FotoLift
Try for free

Privacy Policy

This policy describes how the FotoLift service processes personal data in accordance with the GDPR and Act No. 110/2019 Sb.

1. Controller

The controller of personal data is Qeron s.r.o., registered office at Kaprova 42/14, 110 00 Praha 1, IČ: 23674822, DIČ: CZ23674822, contact: ahoj@fotolift.cz.

2. What data we process

  • E-mail (sign-in, sending download links and operational messages).
  • Photos uploaded for editing and their edited versions.
  • Billing details needed for payment (company/name, Company ID, VAT ID, address).
  • Technical data (IP address, logs) for security and operation.

3. Purpose and legal basis

  • Providing the service and fulfilling the order - performance of the contract (Art. 6(1)(b) GDPR).
  • Invoicing and accounting - compliance with a legal obligation (Art. 6(1)(c) GDPR).
  • Security, abuse prevention and operation - legitimate interest (Art. 6(1)(f) GDPR).
  • Traffic measurement and marketing - only on the basis of consent (Art. 6(1)(a) GDPR).

4. Retention period

  • Uploaded and edited photos are deleted 14 days after the last edit, generated videos after 7 days.
  • Photos attached to an enquiry are deleted after 14 days, the enquiry itself after one year.
  • Account data for the duration of the account; after cancellation we delete it unless there is a legal reason to keep it.
  • Accounting and tax documents for the period required by law (usually 10 years).

5. Recipients and processors

We share data only with processors necessary for operating the service, under data processing agreements:

  • provider of automated photo processing (editing of uploaded photos),
  • provider of video generation (creating a video from selected photos),
  • provider of voice synthesis (narrating the video commentary),
  • payment gateway Stripe (Stripe Payments Europe, Ltd.) - card payment processing,
  • provider of e-mail infrastructure (sending links and messages),
  • provider of hosting and server infrastructure.

If uploaded photos contain personal data of third parties (e.g. when listing a property), the user is their controller and the operator is, to that extent, the processor.

6. Transfer outside the EU

Photo editing and voice synthesis are processed by providers with servers in the United States of America. Video generation is processed by a provider with servers in Singapore; the photos selected for the video are transferred there. Neither country holds an adequacy decision from the European Commission, so the transfers are based on the standard contractual clauses approved by the European Commission, which ensure an adequate level of protection.

7. Third-party tools and pixels

With your consent (cookie banner) we use measurement and marketing tools that may store cookies and share data with their operators (Google, Meta):

  • Google Analytics 4 - anonymous traffic statistics.
  • Google Ads - conversion measurement and remarketing.
  • Meta (Facebook) Pixel - traffic measurement and remarketing.
  • Meta Conversions API - server-side conversion measurement.

Without your consent these tools do not run, or only in a limited anonymized mode. You can change the settings at any time via the cookie banner (the “Cookies” link in the footer).

8. Your rights

You have the right to access your data, to rectify or erase it, to restrict its processing, to data portability and the right to object. You can withdraw your consent at any time. Send your request to ahoj@fotolift.cz.

9. Supervisory authority

If you believe the processing infringes the regulations, you can lodge a complaint with the Czech data protection authority (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, web: www.uoou.cz.