1. Data Controller

Dotpilot s.r.o.

ID No.: 23995912

VAT No.: CZ23995912

Bělehradská 858/23

120 00 Prague 2

Czech Republic

E-mail: info@dotpilot.cz

2. What Personal Data We Collect

We collect personal data necessary for providing our services, including:

2.1 Data you provide

• Name
• E-mail address
• Phone number
• Billing address
• Payment details (processed securely via Stripe — we do not store card numbers)
• Company information (if applicable)

2.2 Automatically collected data

• IP address
• Browser and device information
• Logs related to website usage

2.3 Data related to domain purchase or lease

• Information required for domain ownership transfer
• WHOIS data where applicable

3. Purpose and Legal Basis of Processing

We process personal data for the following purposes:

3.1 Contract performance (Art. 6(1)(b) GDPR)

• Processing orders and payments
• Delivering digital products (domain transfer, DNS configuration, brand assets)
• Communicating with customers

3.2 Legal obligations (Art. 6(1)(c) GDPR)

• Accounting
• Tax compliance
• Invoicing and record keeping

3.3 Legitimate interests (Art. 6(1)(f) GDPR)

• Fraud prevention
• Service security
• Protecting Dotpilot’s rights

3.4 Consent (Art. 6(1)(a) GDPR)

• Marketing e-mails (if explicitly subscribed)

4. Payments & Third-Party Processing

4.1 Stripe

We use Stripe as our payment processor. Stripe may collect and process certain personal and payment information.

Stripe Privacy Policy:

https://stripe.com/privacy

We do not store or have access to full payment card details.

4.2 Domain Registrars

If you purchase a domain, your personal data may be shared with accredited registrars or registries strictly for the purpose of domain transfer or domain management.

5. Data Retention

We retain personal data only for as long as necessary to:

• fulfil contractual obligations,
• comply with legal and accounting requirements,
• resolve potential disputes.

Billing and accounting data is retained for 10 years as required by Czech law.

6. Your Rights (GDPR)

You have the right to:

• Access your personal data
• Rectify incorrect or incomplete data
• Request deletion (“right to be forgotten”)
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time
• File a complaint with a supervisory authority (ÚOOÚ Czech Republic)

To exercise your rights, contact: info@dotpilot.cz

7. Data Security

We implement technical and organizational measures to protect personal data against:

• Unauthorized access
• Loss or destruction
• Misuse
• Alteration

Payment data is secured exclusively by Stripe and is never stored or processed directly by Dotpilot.

8. International Transfers

Some personal data may be transferred outside the EU when necessary for:

• Payments processed by Stripe
• Domain transfers to non-EU registrars

All transfers comply with GDPR using appropriate safeguards (e.g., Standard Contractual Clauses).

9. Children’s Privacy

Our services are not intended for individuals under 18 years of age.

10. Updates to This Policy

We may update this Privacy Policy from time to time.

The latest version is always available at: https://dotpilot.cz/privacy-policy

Dotpilot s.r.o.

www.dotpilot.cz