Privacy policyYour data, used only for what you ask for.
OverviewDraft
This policy explains what personal data Flygen Lab s.r.o. collects on flygen.co, why, how long we keep it, and the choices you have. [draft, pending legal review — effective date]
01
Who is responsible
The controller of your personal data is Flygen Lab s.r.o., [registered address], company ID [IČO], registered in [commercial register entry].
For anything about your data, write to [privacy contact address — lucie@flygen.co?]. We answer within one month, as the GDPR requires.
02
What we collect and why
We only collect what a specific purpose needs. Nothing is sold, and there are no advertising pixels on this site.
Analytics, only with your consent
If you allow analytics cookies, we measure how the site is used: pages viewed, clicks on key links (for example a service or the intro call), the device type, the website that referred you and campaign parameters (UTM). A small share of visits may be recorded as a session replay to find usability problems; every form field is masked and never recorded.
We never send your name, email, company or anything you type to analytics. Lawful basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in Cookie settings. Retention: [analytics retention period].
Resources and tools you request
When you ask for a resource or the full result of a tool, we store your work email and, where the form asks for them, your name and company; the resource; your answers and the result summary for diagnostics; the page you came from and this visit's campaign parameters; and the time of your request. We use this to send what you asked for and, where it fits, to follow up about that topic. From your answers we derive a simple interest category (such as the service most relevant to you) to decide whether a personal reply makes sense; it has no legal or similarly significant effect on you.
Lawful basis: [steps at your request (Art. 6(1)(b)) or legitimate interest (Art. 6(1)(f)) — to confirm]. Retention: [e.g. 24 months after your last request — to confirm].
Occasional Flygen thinking
Only if you tick the separate, unticked box on a form do we send occasional articles and tools. Access to a resource never depends on it. We keep the wording you agreed to and when. Lawful basis: your consent; every email has an unsubscribe link. [double opt-in wording and confirmation email]
Contact and email
When you write to us through the contact form or by email, we use your name, email, company (optional) and message to reply. Lawful basis: our legitimate interest in answering you, or steps before a contract. Retention: [retention period for enquiries].
Booking an intro call
Intro calls are booked through Cal.com. The booking page asks for your name, email and the time you choose, plus anything you add; we use it to hold the call. Cal.com's own privacy notice also applies on its pages. Retention: [retention period for bookings].
Your consent choice and technical logs
Your cookie choice is kept in your own browser, in our first-party fg_consent cookie, for 180 days: the categories you allowed, the time, the notice version and a random consent ID, so we can respect your choice (legal obligation, Art. 6(1)(c)). It is not linked to you, and no consent provider is involved. You can change it at any time through Cookie settings. [whether a server-side consent log is needed; consent cookie duration] Our hosting provider processes technical data such as IP address and browser type in server logs to deliver the site and keep it secure (legitimate interest). Images are delivered through Sanity's content network, which receives your IP address to serve them. [third-party script requests on the homepage]
03
Who processes it for us
These providers process data on our behalf under data processing agreements. We do not store personal data from forms in our content management system.
- PostHog (EU Cloud)
- Analytics and session replay, only after consent.
- [legal entity, data location, DPA]
- Brevo
- Contact records for resource requests and enquiries, delivery emails, and opt-in emails.
- [legal entity, data location, DPA]
- Cal.com
- Intro call booking.
- [legal entity, data location, transfer safeguard, DPA]
- Vercel
- Website hosting and server logs.
- [legal entity, region, transfer safeguard, DPA]
- Sanity
- Website content and image delivery (no form data).
- [legal entity, data location, DPA]
04
Transfers outside the EU
We prefer EU data locations. Where a provider processes data outside the European Economic Area, the transfer is covered by [EU–US Data Privacy Framework certification or Standard Contractual Clauses — per provider].
05
Your rights
You can ask us at any time to:
- tell you what data we hold about you and give you a copy;
- correct it, or delete it;
- restrict how we use it, or object to use based on legitimate interest;
- send it to you or another provider in a portable format;
- withdraw a consent you gave — this does not affect what happened before.
Write to [privacy contact address]. You can also complain to the Czech data protection authority, the Úřad pro ochranu osobních údajů (uoou.gov.cz), or the authority where you live.
06
Security and changes
Keys to our email and contact systems stay on our servers, forms are validated and protected against abuse, and access is limited to the people who need it.
If this policy changes, we update this page and its date. For how cookies are used on this site, see the cookie policy.