Privacy
policy

The controller of your personal data is Mamusic s.r.o., registered office at Příční 339, 664 63 Žabčice, Czech Republic, Company No. 14055937, VAT ID CZ14055937, registered in the Commercial Register kept by the Regional Court in Brno, section C, insert 126373.

For anything concerning personal data, write to martin@mamustudio.cz or call +420 777 167 930.

Data you give us yourself: name and surname, e-mail, phone number, the content of your message and your preferred date, when you send an enquiry from the calculator, write or call.

Data that arises while we handle the job: the services ordered and their price, the agreed studio date, the state of the booking and its history, the name of the engineer looking after you, and our internal notes.

Data recorded automatically: the date and time of each step and, when you confirm an offer, the IP address you confirmed from, together with the exact wording of the terms you agreed to. Without that we could not later prove the confirmation happened. We also work with IP addresses briefly to protect the form from abuse.

Our legitimate interest is specifically this: to be able to prove, in case of a dispute, what was ordered and confirmed, and to keep the website and administration running and out of reach of attackers.

No, no law requires it. But we need your name, e-mail and phone number to reply and prepare an offer, so it is a requirement necessary to enter into a contract. Without them we cannot handle your enquiry. The note and preferred date are optional.

• An enquiry that led nowhere — 12 months from the last change to the enquiry, then we delete it.
• A completed job — for the duration of our cooperation and a further 3 years, because of the limitation period under Section 629 of the Civil Code. If a dispute were running, until it ends.
• Invoices and accounting records — 10 years under Section 35 of the VAT Act. These are kept outside this website.
• The administration log — 3 years. It records which of us changed what; for a manually deleted enquiry it also keeps the client's name, so we can show who removed the record.
• The date in the studio's internal calendar — for as long as we handle the job itself. It holds the name, booking number, date, status and the engineer's name. Once we delete the job, only a struck-through entry with the booking number and no name stays in the calendar, so it remains traceable that the date was once taken.
• Messages in the studio's mailbox — where you wrote to us, or where your offer was sent, they stay as ordinary working correspondence and are not deleted automatically. If you ask us to erase them, we will.

In the website's database, deletion runs automatically and does not rely on anyone remembering; the calendar is tidied together with the job. The studio mailbox sits alongside that, and stays as ordinary correspondence. If you want to be sure nothing is left, write to us and we will go through all of it at once.

We do not sell it and we pass it to nobody for marketing. It reaches only those without whom we could not run the studio:

• The engineers and studio management — they see enquiries and bookings in the administration.
• The contractor who runs and maintains the website — has access to the server and database as our processor.
• Cloudflare, Inc. — protects and delivers the website; all traffic including IP addresses passes through it.
• Google Ireland Limited — the shared studio calendar receives the name, booking number, date, job status and the engineer's name. We deliberately do not send phone numbers or e-mail addresses there. Google also learns your IP address when the map or a video thumbnail loads on the Contact page.
• The provider of the studio's mailboxes and the sending server through which our messages reach you. Both run in the European Union.
• Our accountant and public authorities, where the law requires it.

Cloudflare and Google may process data outside the EU, in particular in the United States. The transfer relies on the European Commission's adequacy decision (EU-US Data Privacy Framework, Decision 2023/1795), and additionally on standard contractual clauses under Art. 46(2)(c) GDPR. We will send you a copy of the safeguards on request.

The database of enquiries itself sits on a server in the Czech Republic.

The website uses no analytics or advertising cookies and does not track you. The only exception is the administration login, where a technical cookie keeps studio staff signed in; this does not concern website visitors.

The Contact page contains an embedded Google map. It loads with the page, so Google learns your IP address at that moment. Videos work differently: until you click, only a thumbnail image is fetched from Google's servers, and the player itself starts only on your click, in a no-cookie mode.

You have the right of access to your data and to a copy of it, to rectification of inaccurate data, to erasure, to restriction of processing and to data portability.

Just write to martin@mamustudio.cz. We will handle it within one month and free of charge; we may only verify that it is really you, so that we do not hand your data to someone else.

If you are not satisfied with how we handled it, you can contact the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, uoou.gov.cz.

The website runs exclusively over an encrypted connection, administration passwords are stored hashed, sign-in is rate-limited against password guessing, and only studio people have access, each under their own account. In case someone locks themselves out there is also a short-lived backup studio password; whoever signs in with it is marked in the history as the studio, not as a particular person. The database is not reachable from the internet.

We are not required to appoint a data protection officer and have not appointed one. No automated decision-making or profiling takes place — the calculator only gives a non-binding estimate and every offer is prepared by a person.

We will amend the policy from time to time as the way we work changes. The current wording is always on this page, with its effective date at the top.