Privacy Policy

Data Controller Identification
Controller:Picasso film s.r.o.
Company ID:27483231
Business Address: Na Květnici 12, Prague 4, 140 00
E-mail: info@picassofilm.com
Phone: —
Website: picassofilm.com

1. Data Subjects, Purposes, Scope, Legal Basis, and Processing Period

1.1 Individuals contacting the Controller
Purpose: Responding to inquiries
Scope of data: name, e-mail, phone
Legal basis: legitimate interest (Art. 6(1)(f) GDPR)
Processing period: for the time necessary to resolve the inquiry

1.2 Newsletter recipients
Purpose: sending commercial communications (marketing)
Scope of data: name, e-mail
Legal basis: consent (Art. 6(1)(a) GDPR)
Processing period: until consent is withdrawn

1.3 Website visitors (cookies)
The website uses cookies that store a small amount of information for basic functionality and statistical tracking of visits.

Necessary cookies can be processed without consent.
Other cookies only with the visitor’s consent, which can be withdrawn at any time in the browser settings.

2. Voluntary Provision of Data

Providing personal data is voluntary. Failure to provide it may limit the Controller’s ability to respond to your request or enter into a contract.

3. Withdrawal of Consent

You may withdraw consent-based processing at any time by sending an e-mail to info@picassofilm.com or via the link in a commercial communication sent to you.
Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

4. Personal Data Processors

Personal data may be processed by the following external entities:

• e-mail service provider

• analytics tool provider (e.g., Google Analytics)

• hosting service provider

• other processors as necessary

5. Method of Processing Personal Data

The Controller and its processors process data manually (in both electronic and paper form) and by automated means.

6. Rights of Data Subjects

You have the right in particular to:

• access personal data and obtain a copy (Art. 15 GDPR)

• rectify inaccurate data (Art. 16 GDPR)

• erasure (“right to be forgotten,” Art. 17 GDPR)

• restriction of processing (Art. 18 GDPR)

• data portability (Art. 20 GDPR)

• object to processing (Art. 21 GDPR)

• lodge a complaint with the supervisory authority (Office for Personal Data Protection, Prague)

7. Final Provisions

The Controller reserves the right to update these principles at any time.
These principles take effect on 10 August 2025.