Data controller
DekorArt Prague, s.r.o.
Company ID (IČO): 625 828 52
Registered office: Klimentská 1746/52, 110 00 Prague 1, Czech Republic
Premises / showroom: Na Ořechovce 13, Prague 6
Email: info@dekorartprague.cz, tel.: +420 605 295 834
Website: https://dekorartprague.cz
We have not appointed a data protection officer. For any questions, please contact us at the email address above.
What data we process and why
1) Enquiries and communication
Information you send via the contact form, email, or phone (typically name, contact details, message content) is processed to respond to your enquiry and arrange further cooperation.
Legal basis: steps prior to entering into a contract (Art. 6(1)(b) GDPR) and/or legitimate interest (handling the enquiry) (Art. 6(1)(f) GDPR).
2) Contracts and project delivery
To conclude and perform contracts we process identification and contact details, billing information, project materials, and mutual correspondence.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR), compliance with legal obligations (Art. 6(1)(c) GDPR – accounting and tax rules).
3) Project photography
With agreement, we may use photos of completed interiors as references on the website and social media. We respect privacy – we only publish images that do not reveal sensitive information and are appropriate for this purpose.
Legal basis: your consent (Art. 6(1)(a) GDPR) or legitimate interest in presenting our services (Art. 6(1)(f) GDPR), depending on the situation.
4) Website operation and security
The web server may briefly process technical data (e.g. IP address, browser information, access time) to ensure security and proper functioning of the site.
Legal basis: legitimate interest in operating and securing the website (Art. 6(1)(f) GDPR).
Cookies and similar technologies
We use essential technical cookies for the website to work and to remember your choices (e.g. consent via the cookie banner on the site). We do not use advertising cookies.
Embedded content and third-party services
- Google Maps (map embed) – when the map is displayed, Google may set cookies and process technical data from your browser. Provider: Google Ireland Ltd.
- Fonts from CDN (Google Fonts, cdnfonts.com) – loading fonts connects to the provider’s servers.
You can restrict or delete cookies at any time in your browser settings. See your browser’s help for more information.
Legal bases for processing
- Performance of a contract and pre-contractual steps (Art. 6(1)(b) GDPR)
- Compliance with legal obligations (Art. 6(1)(c) GDPR) – accounting, tax legislation
- Legitimate interests (Art. 6(1)(f) GDPR) – communication, website security, protection of rights
- Consent (Art. 6(1)(a) GDPR) – e.g. publishing photos in references
Retention periods
- Enquiries and communication: usually up to 24 months after resolution.
- Contract and accounting documents: as required by law, typically 5–10 years.
- Photos with consent: until consent is withdrawn or for the period stated in the consent.
- Logs and technical website data: short-term (typically weeks) for security and diagnostics.
Recipients and processors
We may share your data with the following parties only to the extent necessary for the given purpose:
- web hosting and IT administration providers,
- external accountants and tax advisers,
- subcontractors and craftspeople involved in project delivery,
- providers of third-party tools mentioned above (e.g. Google Maps).
All partners are bound by confidentiality and must process data in line with the GDPR.
Transfers to third countries
Some services (e.g. Google) may transfer data outside the EU/EEA. Where this occurs, we rely on EU standard contractual clauses and other appropriate safeguards under the GDPR.
Your rights
- right of access to your personal data,
- right to rectification of inaccurate or incomplete data,
- right to erasure (“right to be forgotten”) where legally permitted,
- right to restriction of processing,
- right to data portability,
- right to object to processing based on legitimate interests,
- right to withdraw consent at any time where processing is based on consent.
To exercise your rights, write to info@dekorartprague.cz. We will respond without undue delay, within 30 days at the latest.
Supervisory authority
You have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
Security
We apply technical and organisational measures to protect your data (encrypted transmission, restricted access, regular updates). No method of transmission or storage is 100% secure.
Children
Our services are not directed at persons under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
Automated decision-making
We do not carry out automated decision-making or profiling within the meaning of Art. 22 GDPR.
Source of data and whether you must provide it
Source of data
We obtain personal data directly from you (e.g. enquiries, email, phone, contractual communication).
Obligation to provide data
Providing data is voluntary. Without certain information we may be unable to respond to an enquiry or to conclude and perform a contract (e.g. contact and billing details).
Updates to this policy
We may update this policy from time to time to reflect changes in processing or legal requirements. The current version is always on this page.
Last updated: 31 January 2026