Privacy
An unofficial English translation. The Czech text is binding.
The controller is BASEPOINT GROUP S.R.O, company no. 29574153, Plynární 1032/29, 170 00 Praha, [email protected].
What we process and why
- Your order – name, email, phone, the flight location (coordinates and address), date, purpose and your note, to conclude and perform the contract (Art. 6(1)(b) GDPR).
- Flight permission requests – the bodies that must approve a flight (air traffic control, an airport, a protected-area administration…) are told the place, date and purpose and our pilot's and drone's details. They are not given your name or contact details. This is a legal obligation (Art. 6(1)(c)).
- Sign-in – your email and a one-time code, stored only as a hash and deleted within a day of expiring.
- Payment – card details go straight to Stripe; we never see or store them.
How long
For as long as your account exists, and then as long as accounting and tax law require (up to 10 years for receipts). Ask us by email to close your account.
Processors
| Processor | Purpose | Where |
|---|---|---|
| Hetzner Online GmbH | hosting | Germany |
| Stripe Payments Europe, Ltd. | payments | Ireland / USA (SCC) |
| Mailtrap (Railsware Products Studio LLC) | email delivery | USA (SCC) |
| Google Ireland Ltd. (Google Calendar) | scheduling flights in our calendar | EU / USA (SCC) |
The map
The order form's map loads from OpenStreetMap Foundation servers (United Kingdom, adequacy decision) and the address search uses the foundation's Nominatim service; your browser shares its IP address with them in doing so. To find the ground elevation we send Open-Meteo the coordinates alone, nothing about you. The site stores no tracking cookies; only the cookie needed for signing in and ordering.
Your rights
Access, rectification, erasure, restriction, portability and objection. You can complain to the Czech data protection authority (uoou.gov.cz).
Version of 2026-10-05