Effective from 1 November 2026. This page explains which personal data we process, why, how long we keep them and what your rights are under the General Data Protection Regulation (GDPR).
Who processes the data
The controller is Autentická média s.r.o., company ID 09542515, registered office Zvonařovská 84/13, 180 00 Prague 8, Czech Republic. For anything about personal data, write to [email protected]. We have no data protection officer, as the law does not require one for us.
Studio requests and bookings
When you request a slot, we store your name, e-mail, phone (if you fill it in), your note and the chosen date, package and set. We need them to handle the request, confirm the slot, arrange the shoot and issue an invoice.
The legal basis is performing a contract and steps before it that you ask for (Art. 6(1)(b) GDPR). For invoices it is a legal obligation (Art. 6(1)(c)).
First we e-mail you a link to confirm the request. If you do not confirm it within two hours, the request and its data are deleted.
Applying to Autentická výzva
When you apply as a guest of the Autentická výzva podcast, we store your name, e-mail, phone, topic, a link to your website or social media and the chosen date. We create a ticket for you, which you open with a link from your e-mail.
We need the data to arrange the shoot (Art. 6(1)(b) GDPR). How the episode is recorded and published is agreed before the shoot.
E-mail and phone
When you write to us or call us, we use your details only to deal with what you need.
Shooting for customers
Recordings we make for customers belong to them. The customer is the controller for the people who appear in them. We process the recording only on the customer's instructions and delete it within 30 days of delivery.
Running and securing the website
To protect the website from abuse, such as mass form submissions, the server remembers the IP address of form submissions and sign-ins for an hour at most, in memory only. It does not store it anywhere. This is our legitimate interest (Art. 6(1)(f) GDPR).
Cookies and visitor statistics
On your first visit the website asks you to choose in a bar. “Essential only” means we use only what the website cannot work without. “Accept all” also allows analytics cookies. We remember your choice for a year and you can change it any time with “Cookie settings” in the footer.
Essential cookies and browser storage (no consent needed, legitimate interest in running the website):
- am_sid (cookie): signing in to the website editor or to an Autentická výzva ticket, valid 30 days. Only signed-in people get it.
- am-consent (browser storage): your choice in the cookie bar, 1 year.
- am-ui-lang (browser storage): the interface language you chose, until you change it.
- am-rez-prefill (browser storage): the package you picked, so that it is filled in on the booking form. Deleted as soon as the form opens.
Analytics cookies (only with consent, Art. 6(1)(a) GDPR):
- _ga, _ga_* (Google Analytics): tell visits apart so we can see which pages help people find the studio. Valid 2 years. Google's advertising features are switched off.
If you withdraw consent, we delete the analytics cookies and measuring stops. If your browser sends a “Do Not Track” or “Global Privacy Control” signal, we do not measure even with consent.
How long we keep the data
- unconfirmed requests for 2 hours,
- requests and applications that did not lead to a shoot for 1 year at most,
- data of completed orders for the time we work together, invoices for 10 years as accounting and tax rules require,
- sign-in links from e-mail for 20 minutes, Výzva tickets for 7 days.
Who receives the data
Only our team handling bookings and shoots can see the data. Beyond that we pass them only to processors the service cannot run without: the server host, the e-mail service, our accountant and, with your consent to statistics, Google.
Google may process data outside the EU. This is based on the European Commission's adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.
We do not sell the data and do not use them for automated decision-making or profiling.
Your rights
You can ask to:
- know which data we hold about you and get a copy,
- have them corrected or deleted,
- restrict their processing,
- receive them in a machine-readable format,
- object to processing based on legitimate interest,
- withdraw your consent at any time.
Just write to [email protected]. We reply within one month at the latest.
If you are not satisfied, you can lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz).
The terms of our services are in the Terms and conditions.