Privacy policy

The data controller within the meaning of Article 4(7) of the GDPR is:

• Company: FilmFlow s.r.o.
• Company ID (IČO): 23023279
• Registered office: Korunní 2569/108, 101 00 Prague 10, Czech Republic
• E-mail: filmflow@filmflow.cz
• Website: www.filmflow.cz

The company is not required to appoint a Data Protection Officer.

Cookies are small text files that a web server stores in your browser when you visit a site. They allow the site to remember certain information — your preferences, for example, or how you interacted with the page. Cookies are not executable code and cannot in themselves cause harm.

The legal basis for using cookies is:

• Necessary cookies — the legitimate interest of the controller (Article 6(1)(f) GDPR) and technical necessity under Section 89 of Czech Act No. 127/2005 Coll. on electronic communications.
• Analytics and marketing cookies — your consent (Article 6(1)(a) GDPR), given through the cookie banner on your first visit.

3.1 Necessary cookies (always active)

These cookies are required for the basic operation of the site and cannot be turned off.

• cookieconsent — stores your cookie choice; duration 1 year; provider filmflow.cz
• PHPSESSID / session — maintains the user session; duration for the length of the session; provider filmflow.cz

3.2 Analytics cookies — Google Analytics 4

Used to measure traffic and user behaviour (number of visits, session length, traffic sources). The data is anonymised. Provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

• _ga — distinguishes unique users; duration 2 years; provider Google
• _ga_CHFQJ87S3J — maintains GA4 session state; duration 2 years; provider Google
• _gid — distinguishes users within a day; duration 24 hours; provider Google

3.3 Marketing cookies — Meta (Facebook) Pixel

Allow us to measure the performance of advertising on Facebook and Instagram and to serve targeted ads. Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

• _fbp — identifies the browser for the Meta advertising system; duration 3 months; provider Meta
• _fbc — stores the last ad click; duration 2 years; provider Meta

3.4 Marketing cookies — Google Ads

Allow us to measure conversions from Google ads and to run remarketing campaigns. Provider: Google Ireland Ltd.

• _gcl_au — measures the effectiveness of Google Ads conversions; duration 3 months; provider Google
• IDE — serves targeted advertising (DoubleClick); duration 13 months; provider Google

Purposes and legal bases

• Operating and securing the website — legitimate interest (Article 6(1)(f) GDPR)
• Traffic analysis — consent (Article 6(1)(a) GDPR)
• Targeted advertising and remarketing — consent (Article 6(1)(a) GDPR)

Recipients of personal data

Your data may be shared with the following recipients:

• Google Ireland Ltd. (analytics, advertising) — established in the EU; transfers to the USA take place under Standard Contractual Clauses (SCC) pursuant to Article 46 GDPR
• Meta Platforms Ireland Ltd. (advertising) — established in the EU; transfers to the USA under SCC

Retention period

Personal data processed through cookies is retained for the period stated for each cookie above. It is deleted automatically once that period expires.

As a data subject you have the following rights under the GDPR:

• Right of access (Article 15 GDPR) — you may ask what data we process about you.
• Right to rectification (Article 16 GDPR) — have inaccurate or incomplete data corrected.
• Right to erasure (Article 17 GDPR) — under certain conditions you may request deletion of your data.
• Right to restriction of processing (Article 18 GDPR) — processing can be restricted while an objection is being handled.
• Right to data portability (Article 20 GDPR) — structured data in a machine-readable format.
• Right to object (Article 21 GDPR) — object to processing based on legitimate interest.
• Withdrawal of consent — consent to analytics and marketing cookies can be withdrawn at any time, without affecting the lawfulness of processing carried out beforehand.
• Complaint to a supervisory authority — the competent authority for the controller is the Czech Office for Personal Data Protection, ÚOOÚ (www.uoou.cz). You may also contact the supervisory authority in your country of residence.

You can manage or withdraw your consent at any time:

• Cookie banner on the site — click “Cookie settings” at the bottom of the page and adjust your preferences.
• Browser settings — most browsers allow you to block or delete cookies.
• Google Analytics opt-out — tools.google.com/dlpage/gaoptout
• Google advertising — adssettings.google.com
• Meta advertising — facebook.com/adpreferences
• Your Online Choices — youronlinechoices.com

Please note that disabling some cookies may limit the functionality of the website.

FilmFlow s.r.o. reserves the right to update this document at any time, in particular where the tools we use or the applicable law change. The date of the latest update is always shown at the top of the document. We will notify you of material changes through the consent banner or by other suitable means.

To exercise your rights or ask anything about how we process personal data, contact us at:

• FilmFlow s.r.o., Korunní 2569/108, 101 00 Prague 10, Czech Republic
• E-mail: filmflow@filmflow.cz

We respond without undue delay and no later than one month from receiving your request (Article 12(3) GDPR).