of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the „GDPR“)
In view of the fact, that you or a third party (the Licensee) provided us (for the purposes of this Privacy Notice: “controller”, “we” shall mean the entity specified in the License agreement (the “Agreement”) as the Licensor (Spaceflow s.r.o.), of which you are in the position of the person (cardholder) making payment on behalf of the Licensee, and shall include our subsidiaries and/or affiliates) with your personal data, we are obliged to inform you, as a data subject, that while processing your personal data we are, in fact, the controller under the GDPR and all applicable laws and therefore we provide you with further information regarding such processing.
We process your personal data under Art. 6 (1) (f) GDPR – therefore our legal basis is a legitimate interest.
We process your personal data to ensure that our contractual obligations arising from the Agreement with a third party, of which you are in the position of the person making payment on behalf of the third party (the Licensee) under the Agreement for such third party (the Licensee), are effectively fulfilled.
We aspire to be transparent when we collect and use your personal data and tell you why we need it (the purpose). Since we conducted a contract with a third party (the Licensee), of which you are in position of the of the person (cardholder) making payment on behalf of the Licensee, we need to process your personal data in order to make a payment under such contract (the Agreement).
To fulfil our purpose the best way we can, we need to collect following personal data: name, surname, card number, signature, other personal related (identifying/person-identifiable data) on payment (credit/debit card).
We store them through our payment processor (see below) company Adyen for processing payments. As soon as we no longer need your personal data for the processing purposes for which the personal data were collected, it will delete them unless the statute-barred period applies. Certain details and correspondence may be retained until the time limit for claims (contractual and statutory liability), in respect of the pre-contractual or contractual relationship has expired or in order to comply with regulatory requirements regarding the retention of such data (in such cases the legal basis shall be an applicable was imposing statutory duty to process a personal data).
We may share your personal data with trusted third parties to help us fulfil our purpose. These recipients are contractually bound to safeguard your personal data that we entrust to them. We may engage with several or all the following categories of recipients:
Your personal data are processed within the territory of the country of the registered seat of the processor (Adyen) and other states of the European Union. Your personal data can be processed by a country outside of European Union if this third country has been confirmed by the European Commission as a country with adequate level of data protection or if other appropriate data protection safeguards exist (for example, binding corporate privacy rules or EU standard data protection clauses).
Under the GDPR you have the following rights to process your personal information:
Spaceflow s.r.o., registered seat at: Pernerova 676/51, Karlín, 186 00 Praha 8
Telephone: +420 775 921 992
We strive to protect your privacy as much as possible and therefore We process your personal data in compliance with the GDPR and all other relevant laws. However, if you disagree with the way we handle your personal information, you can file a complaint with our data protection officer to protect your rights.
If you have any questions or comments or you want to report your concerns or enjoy your rights, please contact us or our data protection officer:
Data Protection Officer’s contact:
JUDr. Theodor Klán, attorney-at-law
Seat at: Rohanské nábřeží 678/25, Prague 8 – Karlín
Or you can file a formal complaint with the local data protection supervisory authority; further information about the different EU Supervisory Authorities and how to contact them is available at