Privacy Policy

1. Data controller

• Controller: The operator's details will be completed once the trade-register entry is finalised.
• Brand / service operated: The Sky Bureau (CZ Nebeský úřad, SK Nebeský úrad) — this is a fictional bureau, not a public authority; for GDPR purposes the controller is the real operating entity, not the “bureau”.
• Data protection contact: the filing office e-mail address (see the Contact page).
• Data Protection Officer (DPO): none is appointed — the controller’s activity does not fall under the mandatory appointment in Art. 37 GDPR (there is no large-scale systematic monitoring and no special categories of data).

2. What data we process about you

We keep to the minimum. For the filing office itself that is:

• Although we say publicly that “we collect only your e-mail”, for the demonstrability of consent we technically also record a timestamp and an IP address. That is standard for double opt-in and we say so.
• We do not process in the filing office: name, telephone, address, location, payment data or special categories of data (Art. 9 GDPR). Those arrive only with a purchase and will be covered separately.

3. Purpose and legal basis

Double opt-in = after you enter your e-mail address a verification e-mail arrives; only clicking the link activates the sign-up and the consent to commercial messages. Until confirmation the address is not activated for mailing.

4. How long we keep the data

• Until consent is withdrawn (unsubscribed), and at most 24 months from sign-up, unless the sign-up becomes a customer relationship sooner, or
• until transfer into the customer records upon purchase (the purchase policy then applies).
• Records of the consent given (time, IP) are kept for the duration of the consent and for 3 years after its withdrawal for the defence of legal claims.

5. Who we pass the data to (processors)

The data are processed by our suppliers (processors under Art. 28 GDPR) on the basis of processing agreements:

• For suppliers outside the EU the transfer relies on standard contractual clauses (SCC). We keep the list of processors up to date.

6. Rights of the data subject

You have the right:

• of access to your data (Art. 15) — you know what we keep about you;
• to rectification (Art. 16) — e.g. a typo in your e-mail address;
• to erasure (“to be forgotten”, Art. 17) — we delete you from the filing office;
• to restriction of processing (Art. 18);
• to data portability (Art. 20) — we will hand over the e-mail address in a machine-readable form;
• to object to the processing (Art. 21);
• to withdraw consent at any time (Art. 7(3)) — without affecting the lawfulness of processing before withdrawal;
• to lodge a complaint with a supervisory authority: the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, Prague 7, www.uoou.gov.cz. Slovak applicants: the Office for Personal Data Protection of the Slovak Republic, www.dataprotection.gov.sk.

We handle requests without undue delay and within one month at the latest (Art. 12(3) GDPR). The contact address is on the Contact page.

7. How to withdraw consent and unsubscribe

• Click “Unsubscribe” in the footer of every e-mail — mailing stops immediately.
• Or send an e-mail to the filing office asking to be erased from the records.

Withdrawing consent is free of charge and carries no penalty. After withdrawal we stop sending messages and delete the address (except the necessary consent log, see article 4).

8. Cookies and analytics

• The filing-office form works without marketing cookies.
• Analytics run cookie-free and without profiling visitors.

9. Automated decision-making and profiling

We carry out no automated decision-making with legal effect and no profiling within the meaning of Art. 22 GDPR. The allotment of a file number is purely sequential.