Privacy Policy
1. Who we are
1.1. The controller of your personal data is loudmark s.r.o., registered office Rybná 716/24, Staré Město, 110 00 Prague 1, Czech Republic, Company ID (IČO) 24737674, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, File 170162 (“we”). Anyone whose data we process is “you”.
1.2. For anything related to your personal data, write to gdpr@loudmark.cz. We reply within 1 month, free of charge.
1.3. This policy covers the loudmark.studio website and your communication with us. Data processed during client work is governed by our Terms and Conditions (VOP) and the specific contract.
1.4. Giving us your data is voluntary. Without it, however, we cannot reply to you, review your application or send you our newsletter.
2. Inquiries and e-mails
2.1. What we process: your name, e-mail, project description and anything else you choose to send us (company, phone, budget, attachments).
2.2. Why: to reply and prepare an offer. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR); for other messages, our legitimate interest in handling them (Art. 6(1)(f) GDPR).
2.3. How: both the form and e-mails are processed by n8n automation on our own server and stored in Google Sheets. The AI tool Google Gemini helps us sort messages and draft offers. A person always decides on every reply and offer.
2.4. How long: if we don’t end up working together, we delete your data within 2 years of our last contact. If we do, we keep it for the duration of our cooperation and then for as long as needed to protect our rights (limitation periods). Accounting and tax documents are kept for 10 years, as required by law.
3. Job applications
3.1. What we process: your name, e-mail, links to your portfolio and CV, hourly rate, availability (position, time options, start date) and anything else you tell us.
3.2. Why: to review your application and discuss working together. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR).
3.3. How: the form is processed by n8n on our server and your details are stored in Google Sheets. We view your portfolio and CV only at the public link you provide and never store copies of them. Only the team reviewing applications has access.
3.4. How long: we delete your data 1 year after you submit your application, unless we start working together. Our selection can take several months. After it ends, we keep your data only in case of a dispute about the selection process (legitimate interest, Art. 6(1)(f) GDPR) and use it for nothing else. If we start working together, your data moves to our HR records.
4. Newsletter
4.1. What we process: your e-mail, a record of your consent (when and where you signed up), a record of unsubscribing, and whether you opened our e-mails and what you clicked.
4.2. Why: to send you news from the studio. The legal basis is your consent (Art. 6(1)(a) GDPR). We send the newsletter via Mailchimp.
4.3. Unsubscribing: use the link in any of our e-mails, or write to us. Unsubscribing withdraws your consent.
4.4. How long: until you unsubscribe. After that we keep only your e-mail and the record of consent and unsubscribing, to prove we don’t write to you without consent, for no longer than 3 years.
5. Cookies and analytics
5.1. Necessary cookies: the website and embedded video players use only cookies necessary for operation and security. These do not require consent, which is why the website has no cookie banner.
5.2. Embedded videos: we embed Vimeo videos in Do Not Track mode. Vimeo obtains your IP address to play the video and sets only Cloudflare security cookies that protect the player against bots and attacks. We embed YouTube videos in privacy-enhanced mode: YouTube sets cookies only after you start the video yourself. Both services follow their own rules (Google, Vimeo). For Vimeo, the legal basis is our legitimate interest in presenting our work (Art. 6(1)(f) GDPR); for YouTube, your consent given by starting the video (Art. 6(1)(a) GDPR).
5.3. Fonts: our website loads fonts from Google Fonts. Your browser downloads them from Google’s servers, which gives Google your IP address. The legal basis is our legitimate interest in a consistent look of the website (Art. 6(1)(f) GDPR).
5.4. Analytics: we don’t use any yet. When we add it, it will run only with your consent in a cookie banner and we will update this policy.
5.5. Consent to play a YouTube video applies to that playback only. You can delete cookies set by YouTube at any time in your browser settings.
6. Social media
6.1. Our app accesses only our own company accounts on LinkedIn and Meta platforms (Facebook, Instagram, Threads), so we can publish and manage content. It does not collect other users’ data.
6.2. If you follow us or message us on social media, your data is processed primarily by the platform under its own rules (Meta, LinkedIn). We only see what is public on our profile and aggregated page statistics. The legal basis is our legitimate interest in communicating with you (Art. 6(1)(f) GDPR).
7. Who we share data with
7.1. We never sell your data. We share it only with these processors, who provide technical services to us:
| Processor | Purpose | Data location |
|---|---|---|
| Google (Sheets, Drive, Gemini, Fonts, YouTube) | storing inquiries and applications, sorting e-mails, website fonts and videos | EU and USA |
| Mailchimp (Intuit) | newsletter | USA |
| Vimeo | website videos (Do Not Track mode) | USA |
| Meta | managing our company profiles | EU and USA |
| managing our company profile | EU and USA | |
| Active24 s.r.o. | website and e-mail hosting | Czech Republic |
| OVHcloud | n8n automation server | Poland (EU) |
7.2. When data goes to the USA, we only share it with companies certified under the EU-US Data Privacy Framework, which is covered by a European Commission adequacy decision. Where certification is missing, we rely on Standard Contractual Clauses approved by the European Commission.
7.3. We may also share data with our accountant or legal counsel where necessary, and with authorities where the law requires it.
8. Your rights
8.1. You have the right to:
a) find out what data we process about you and get a copy;
b) have inaccurate data corrected;
c) have your data erased when we no longer need it or you have withdrawn consent;
d) ask us to restrict processing, for example while we review your objection;
e) receive your data in a machine-readable format and pass it to another controller (portability);
f) object to processing based on our legitimate interest;
g) withdraw consent at any time, without affecting processing carried out before withdrawal.
8.2. To exercise your rights, e-mail gdpr@loudmark.cz. We may ask you to verify your identity so we don’t hand your data to someone else.
8.3. If you disagree with how we handle your data, you can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz, or with the supervisory authority in your EU country. We’d appreciate hearing from you first.
9. Effective date and changes
9.1. We may update this policy, for example when we add analytics or a new processor. The current version is always at loudmark.studio/gdpr.
9.2. We will notify newsletter subscribers of material changes by e-mail.
9.3. This policy takes effect on 1 November 2026.
9.4. In case of any discrepancy, the Czech version prevails.