Privacy Policy
Last updated: 2026
This Policy explains what personal data paky.io processes, why, and your rights. We process data as a controller for the operation of the platform, in accordance with the GDPR and applicable law.
1. Controller
The controller is the operator of paky.io. Contact: [email protected]. The full legal name and registered address of the operator are shown on invoices and in the platform footer.
2. Data we process
Account and company data: name, business e-mail, phone, company name, VAT/company ID, addresses, role.
Operational data: shipments, capacity, offers, bookings, messages, documents (e.g. CMR, proof of delivery), ratings, and, for driver mode, location pings you choose to share.
Payment data: handled by our payment provider (e.g. Stripe); we store references and status, not full card numbers.
Technical data: log data, device/browser information, and cookies (see our cookie banner).
3. Purposes and legal bases
We process data to provide and secure the platform and perform our contract with you (Art. 6(1)(b) GDPR); to comply with legal, tax, and accounting duties (Art. 6(1)(c)); and for our legitimate interests in operating, improving, and protecting the service, preventing fraud and platform bypass (Art. 6(1)(f)). Optional analytics run only with your consent (Art. 6(1)(a)).
4. Sharing
To run a booking we share the necessary operational details between the matched carrier and shipper (contact details are revealed only after booking). We use processors acting on our instructions — e.g. hosting, payment (Stripe), e-mail delivery, and geocoding (OpenStreetMap/Nominatim) — under data-processing terms. We may disclose data where required by law.
5. International transfers
Where a processor is outside the EEA, transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
6. Retention
We keep data for as long as your account is active and thereafter only as long as needed for the purposes above and to meet statutory retention periods (e.g. tax and accounting records), after which it is deleted or anonymised.
7. Your rights
Subject to law, you have the right to access, rectify, erase, restrict, and port your data, and to object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it at any time without affecting prior processing.
To exercise your rights, contact [email protected]. You may also lodge a complaint with your supervisory authority — in the Czech Republic, the Office for Personal Data Protection (ÚOOÚ).
8. Cookies
We use essential cookies needed to run the site, and — only with your consent — analytics cookies to improve it. You can manage your choice via the cookie banner.
9. Security
We use appropriate technical and organisational measures to protect data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Changes and contact
We may update this Policy; the current version is always published here. Questions or requests: [email protected].