Legal
Contents
01
This Privacy Policy applies to Flash Motion s.r.o., a company registered in the Czech Republic (IČO: 23061073, VAT: CZ23061073), Malešická 2855/2b, 130 00 Prague, Czech Republic ("we", "us", or "Flash Motion").
We are the data controller for personal data collected through flashmotion.io and in the course of providing our video production services. We are established in the European Union and subject to GDPR.
Questions or requests: info@flashmotion.io
02
We collect only the minimum data necessary to operate our website and deliver our services.
| Category | Examples | Source |
|---|---|---|
| Contact information | Name, business email, company name | Cal.com booking form, email enquiries |
| Payment information | Invoice details, billing address, VAT number | Provided by client; payments processed by Stripe |
| Project materials | Brand assets, product info, design files | Provided directly by client via email, Slack, or shared folders |
| Usage data | Pages visited, time on site, device type, referral source | Automatically via Vercel Analytics (anonymised) |
| Communication data | Email and Slack message content | Direct correspondence with us |
03
| Purpose | Details |
|---|---|
| Providing services | Delivering video production services, managing projects, communicating about work in progress |
| Invoicing & payments | Issuing invoices, processing payments via Stripe, maintaining financial records as required by law |
| Scheduling | Processing meeting bookings made through Cal.com |
| Website improvement | Understanding how visitors use our site via anonymised analytics to improve performance and content |
| Legal compliance | Meeting obligations under Czech and EU law, including tax and accounting requirements |
04
Contract performance (Art. 6(1)(b))
Processing necessary to perform a contract with you — including managing your project, delivering files, and issuing invoices.
Legitimate interests (Art. 6(1)(f))
Processing necessary for our legitimate business interests, such as improving our website through anonymised analytics and maintaining records of completed work.
Legal obligation (Art. 6(1)(c))
Processing required to comply with legal obligations, including Czech accounting and tax law which requires us to retain invoices and financial records for a minimum of 5 years.
05
5.1 — Vercel Analytics
Our website uses Vercel Analytics and Vercel Speed Insights to collect anonymised usage data (page views, performance metrics). This data does not include personally identifiable information and does not use cookies. No consent is required under GDPR for this processing.
5.2 — Cal.com
Our booking widget may use session cookies necessary for the booking flow to function. These are strictly necessary cookies that do not require consent.
5.3 — YouTube
Our portfolio page uses a YouTube facade pattern: thumbnails are shown by default and the YouTube iframe only loads when you click play. The YouTube iframe may set third-party cookies when you interact with it. YouTube's own privacy policy applies to that interaction.
5.4
We do not use tracking cookies, advertising cookies, or any third-party analytics that build profiles of individual users.
06
| Service | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Billing name, email, invoice amount. Card data is handled directly by Stripe and never stored by us. |
| Cal.com | Meeting scheduling | Name, email, and meeting preferences entered in the booking form |
| Vercel | Website hosting & analytics | Anonymised usage data, server access logs |
| Google Drive | File sharing for project deliverables | Project files and materials shared by clients |
| Slack | Project communication | Messages and files exchanged during active projects |
| Adobe Creative Cloud | Video production software | Project source files processed locally |
| YouTube | Hosting portfolio videos | No personal data sent by us; YouTube may set cookies on interaction |
07
7.1 — Client data & project files
Retained for the duration of the active client relationship plus 3 years, to handle any post-delivery queries or disputes.
7.2 — Invoices & financial records
Retained for a minimum of 5 years as required by Czech accounting law (Act No. 563/1991 Coll.).
7.3 — Booking enquiries (no project commenced)
Retained for 12 months, then deleted.
7.4 — Website analytics
Aggregated and anonymised; no retention limit applies as no personal data is stored.
7.5
Upon termination of a client relationship or upon written request, we will securely delete or return all client personal data, unless retention is required by applicable law. We will certify such deletion or return in writing upon request.
08
Under GDPR, you have the following rights regarding your personal data. Contact us at info@flashmotion.io to exercise any right. We will respond within 30 days.
| Right | What it means |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Request correction of inaccurate or incomplete data |
| Erasure | Request deletion of your data where there is no legitimate reason to continue processing it |
| Restriction | Request that we restrict processing of your data in certain circumstances |
| Portability | Receive your data in a structured, machine-readable format |
| Objection | Object to processing based on legitimate interests |
09
9.1
Flash Motion is based in the Czech Republic (EU). We process data within the EU/EEA where possible. Some third-party services (e.g. Stripe, Cal.com, Slack) may process data in the United States or other third countries.
9.2
Any transfer of personal data outside the EEA occurs only where an adequate level of protection is ensured — via the EU–US Data Privacy Framework, EU Standard Contractual Clauses, or an adequacy decision by the European Commission.
10
When providing video production services to business clients, Flash Motion acts as a data processor on behalf of the client (the data controller). In this capacity we will:
a
Process personal data only on the client's documented instructions and only to the extent necessary to perform the agreed services.
b
Implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or destruction.
c
Not transfer personal data to any third party without the client's prior written consent.
d
Ensure that any personnel authorised to process personal data are bound by confidentiality obligations.
e
Notify the client without undue delay, and in any event within 72 hours, of any personal data breach.
f
Use the following categories of sub-processors as part of our standard production workflow: cloud storage and file sharing (e.g. Google Drive), project communication tools (e.g. Slack, email), and design/production software (e.g. Adobe Creative Cloud). We will notify clients of any intended changes to this list and give clients the opportunity to object.
g
Assist clients, at their cost, in responding to requests from data subjects exercising their rights under applicable data protection law (access, rectification, erasure, portability).
h
Make available all information reasonably necessary to demonstrate compliance with this section, and allow for audits or inspections conducted by the client or a mandated third party with reasonable prior written notice.
11
10.1
For any questions or requests about your personal data, contact us at: info@flashmotion.io
10.2
If you are not satisfied with our response, you have the right to lodge a complaint with the Czech supervisory authority:
10.3
We may update this Privacy Policy from time to time. The current version is always available at flashmotion.io/privacy. The "Last updated" date at the top reflects when changes were last made.