Legal information
Privacy
Through the booking form you entrust us with your name and contact details. Here is what happens to them.
Last updated 29 August 2026
Who processes the data
The controller is Natálie Kohoutová, IČO 08101671, Klicperova 2808/4, 301 00 Plzeň, Czech Republic, registered in the Czech trade register.
Contact for data matters: natalie@nataatelier.com, +420 721 942 746.
There is no data protection officer — neither the scale nor the nature of the processing requires one.
What data and where from
From the form: your name, e-mail, phone (optional), what you are interested in and your message.
Automatically in addition: the language of the page, a two-letter country code from Cloudflare and the source tag of the link you arrived through (from an advertisement, for example).
Your IP address is not stored. I have no use for it and it is more sensitive than everything else put together.
Why, and on what basis
The only purpose is to get back to you and arrange a consultation.
The legal basis is pre-contractual steps taken at your request under Article 6(1)(b) GDPR, together with the consent you confirm on the form.
The data is not used to send offers unless you explicitly ask for them. It is never sold and never passed on for marketing.
How long it is kept
Three years from the day you send the enquiry. After that it deletes itself — a nightly job goes through the database and removes older records.
If you ask for deletion sooner, the enquiry is deleted without waiting.
Who else sees it
Besides me, only the technical services the site and e-mail depend on:
Cloudflare — running the site, the enquiry database and the form's bot protection.
Resend — delivering the form to my mailbox.
Zoho — the mailbox itself.
Each processes the data on my instruction and only within its own service.
Where it is stored
The enquiry database runs in Cloudflare's European region and mail is sent through Resend's European region. The data therefore stays within the European Union.
Cloudflare, Resend and Zoho are US companies. Any access from outside the EU takes place under the standard contractual clauses approved by the European Commission.
Your rights
You have the right of access, rectification and erasure, the right to restrict processing, the right to data portability and the right to object. You may withdraw your consent at any time — withdrawal does not affect what happened before it.
Just write to natalie@nataatelier.com. You will hear back within a month at the latest.
If you believe the data is handled badly, you may contact the Czech Data Protection Authority, Pplk. Sochora 27, 170 00 Prague 7, uoou.cz.
Cookies and analytics
There are no advertising or tracking cookies here.
The form's bot protection (Cloudflare Turnstile) may set a short-lived cookie — without it a person cannot be told apart from a machine.
The source tag of your link is held by your browser for a single visit and leaves this site only when you submit the form yourself.
Visits are measured with Cloudflare Web Analytics, which uses no cookies and does not follow people across sites.
No automated decision-making or profiling takes place.
Changes
Should the processing change, this page will be updated and the date at the top adjusted.