Privacy Policy

If you are my customer, newsletter subscriber, or website visitor, you entrust me with your personal data. I am responsible for its protection and security. Please familiarize yourself with the protection of personal data, the principles, and the rights you have in connection with the GDPR (General Data Protection Regulation).

I. Who is the Data Controller

The controller of personal data on the website www.dominikkaproductions.com is Dominika Charvátová, Patočkova 977, Prague, Company ID No.: 17068231. E-mail: info@dominikkaproductions.com.

I process your personal data as the data controller, meaning I determine how personal data will be processed, for what purpose, for how long, and I select any additional processors who may assist me with the processing.

II. Contact Information

If you wish to contact me during the processing of your data, you may do so via e-mail at: info@dominikkaproductions.com.

III. Declaration

I declare that, as the controller of your personal data, I comply with all legal obligations required by applicable legislation, in particular Act No. 110/2019 Coll. on Personal Data Protection and the GDPR, and therefore that:

I will process your personal data only on the basis of a valid legal ground, especially legitimate interest, performance of a contract, legal obligation, or granted consent.
I fulfill the information obligation pursuant to Article 13 GDPR before commencing the processing of personal data.
I will enable and support you in exercising and fulfilling your rights under the Personal Data Protection Act and GDPR.

IV. Scope of Personal Data and Purposes of Processing

I process personal data that you provide to me yourself for the following reasons (to fulfill these purposes):

Provision of Services and Performance of a Contract
Your personal data in the scope of: e-mail address, first name, surname, residential address, and in the case of purchases as a business or company also Company ID and VAT ID, bank account number, and possibly phone number, are necessary for me to fulfill the contract (e.g. sending access to an application, delivering an online course, shipping goods, etc.).

Accounting
If you are a customer, I necessarily need your personal data (billing details) in order to comply with the legal obligation of issuing and recording tax documents.

Marketing – Sending Informational E-mails
I use your personal data (e-mail and name), gender, what you click on in e-mails, and when you most frequently open them for direct marketing purposes – sending commercial communications.

If you are my customer, I do so on the basis of legitimate interest, as I reasonably assume you are interested in our updates, for a period of 7 years from your last order.

If you are not my customer, I send newsletters only on the basis of your consent, for a period of 7 years from the date consent was granted. You provide consent through so-called Double Opt-In confirmation. This confirmation constitutes a clear expression of your consent to the processing of your personal data.

In both cases, you may withdraw your consent by using the unsubscribe link in every e-mail sent.

Advanced Marketing Based on Consent
Only with your consent may I also send you inspirational offers from third parties or use your e-mail address, for example, for remarketing and targeted advertising on Facebook, for a period of 5 years from the granting of consent. This consent may of course be withdrawn at any time via our contact details.

Photographic Documentation and References
Only with your consent may I use your photographs, videos, or written testimonials on my website until you withdraw your consent. This consent may be withdrawn at any time via our contact details.

I retain your personal data for the duration of limitation periods unless the law stipulates a longer retention period or unless otherwise stated in specific cases.

V. Cookies

When browsing my website, I record your IP address, how long you stay on the site, and which page you come from. I consider the use of cookies for measuring website traffic and customizing the display of web pages to be my legitimate interest as a controller, as I believe this enables me to offer you even better services.

Cookies used for advertising targeting will only be processed on the basis of your consent.

My website can also be browsed in a mode that does not allow the collection of personal data. You may disable the use of cookies on your computer.

VI. Security and Protection of Personal Data

I protect personal data to the maximum possible extent using modern technologies corresponding to the current state of technical development. I protect them as if they were my own. I have adopted and maintain all possible (currently known) technical and organizational measures to prevent misuse, damage, or destruction of your personal data, especially through:

Secure access to my computer (password protected).
Secure access to my phone (password protected).
Secure access to my e-mail accounts (secured by username and password).
Secure access to e-mail marketing applications (secured by username and password).
Secure access to invoicing systems (secured by username and password).
Encrypted communication on my website (valid HTTPS certificate).
Personal data will be processed electronically in an automated manner or in printed form in a non-automated manner.

