CzechiaPilot
Privacy and technical storage
This notice explains what personal data CzechiaPilot processes, why, for how long and what rights you have. The service does not currently use advertising or behavioural analytics.
Last updated: 2026-07-29
1. Controller
The controller is Karel Zdeněk, IČO 23660295, Plzeňská 189, Staňkov I, 345 61 Staňkov, Czech Republic. Privacy requests can be sent to info@czechiapilot.com.
2. Data we process
We receive data you provide directly: email, support or host-enquiry messages, planner inputs, saved itineraries and wallet notes you choose to sync. Supabase and Stripe provide authentication, purchase and payment-status identifiers; CzechiaPilot never receives full card details. Hosting, map and security providers receive technical request data such as IP address, time, URL, browser and device information. Required fields are marked: without an email we cannot create an account or link a purchase; planner and wallet content is optional. We do not ask for special-category personal data.
3. Purposes and legal bases
Account creation, trip sync, checkout and paid access are processed to perform a contract or take requested pre-contract steps (GDPR Art. 6(1)(b)). Accounting, tax, refund and authority records are processed to meet legal duties (Art. 6(1)(c)). Security logs, abuse prevention, service improvement, support and defence of legal claims rely on our legitimate interests (Art. 6(1)(f)); you may object where applicable. Host enquiries are processed to answer your request and take requested pre-contract steps. We do not send marketing or activate non-essential tracking without a separate valid consent (Art. 6(1)(a)).
4. Providers and transfers
Vercel provides hosting and security logs; Supabase provides authentication and database storage; Stripe provides checkout, invoicing and payment records; CARTO serves OpenStreetMap-based map tiles; and email providers deliver account and support messages. Each receives only the data needed for its role. Some processing may occur outside the EEA under an adequacy decision, including the EU–US Data Privacy Framework where applicable, or Standard Contractual Clauses. Ask info@czechiapilot.com for information about applicable safeguards. Google Maps and optional booking partners receive data only after you open their external link.
5. Retention
Account and synced trip data remain until you delete the trip or request account deletion. Paid creation rights expire 180 days after purchase. Support, privacy and host-enquiry correspondence is kept while handled and, where needed, for up to three years to establish, exercise or defend claims. Transaction, refund and accounting records are kept for the statutory period, up to ten years where required. Technical logs follow the documented provider period and are kept only as needed for security and legal duties. Local offline copies remain until you or your browser remove them.
6. Cookies and local storage
Only storage necessary for requested functions is active: cp-locale in local storage keeps your language until cleared; Supabase authentication cookies keep a secure session until expiry or sign-out; the Cache API and local storage keep opened itineraries, wallet notes and dismissed offer state until you or the browser remove them. Paid access itself is stored server-side on your account. CzechiaPilot sets no advertising or behavioural-analytics cookies, so no optional-cookie consent banner is currently required. If non-essential storage is introduced, it will remain off until a valid choice.
6a. Wallet data
Wallet notes are stored locally for offline use and, when attached to a signed-in saved trip, also stored in the account database for cross-device sync. Transfer is encrypted. Enter only what you need; anyone with access to an unlocked device or your email sign-in may read it. Delete the trip to remove synced wallet data.
7. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. Send requests to info@czechiapilot.com; we may verify identity to protect the account. We respond without undue delay and normally within one month, free of charge, subject to the GDPR exceptions. You may complain to the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz, or your local supervisory authority. We do not use solely automated decisions with legal or similarly significant effects.