Privacy and cookies

Controller

Controller

Adrián Bak, operating under the trade designation Maison Adriano Agency

Company ID

24868078

Registered address

Jinonická 752/38, 150 00 Praha 5, Czech Republic

E-mail

info@maisonadriano.com

Website

https://maisonadriano.com

Purpose and scope of this notice

This notice fulfils the information obligation under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the relevant Czech data-protection legislation. It applies to website visitors, prospective clients, clients, suppliers and other persons who communicate with us.

Personal data we may process

Depending on how you communicate with us or which service you request, we may process:

• name, surname, company or brand name;
• company ID, VAT ID and billing address;
• e-mail address and telephone number;
• links to websites or social profiles submitted with an inquiry;
• the content of inquiries, orders, project materials and information shown on invoices;
• communication history and information necessary to prepare and deliver services;
• technical data made available by the website or infrastructure provider, such as IP address, device and browser information, access time and security logs.

Please do not send special-category personal data unless it is genuinely necessary and agreed in advance.

Purposes and legal bases

Inquiries, offers and services

Data are processed to respond to inquiries, prepare an offer, take steps before entering into a contract and perform an agreed service. The legal basis is Article 6(1)(b) GDPR.

Billing and statutory obligations

Billing and accounting data are processed to comply with legal obligations under Article 6(1)(c) GDPR.

Communication, security and legal claims

We may retain necessary communication and technical records to operate and secure the website, prevent misuse, document agreements and protect legal claims. The legal basis is our legitimate interest under Article 6(1)(f) GDPR.

Marketing communication

Marketing messages are sent only where there is an appropriate legal basis. You may unsubscribe or object at any time.

Sources of personal data

We obtain personal data primarily from you, for example by e-mail, through a contact form once activated, during calls or in project materials. Limited technical data may be generated automatically when the website or related infrastructure is used.

Recipients and processors

Personal data may be made available, only to the extent necessary, to providers that support hosting, website operation, e-mail, contact forms, invoicing, accounting, legal services or project delivery, and to public authorities where required by law.

The website is hosted through GitHub Pages. Web fonts are currently loaded from Google Fonts. These providers may receive technical request data such as an IP address and browser information. Specific providers may change as the website and services evolve; this notice will be updated where the change is material.

Transfers outside the EU/EEA

Some technical providers may process data outside the European Economic Area. Where this occurs, transfers are based on an applicable adequacy decision, standard contractual clauses or another safeguard permitted by GDPR.

Retention periods

• inquiries that do not lead to a contract: normally up to 3 years after the last communication;
• contract and project records: for the duration of the relationship and afterwards for the period necessary to protect legal claims;
• accounting and tax documents: for the period required by law, commonly 10 years;
• technical and security logs: for the shortest period reasonably required by the relevant provider and security purpose;
• data based on consent: until consent is withdrawn, unless another legal basis applies.

Cookies and browser storage

The website currently does not use analytics, advertising or profiling cookies. It uses only the following functional browser storage:

These values are used only to provide the requested website functionality and do not contain a direct identifier. If analytics or marketing tools are added later, they will not be activated before the legally required consent is obtained, and this notice will be updated.

Automated decision-making

We do not make decisions based solely on automated processing that would produce legal or similarly significant effects. Analytical or assistive tools may support creative and strategic work, but they do not decide an individual's rights or obligations.

Security

We use proportionate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or destruction. Access is limited to persons and providers who need the data for the relevant purpose.

Your rights

Subject to the conditions of GDPR, you may request access, correction, erasure, restriction of processing and data portability; object to processing based on legitimate interests; and withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with a supervisory authority.

How to exercise your rights

Send your request to info@maisonadriano.com. We may ask for reasonable verification of identity where necessary to protect personal data. Requests are handled within the time limits set by GDPR.

Supervisory authority

The competent authority in the Czech Republic is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, uoou.gov.cz.

Changes to this notice

We may update this notice when services, providers, legal obligations or the technical configuration of the website change. The current version is always available on this page.