VII. Transfer of Personal Data to Third Parties

My employees and collaborators have access to your personal data.

To ensure specific processing operations that I cannot provide on my own, I use the services and applications of processors who can protect data even better than I can and specialize in such processing.

The processors of personal data are or may include:

SmartSelling a.s. (SmartEmailing, MioWeb, FAPI), Netroufalky 797/5, 625 00 Brno, Czech Republic, VAT ID: CZ29210372
Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland, VAT ID: IE9692928F
Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Personal data that I process both as a controller and processor may only be disclosed to collaborators and processors who provide administrative and technical support for operating the website and related applications or who participate in the operation of my business (e.g. accountants).

Other entities may only be granted access for reasons of compliance with legal obligations.

I assure you that my collaborators who process your personal data are obliged to maintain confidentiality regarding personal data and security measures whose disclosure would jeopardize the security of your personal data.

This confidentiality obligation continues even after the termination of contractual relations with me. Without your consent, your personal data will not be disclosed to any other third party.

It is possible that in the future I may decide to use additional applications or processors in order to facilitate and improve processing quality. However, I promise that in such a case I will place at least the same demands on processors regarding security and quality of processing as I do on myself.

I will not transfer your data to third countries. I process data exclusively within the European Union or in countries that ensure an adequate level of protection based on a decision of the European Commission.

VIII. Your Rights in Relation to Personal Data Protection

In connection with personal data protection, you have a number of rights. If you wish to exercise any of these rights, please contact me via e-mail at: info@dominikkaproductions.com.

• You have the right to information, which is already fulfilled by this information page on personal data processing principles.
• Thanks to the right of access, you may at any time ask me, and within 15 days I will provide evidence of what personal data I process about you and why.
• If anything changes or if you find your personal data outdated or incomplete, you have the right to supplement and amend your personal data.
• You may exercise the right to restriction of processing if you believe I process inaccurate data, if you believe I process data unlawfully but do not wish all data to be deleted, or if you have objected to processing.
• You may restrict the scope of personal data or the purposes of processing. (For example, by unsubscribing from the newsletter, you restrict processing for the purpose of sending commercial communications.)
• Right to data portability: If you wish to take your personal data and transfer it elsewhere, we will proceed similarly as with exercising the right of access, except that I will provide the information in a machine-readable format. For this, I need at least 20 days.
• Right to erasure (“right to be forgotten”): Another of your rights is the right to erasure. I do not want to forget you, but if you wish so, you have the right. In such a case, I will erase all your personal data from my system as well as from the systems of all partial processors and backups. I need 10 days to ensure the right to erasure.

In some cases, I am bound by legal obligations, for example I must keep issued tax documents for the period stipulated by law. In such a case, I will delete all personal data that is not required by another law. I will inform you by e-mail once the deletion has been completed.

Complaint to the Office for Personal Data Protection
If you feel that I do not handle your data in accordance with the law, you have the right to lodge a complaint at any time with the Office for Personal Data Protection. I would appreciate it if you would first inform me of such suspicion so that I can take action and remedy any potential issue.

Unsubscribing from Newsletters and Commercial Communications
I send e-mails containing inspiration, articles, products, or services to customers on the basis of my legitimate interest.

If you are not yet a customer, I send them only based on your consent. In both cases, you may unsubscribe from my e-mails by clicking the unsubscribe link included in every e-mail sent.

IX. Confidentiality

I would like to assure you that my employees and collaborators who process your personal data are obliged to maintain confidentiality regarding personal data and security measures whose disclosure would jeopardize the security of your personal data. This confidentiality obligation continues even after the termination of contractual relations with us. Without your consent, your personal data will not be disclosed to any other third party.

These personal data processing principles are valid from 02 November 2025.