Privacy policy

Last updated 25 June 2026

I take your privacy seriously. This site collects only the minimum I need to reply to you and to keep improving the site. I never sell your data or send it anywhere it does not need to go. Below is exactly what happens and why.

Who is the controller

The controller of your personal data is Functional s. r. o., registered seat Muškátová 6408/42, 902 01 Pezinok, Slovakia, company ID (IČO): 56140479, tax ID (DIČ): 2122215975, VAT ID: SK2122215975 (studio: Za dráhou 21, Pezinok). I, Martin Zvonár, am the person behind this site; for any data-protection question, contact me at:

What data I process and why

Contact form

When you write to me through the contact form, I process your name, email address and the text of your message. I use them only to reply and to arrange a possible photo session. The legal basis is taking steps at your request before entering a contract, and my legitimate interest in answering your message. The form is processed by Netlify Forms (see below).

Anonymous analytics (consent only)

To see which photos and pages catch your eye, I use analytics tools. They only start after you click “Sounds good” in the cookie bar. Until you agree, nothing is measured and the site works perfectly. You can withdraw consent at any time via the cookie icon in the footer.

  • Google Analytics 4 (via Google Tag Manager) – aggregate traffic statistics. Provider: Google Ireland Limited.
  • PostHog – behaviour analytics and session recording (for example, which photos you look at). Data is stored in the EU (Frankfurt). Form fields are masked in the recording, so your name, email and message are never captured.

The legal basis for analytics cookies is your consent (Art. 6(1)(a) GDPR).

Cookies

Necessary: a small cookie remembers your choice in the cookie bar so you are not asked on every visit. Analytics: set only after your consent (see above) and used for statistics. I do not use any advertising cookies.

Hosting and server logs

The site is hosted by Netlify. As is normal on the web, each page load briefly processes your IP address and basic browser data in server logs so the site can run securely. The legal basis is the legitimate interest in secure, reliable operation.

Who I share data with

I do not sell your data. I share it only with processors that help me run the site, and only to the extent necessary for that service:

  • Netlify, Inc. (USA) – website hosting and contact-form processing.
  • Google Ireland Limited – traffic statistics (consent only).
  • PostHog – behaviour analytics with data stored in the EU (consent only).

Transfers outside the EU

Some providers (Netlify, Google) may process data in the USA. Such transfers are protected by appropriate safeguards under the GDPR (the EU-US Data Privacy Framework, or standard contractual clauses). PostHog stores data within the EU.

How long I keep data

I keep contact-form messages for as long as needed for our conversation and any session arrangement, then delete them. Analytics data is largely anonymous/aggregated and is retained for the period set in each tool. Your cookie consent lasts 6 months, after which I ask again.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time (without affecting processing carried out before withdrawal). Just email me at foto@martinzvonar.sk.

Complaint

If you feel I handle your data incorrectly, you can lodge a complaint with the supervisory authority: the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava (dataprotection.gov.sk).

Changes to this policy

I may update this policy from time to time. The current version is always on this page, with the last-updated date shown at the top.

Get in touch