensues. Contract performance and photoshoot execution:

- Retention period: For the duration of the engagement and subsequently for the period required by law (accounting and tax documents are generally kept for 10 years).

- Data: Billing details (address, Company ID/VAT ID), records of agreed services.

- Legal basis: Performance of the contract and compliance with legal obligations (accounting and tax record-keeping).

Legitimate interest (protection of rights):

- In the event of dispute resolution or debt collection, I retain necessary communication for the duration of the applicable limitation periods (generally 3 years from the end of the collaboration).

3. Who has access to the data (Processors)

We do not transfer personal data to any unauthorized third parties. Only vetted technical service providers may have access to the data, and only to the extent necessary:

- Web hosting and email service provider: Webnode

- Accounting software provider and tax advisor

4. Your rights

Under GDPR, you have the right to:

request access to your personal data and a copy thereof,

have inaccurate or incomplete data corrected,

have data erased (if the reason for processing no longer exists and I am not under a legal obligation to archive it),

restrict processing,

object to processing based on legitimate interest,

lodge a complaint with the supervisory authority, which in the Czech Republic is the Office for Personal Data Protection (www.uoou.gov.cz).

If you have questions or wish to exercise your rights, please contact me at the above-mentioned e-mail.