Privacy &
Cookies.

1. Data controller

The data controller of this website is Vlastimil Koutecký, operating this website as a private individual and not as a business entity.

For privacy-related requests, please use the contact details published on the About page of this website.

2. What personal data is processed

This website is primarily an informational and photography portfolio website. It does not currently provide public user accounts, newsletter registration, public comments, e-commerce checkout or a contact form.

Depending on how the website is accessed, the following technical data may be processed:

• IP address and basic request metadata processed by the hosting provider in server logs;
• browser type, operating system, requested URL, referrer URL, date and time of access;
• security-related logs necessary to protect the website and hosting infrastructure;
• technical session data used only for the restricted website administration area.

3. Purposes and legal bases

The data described above is processed for the following purposes:

• Website delivery and technical operation — to load pages, images, scripts and stylesheets correctly. The legal basis is the controller’s legitimate interest in operating and presenting the website.
• Security and abuse prevention — to protect the website against unauthorised access, attacks, spam, misuse and technical errors. The legal basis is the controller’s legitimate interest in securing the website.

4. Cookies

The public part of this website does not intentionally use analytics, advertising or marketing cookies. No Google Analytics, Google Tag Manager, Facebook Pixel, Microsoft Clarity, Hotjar or similar tracking tools are currently used.

This website may include an embedded Substack subscription form. The form is loaded from Substack and may use technical cookies or similar technologies necessary for displaying the form and processing a newsletter subscription.

If a visitor enters an email address into the embedded Substack form and subscribes, the email address is submitted directly to Substack and processed according to Substack’s own terms and privacy policy.

The restricted administration area may use strictly necessary technical cookies or authentication data required to keep the administrator logged in and to protect the administration interface. These cookies are not used to track visitors of the public website.

Because this website does not use analytics, advertising or marketing cookies of its own, it does not display a general cookie consent banner. If analytics, advertising or other non-essential tracking tools are added in the future, this policy and the cookie consent mechanism will be updated before such tools are activated.

5. Third-party services

This website may load selected external resources required for visual presentation and functionality, such as fonts, JavaScript libraries or content delivery networks. When these resources are loaded, the visitor’s browser may connect directly to the relevant third-party provider, which may receive technical information such as the visitor’s IP address and browser metadata.

The website currently uses or may use:

• Google Fonts for typography;
• Tailwind CDN for styling support;
• cdnjs / fslightbox for gallery functionality;
• external links to Instagram, Substack and IrysPhotos.

External links lead to third-party websites. Once a visitor leaves this website, the privacy practices of the destination website apply.

6. Hosting and recipients

The website is hosted by a web hosting provider. The hosting provider may process technical logs and other operational data as a processor or independent provider of hosting infrastructure, depending on the specific service arrangement.

Personal data is not sold. Personal data is not intentionally shared with advertisers or marketing networks.

7. International transfers

Some external services or content delivery networks may be operated by providers located outside the European Economic Area or may route requests through infrastructure outside the EEA. Where applicable, such transfers should be covered by appropriate safeguards used by the relevant third-party provider.

8. Retention period

Technical server logs are retained only for the period necessary for website operation, troubleshooting, security and legal protection. The exact retention period may depend on the hosting provider’s technical settings.

Administration session data is retained only for the duration necessary to maintain a secure administrator login session or until logout/session expiry.

9. Your rights

Under applicable data protection law, you may have the right to request access to your personal data, rectification, erasure, restriction of processing, objection to processing and data portability, where applicable.

You also have the right to lodge a complaint with a supervisory authority. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection:

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Praha 7
Czech Republic
uoou.gov.cz

10. Changes to this policy

This privacy and cookies notice may be updated if the website functionality changes, especially if analytics, advertising tools, contact forms, newsletter functionality or other data-processing features are added.