← Back to website

Privacy policy

Effective from 18 October 2026

We only process your data to the extent needed to handle your enquiry, deliver your event and meet our legal obligations. This policy explains what we process, why, for how long and what rights you have under Regulation (EU) 2016/679 (GDPR). This is a translation; the Czech version prevails.

1. Controller

Ing. Jan Škrabal, place of business Před Obcí 363, 250 63 Nová Ves, Czech Republic, Company ID (IČO) 03341879, VAT ID CZ8410205309, email info@royalphotobooth.cz, phone +420 605 414 960. We are not required to appoint a data protection officer; please contact us directly at the email above.

2. What we process and why

Enquiries, quotes and bookings. Name, email, phone, event date, time and venue, event type, number of guests, chosen package and your message — from the website form, email or phone. We need them to reply, prepare a quote and deliver the event (Art. 6(1)(b) GDPR). Without them we cannot prepare a quote.

Invoicing and accounting. Billing details are processed to comply with Czech accounting and VAT law (Art. 6(1)(c) GDPR). Providing them is a statutory requirement.

Event photos — for the organiser. The photo booth takes photos of guests, we print them on site and the event organiser receives a digital gallery. For these activities we act as the organiser's processor (under the processing clause in our terms of service); the organiser is the controller and is responsible for informing their guests.

Sending a photo to a guest. If you enter your email or phone number at the photo booth during the event so that we send you a photo, we are an independent controller for that purpose. We use the contact only to send the photo you asked for (Art. 6(1)(b) GDPR) and delete it within 30 days of the event.

Showcasing our work. We publish photos showing recognisable people on our website and social media only with the consent of those people, for children their legal guardian (Art. 6(1)(a) GDPR). You can withdraw consent at any time by email and we will remove the photo from our website and profiles; we cannot control copies already shared by third parties.

Reviews. We quote public recommendations from our Facebook page on the website (first name and initial). We do so on the basis of our legitimate interest in presenting clients' experience (Art. 6(1)(f) GDPR) and will remove a quote on request.

Website and form security. Only when you open the last step of the enquiry form does the Cloudflare Turnstile bot protection load. It evaluates technical signals from your device (IP address, browser data) and may store a technical value in your browser. Together with short-term server logs it is used only to detect spam and abuse of the form (legitimate interest, Art. 6(1)(f) GDPR). For improving bot detection, Cloudflare is an independent controller (Cloudflare Turnstile privacy policy).

3. Retention

4. Recipients

We never sell your data. It is handled only by providers we need to operate:

Facebook and Instagram. We publish examples of our work on the social networks of Meta Platforms Ireland Ltd. If you contact us via Facebook or Instagram, Meta also processes your data under its own rules. For our page's visitor statistics we are joint controllers with Meta (Page Insights Controller Addendum).

Transfers to the USA. Vercel Inc., Cloudflare, Inc., Google LLC and Lumasoft participate in the EU–US Data Privacy Framework (list at dataprivacyframework.gov), on which we rely. For providers outside the framework, or should it cease to apply, we rely on the European Commission's standard contractual clauses. We will provide a copy of the safeguards on request.

5. Cookies

This website sets no analytics or advertising cookies and does not track you. Cloudflare Turnstile loads only in the last step of the enquiry form and may store a technical value in your browser that is strictly necessary to detect bots. It serves only to protect the form you choose to send, so under Czech law it does not require consent.

6. Your rights

Right to object. You may object at any time to processing based on our legitimate interest (reviews, website security). We will then stop, unless we demonstrate compelling legitimate grounds that override your interests.

Just email info@royalphotobooth.cz; we will reply without undue delay and within one month at the latest. You may also lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.

7. Automated decision-making

We do not make automated decisions about anyone and do not carry out profiling.

8. Changes

We update this policy, for example when we change providers. The current version is always on this page.