Privacy Policy
Privacy Policy
1. Introductory provisions
This Privacy Policy informs data subjects (hereinafter the "Customer" or "you") about the processing of personal data carried out by the data controller Dmitriy Kotov, Company ID: 75570912, VAT ID: CZ8210299911, with registered office at Březina 59, Březina, 338 24, Czech Republic (hereinafter the "Controller" or "TransferPRO").
The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation (GDPR), and Czech Act No. 110/2019 Coll., on personal data processing.
2. Identification details of the Controller
Controller of personal data:
Name: Dmitriy Kotov
Company ID (IČO): 75570912
VAT ID (DIČ): CZ8210299911
Registered office: Březina 59, Březina, 338 24
E-mail: info@transfery.pro
Phone: +420 778 677 353
3. Categories of personal data processed
The Controller processes the following categories of personal data:
3.1 Identification data: first name, surname
3.2 Contact data: e-mail address, telephone number
3.3 Transport data: pick-up location, destination, date and time of transfer, vehicle type, number of passengers, flight number (if provided)
3.4 Payment data: information about the payment made (last 4 digits of the payment card, transaction ID) – the Controller does not store full payment card details; these are processed exclusively by the Stripe payment gateway
3.5 Technical data: IP address, browser type, cookies (see Article 10)
4. Purposes and legal bases of processing
We process personal data for the following purposes:
4.1 Performance of the transport contract (Art. 6(1)(b) GDPR) – to provide the ordered transport service, to communicate with the Customer about the order and to issue tax documents
4.2 Compliance with legal obligations (Art. 6(1)(c) GDPR) – in particular obligations arising from tax and accounting legislation (retention of tax documents for 10 years)
4.3 Legitimate interests of the Controller (Art. 6(1)(f) GDPR) – debt recovery, establishment and defence of legal claims, service improvement
4.4 Consent (Art. 6(1)(a) GDPR) – for sending marketing communications (only if you give your explicit consent)
5. Retention periods
5.1 Personal data processed for the performance of the contract are retained for the period necessary to carry out the transfer and thereafter for the duration of the warranty period and the limitation period for exercising rights under the contract (as a rule 3 years from the date of the transfer).
5.2 Data on tax documents are retained for the statutory period (10 years from the end of the accounting period to which they relate).
5.3 Personal data processed on the basis of consent are retained for the validity period of the consent, but no longer than 5 years, unless the consent is withdrawn earlier.
6. Recipients of personal data
Personal data may be disclosed to the following categories of recipients:
6.1 IT service and web hosting providers
6.2 The Stripe payment gateway provider (Stripe, Inc., USA) – for payment processing
6.3 Accounting and tax advisers
6.4 Public authorities where required by law (Police of the Czech Republic, tax authorities, etc.)
Data processing agreements pursuant to Art. 28 GDPR have been concluded with all processors processing personal data on behalf of the Controller.
7. Transfers to third countries
7.1 Personal data may be transferred to third countries only in connection with the use of the Stripe service (USA). Stripe, Inc. is certified under the Data Privacy Framework (DPF), which ensures an adequate level of protection of personal data.
7.2 No other personal data are transferred outside the European Economic Area.
8. Rights of data subjects
As a data subject you have the following rights:
8.1 Right of access – you have the right to obtain confirmation from the Controller as to whether your personal data are being processed and, if so, to access those data and further information under Art. 15 GDPR.
8.2 Right to rectification – you have the right to request rectification of inaccurate personal data concerning you (Art. 16 GDPR).
8.3 Right to erasure (right to be forgotten) – you have the right to request erasure of your personal data under the conditions set out in Art. 17 GDPR.
8.4 Right to restriction of processing – you have the right to request restriction of processing under Art. 18 GDPR.
8.5 Right to data portability – you have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit those data to another controller (Art. 20 GDPR).
8.6 Right to object – you have the right to object to processing based on the legitimate interests of the Controller (Art. 21 GDPR).
8.7 Right to withdraw consent – where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before its withdrawal.
8.8 Right to lodge a complaint – you have the right to lodge a complaint with the supervisory authority, the Office for Personal Data Protection (Pplk. Sochora 727/27, 170 00 Prague 7-Holešovice, Czech Republic, www.uoou.cz).
To exercise your rights, contact the Controller at info@transfery.pro. The Controller will respond to your request within 30 days; in justified cases this period may be extended by a further 60 days.
9. Security of personal data
9.1 The Controller has adopted technical and organisational measures to ensure the security of personal data, in particular protection against unauthorised access, alteration, loss or destruction.
9.2 Access to personal data is granted only to authorised persons of the Controller and to contracted processors.
9.3 Communication between your browser and the website is encrypted using the HTTPS/SSL protocol.
9.4 Payment data are processed exclusively via the secure Stripe payment gateway, which complies with PCI DSS (Payment Card Industry Data Security Standard) requirements.
10. Cookies
10.1 The website www.transfery.pro uses cookies.
10.2 Cookies are small text files stored in your browser that ensure the functionality of the website (technical cookies) and enable traffic analysis.
10.3 We use the following types of cookies:
• Technical (necessary) cookies: ensure basic website functions (e.g. language preferences, cart). These cookies cannot be disabled.
• Analytical cookies: used for anonymous traffic measurement and website improvement.
10.4 On your first visit we inform you about the use of cookies via a cookie banner. Technical cookies are stored automatically; analytical cookies require your consent.
10.5 You may manage or delete cookies at any time in your browser settings.
11. Data protection contact
If you have any questions, comments or requests regarding the processing of your personal data, please contact us:
E-mail: info@transfery.pro
Phone: +420 778 677 353
Address: Březina 59, Březina, 338 24, Czech Republic
12. Final provisions
12.1 This Privacy Policy is valid and effective as of 1 January 2025.
12.2 The Controller reserves the right to amend this Policy unilaterally. A new version becomes effective on the day of its publication on the website.
12.3 We recommend reviewing this Policy regularly.
12.4 This Policy has been drawn up in the Czech language; other language versions are provided for information purposes.