Privacy policy

Last updated: 21 September 2026

1. Who is responsible (data controller)

Controller

Black Shark s.r.o.

Registered office

Kaprova 42/14, Staré Město, 110 00 Praha 1, Czech Republic

Company registration number (IČO)

07666985

VAT number

CZ07666985

Contact for data protection matters

info@vestrovia.online

Responsible editor

Thomas Cooper

We are not required to appoint a data protection officer, because we carry out no large-scale or systematic monitoring. Enquiries go to the address above and are handled by the responsible editor.

2. What we do not do

• We set no cookies of any kind, including so-called essential cookies. There is nothing to consent to, which is why you see no consent banner.
• We use no localStorage, sessionStorage or IndexedDB. Nothing is written into your browser’s storage.
• We run no analytics — no Google Analytics, no Matomo, no self-hosted alternative, no server-side measurement product.
• We load no advertising or conversion pixel, no remarketing tag and no social plug-in.
• We attempt no fingerprinting: no canvas, font, audio or device enumeration, no probabilistic identification of visitors.
• We make no third-party requests. No web fonts, no CDN, no remote images, no embedded video. Every stylesheet, script and image comes from this domain. The site uses your device’s own system fonts.
• We operate no contact form, no newsletter and no user accounts, deliberately, so there is nothing to submit.
• We carry out no profiling and no automated decision-making in the sense of Article 22 GDPR.
• We do not sell or share personal data, and we have no advertising partner with which to share it.

The cookie policy explains how to verify all of this in your own browser in about a minute.

3. What is nevertheless processed

a) Web server log entries

Like every web server, the server delivering this site records a technical log entry for each request. A log line can contain your IP address, the date and time, the page or file requested, the HTTP status, the amount of data sent, the referring URL if your browser sends one, and your browser’s user-agent string.

• Purpose: delivering the page you asked for, keeping the server running, and investigating faults, abuse and attacks.
• Legal basis: Article 6(1)(f) GDPR, our legitimate interest in operating and securing the site. There is no practical way to serve a web page without this exchange.
• Retention: log files are kept only as long as needed for those purposes and are rotated and deleted in the ordinary course of server maintenance. They are not used to build profiles, are not combined with any other source and are not used for measurement or advertising.

b) E-mail you send us

If you write to info@vestrovia.online, we process your address, your message and anything you choose to include in it, in order to answer you.

• Legal basis: Article 6(1)(f) GDPR (handling correspondence addressed to us) and, for requests under data protection law, Article 6(1)(c) (our legal obligation to respond).
• Retention: for as long as needed to deal with the matter, and afterwards only where a statutory retention period applies.

c) Advertising parameters in the page URL

If you reached this site from an advertisement, the link may carry campaign parameters such as utm_source, utm_campaign, gclid or msclkid. These identify a campaign, not you by name. Our only script copies them onto the outbound partner link so the partner network can attribute the click to the right campaign. They are not stored anywhere by us, not written to your browser and not transmitted to us separately — they travel in the URL and go no further until you click a partner link yourself.

4. What happens when you follow a partner link

Buttons marked “partner link” lead through a short internal redirect page on this domain to the vendor or to an affiliate network. At that moment you leave this site. From then on the destination’s own privacy and cookie policy applies: it will typically set its own cookies or identifiers in order to attribute the sale, and it is the controller for that processing, not us.

We receive from the network only aggregated commission reporting — how many clicks and qualifying sales a campaign produced. We do not receive your name, e-mail address, payment details, purchase contents or any identifier that would let us recognise you. We could not link a sale to a visitor even if we wanted to, because we hold nothing about visitors.

If you prefer not to pass through a partner link at all, you can type the vendor’s address into your browser directly. Nothing on this site depends on your using our link.

5. Recipients and processors

We do not disclose personal data to third parties for their own purposes. Our hosting provider processes server logs as a processor on our instructions and under a data processing agreement. Our e-mail provider processes correspondence on the same basis. We may disclose data where we are legally obliged to, for example on a valid order from a public authority.

6. Transfers outside the EEA

We do not transfer personal data outside the European Economic Area for our own purposes. Should a technical service provider ever need to do so, it would be on the basis of an adequacy decision or of standard contractual clauses adopted by the European Commission. Note that when you follow a partner link, the vendor you arrive at may operate internationally under its own arrangements, which are described in its own privacy notice.

7. Your rights

Under the GDPR you have the right to request access to your personal data, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on our legitimate interest. Where processing were ever based on consent, you would have the right to withdraw it at any time.

In practice we hold almost nothing about you: we cannot identify a visitor from a rotated server log, and we have no account, cookie or profile to look you up in. If you write to us we can act on the correspondence we hold. Send requests to info@vestrovia.online, or by post to Black Shark s.r.o., Kaprova 42/14, Staré Město, 110 00 Praha 1, Czech Republic. We answer within one month, and we will tell you honestly if we hold nothing.

8. Complaints

You may complain to a data protection authority. The competent authority for us is the Czech Office for Personal Data Protection:

Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, Czech Republic — www.uoou.cz. You may also complain to the supervisory authority of your own country of residence.

9. Children

This site is not directed at children, has no content for children and collects nothing from anyone, children included.

10. Security

The site is served over HTTPS. Because we hold no visitor database, no accounts and no cookies, the surface available to an attacker holding your data is essentially empty — there is no visitor data to steal.

11. Changes to this policy

If we ever change how the site works — for example by introducing a measurement tool — we will update this policy and the cookie policy before doing so, and we will not introduce anything requiring consent without asking for it properly. The date at the top shows the version in force.