Privacy policy

The controller of personal data processed through this website is the business operating the Webster Sound & Light brand, which provides technical production for events. Its identification and contact details are set out at the top of this page and in the Contact section.

The controller is not required to appoint a data protection officer under Article 37 of the GDPR, as it carries out neither large scale systematic monitoring of data subjects nor large scale processing of special categories of data. Please therefore address any data protection matter to the controller directly.

The site has no user accounts, no sign in and no visitor database. We process personal data only when you send it to us yourself through one of the two forms.

Booking form: full name, phone number, email address, event date, type of event, an optional clarification of the event type and an optional message with further details about the event.

Contact form: name, email address and the text of your message.

The submission also records the fact that you ticked the mandatory consent box. We need this in order to demonstrate that we met our information duty.

Please do not enter data unrelated to your enquiry into the free text message, in particular health data, personal identification numbers, document numbers or payment details. We have neither a reason nor a legal basis to process them.

We process form data for a single purpose: to handle your request, to reply to it and to conduct pre contractual communication with you about the technical production of your event, meaning to check availability of the date and the equipment and to prepare a quotation.

We do not use the data for marketing. We do not send newsletters on its basis, we do not build a contact database for later outreach and we do not pass it to anyone for their own commercial purposes.

Processing for the purpose of answering your enquiry and preparing a contract is based on Article 6(1)(b) of the GDPR, that is, taking steps at your request prior to entering into a contract.

By ticking the mandatory box when you submit the form you also give consent under Article 6(1)(a) of the GDPR. You may withdraw that consent at any time; withdrawal does not affect the lawfulness of processing carried out before it.

If the enquiry results in an order, the processing of data necessary to perform the contract is further based on Article 6(1)(b) of the GDPR, and processing for accounting and tax purposes on Article 6(1)(c) of the GDPR.

We keep the email containing your form submission for as long as is necessary to handle the enquiry and any follow up communication, and no longer than two years from our last contact with you. We then delete the message.

If the enquiry leads to a contract, we keep the data for the duration of its performance and thereafter for the period required by accounting and archiving legislation, as a rule ten years from the end of the accounting period to which it relates.

If you withdraw your consent earlier and the processing is not necessary on another legal basis, we delete the message without undue delay.

Form data is not stored in any database and no record of it is created on this website. The form sends it by email to the controller, where it is then handled in an ordinary mailbox.

We use the Resend service (Resend, Inc.) to deliver the email. It acts as a processor and handles the form data solely in order to send and deliver the message to the controller.

The website is hosted on the Vercel platform (Vercel, Inc.). It acts as a processor for the operation of the site and handles technical request data such as IP address and browser type for the purposes of running, availability and security of the site.

Further recipients may be the provider of the controller's mailbox and, where justified, an accountant, a legal representative or a public authority where disclosure is required by law.

The providers named above are companies established outside the European Economic Area, so processing may involve a transfer of data to a third country, in particular to the United States.

Any such transfer takes place under appropriate safeguards pursuant to Chapter V of the GDPR, as a rule on the basis of standard contractual clauses approved by the European Commission or on the basis of an adequacy decision. The current transfer terms are published by these providers in their own privacy documentation.

As a data subject you have, under Articles 15 to 22 of the GDPR, the right of access to your data, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability and the right to object to processing.

You also have the right to withdraw your consent at any time and the right to lodge a complaint with a supervisory authority. In the Slovak Republic the supervisory authority is the Office for Personal Data Protection of the Slovak Republic, whose contact details and forms are available on its website at dataprotection.gov.sk.

We will deal with your request without undue delay and at the latest within one month of receiving it. If the request is complex or if there are several of them, we may extend that period by a further two months; we will inform you of the extension and its reasons.

Providing your data is voluntary. You are under no statutory or contractual obligation to provide it, and not providing it has no adverse consequences for you.

Without your name and at least one contact detail, however, we cannot reply to you, and without the date and type of event we cannot assess whether we have equipment free for that date. If you prefer not to use the form, contact us directly by phone or email.

Your data is not subject to automated individual decision making or profiling within the meaning of Article 22 of the GDPR. Every enquiry is assessed and handled by a person.

The site uses no analytics tools, no advertising systems and no scripts that track visitor behaviour, so no profiles, scores or marketing segments about you are created.

The site is served exclusively over an encrypted HTTPS connection, so the contents of the form are transmitted to the server in encrypted form. Access to the mailbox that receives the messages is password protected and limited to the people who handle enquiries.

You can exercise your rights using the controller's contact details given on this page and in the Contact section. An informal request stating what it concerns and which right you are exercising is sufficient.

To avoid disclosing data to the wrong person, we may ask you for additional information needed to verify your identity, for example confirmation from the email address the original enquiry came from.

We may update this policy if the scope of processing, the tools used or the applicable law change. The current version is always available at this address together with the date of the last update.