GDPR

GDPR Summary for Personal and Commercial Photography

1. Data Controller
   I am TOMAN foto and I work as a photographer. I process your personal data in the course of providing my services, for example photography sessions and subsequent delivery of photos.

2. What Data I Collect

• Name and contact details (email, phone)

• Photographs taken during the photo session

• Any other information necessary for scheduling, invoicing, or sending the photos

1. Purpose of Processing
   Your data is used solely for:

• Arranging and carrying out the photo session

• Processing and delivering photographs

• Accounting and invoicing purposes

• Informing you about offers only if you have agreed to it

1. Legal Basis for Processing

• Performance of a contract (photo session, delivery of photos)

• Your consent (e.g., newsletter, marketing purposes)

• Legitimate interest (protecting and promoting my work on my website and social media)

1. Sharing and Retention of Data
   I do not share your photos or personal data with third parties without your consent, unless required by law or necessary to provide the service (e.g., a printing company).
   Photographs are stored for as long as necessary to provide the service and thereafter according to any agreement with the client.

2. Your Rights
   You have the right to:

• Request access to your personal data

• Request correction or deletion of your data

• Restrict or object to processing

1. Contact
   To exercise your rights or if you have any questions regarding your personal data, you can contact me at:
   Email: info@tomanfoto.cz