Direct checkout and post-purchase allocation. When eVTOL ordering is enabled, customers purchase through the website checkout. The total price is displayed before the order is submitted, and the Seller does not add VAT at checkout. Team and Corporate purchasers identify a licence administrator at checkout; that administrator nominates Named Users after payment through a controlled allocation link, and each nominated user receives a separate expiring claim invitation.
1. Controller and contact
The controller is Paul Ceronio, a natural person residing at Andreja Pavču 283/23, 027 32 Habovka, Slovak Republic, acting in his own name and on his own account as the author and self-publisher of eVTOL 2035 — The Global Built-World Intelligence Reference (the “Publication”) under the publication brand “Ceronio Built Intelligence”. Ceronio Built Intelligence is not a separate legal person.
Privacy contact: info@ceroniorealestate.com. Telephone: +421 951 246 595. The residence address above is also the address for data-protection correspondence unless another legally valid service address is expressly stated.
Paul Ceronio determines the purposes and means of processing personal data relating to Publication enquiries, checkout, business-purpose confirmation, orders, invoices, payment status, licence administration, Named Users, personalised watermarks, secure delivery, security records and rights enforcement.
No data protection officer has been appointed. Where a Business Customer or licence administrator supplies another person’s details, including a Named User, that person must have a lawful basis for doing so and must make this Notice available to the individual before the details are submitted.
2. Scope, data, purposes and legal bases
The Publication is offered only to business and professional purchasers for professional use. A purchaser may be a legal entity, public body, sole trader or individual professional acting within their trade, business, craft or profession. It is not offered for private-personal or consumer use.
The information required depends on the selected licence. It may include the purchasing legal entity or professional purchaser, authorised representative, name, surname, private or business email address for an Individual Professional purchaser, business email for an organisational licence administrator or Named User, telephone number, billing address, country, organisation, role, business identifiers where relevant, selected licence, licence administrator, post-purchase Named User nominations, seat and invitation status, Terms and Licence acceptance records, order and payment status, transaction identifiers, licence IDs, delivery and access records, allocation and claim-token expiry, claim timestamps, IP address and device or browser information used for order, allocation and access security, and support or security correspondence. Raw allocation, claim and final-access tokens are not retained after they are issued; only cryptographic hashes are stored for verification.
| Purpose | Typical data | Legal basis under GDPR | Retention |
|---|---|---|---|
| Respond to enquiries and provide information requested before purchase | Name, business email, telephone number, country, organisation, role and enquiry details | Steps requested before entering a contract with an individual professional purchaser (Article 6(1)(b)); legitimate interests in responding to genuine professional enquiries (Article 6(1)(f)) | If no order follows, 12 months after the last substantive contact, unless a complaint, claim or legal requirement justifies longer retention. |
| Operate direct checkout, verify the business-purpose declaration, form the contract and record acceptance | Purchaser or legal-entity details, authorised representative, business email, billing details, selected tier, licence administrator where applicable, Terms and Licence versions, acceptance timestamp, order number, IP address and security metadata | Performance of the contract with an individual professional purchaser (Article 6(1)(b)); legitimate interests in concluding and administering a contract with an organisation, verifying authority and maintaining an auditable order and licence record (Article 6(1)(f)) | While the licence remains in force and for four years after expiry or termination, unless an active claim or legal requirement justifies longer retention. |
| Take payment and issue invoices | Buyer and recipient name, billing address, business email, country, organisation and business identifiers, order amount, total price, payment status and transaction identifiers | Performance of the contract where the individual is the contracting party (Article 6(1)(b)); legitimate interests in receiving and reconciling organisational payments (Article 6(1)(f)); compliance with accounting and tax obligations (Article 6(1)(c)) | Invoices and statutory accounting records: ten years following the year to which they relate. Other payment metadata: until refund and chargeback periods expire, normally no more than 24 months. Complete card details are not stored by the controller. |
| Administer licences, post-purchase allocations and Named Users | Customer, licence administrator, Named User name and business email, business-domain check, licence tier, seat number and status, invitation and claim timestamps, user ID and licence ID | Performance of the contract with an individual professional purchaser (Article 6(1)(b)); legitimate interests in administering organisational licences, preventing unauthorised use and protecting rights in the Publication (Article 6(1)(f)) | While the licence remains in force and for four years after expiry or termination, unless an active claim or legal requirement justifies longer retention. Continued necessity for perpetual-licence records is reviewed at least every five years. |
| Create, validate and securely deliver separately personalised PDFs | Named User name, licensed organisation, licence tier, licence ID, PDF filename, personalised-file and approved-master SHA-256 hashes, validation result, hashed final-access token, delivery timestamp, access events and revocation status | Performance of the contract where the Named User is the individual purchaser (Article 6(1)(b)); legitimate interests in fulfilment of organisational licences, secure delivery, traceability, quality assurance and rights enforcement (Article 6(1)(f)) | The watermark-to-licence record follows the licence-record period above. Routine delivery and access metadata are kept for 12 months after delivery. Records connected with suspected misuse or a dispute are kept until final resolution and expiry of the applicable limitation period. |
| Provide support, protect checkout and delivery, prevent misuse and establish, exercise or defend legal claims | Support communications, order, access, delivery, payment-status, security, revocation and investigation records | Performance of support obligations where applicable (Article 6(1)(b)); legitimate interests in support, security, fraud prevention, preventing misuse and legal protection (Article 6(1)(f)) | Routine security and access logs: 12 months. Support records: three years after the case closes. Claim or investigation records: until final resolution and expiry of the applicable limitation or enforcement period. |
| Comply with law and binding authority requests | Records required by accounting, tax, sanctions, customer-status verification or other applicable law, or by a valid court or authority request | Compliance with a legal obligation (Article 6(1)(c)) | For the period required by the applicable law or binding request. |
These are maximum periods unless longer retention is required by law, a binding order or an active claim. When a period expires, personal data are deleted or irreversibly anonymised. Data retained solely for statutory accounting or legal claims are access-restricted and are not used for unrelated purposes. Retention periods and continued necessity are reviewed at least annually.
3. Checkout data, minimisation, personalisation and visibility
Checkout collects only data reasonably necessary to identify the Business Customer, form and evidence the contract, process payment and invoicing, and initialise the selected licence. For an Individual Professional licence, the purchaser is normally the single Named User. For Team and Corporate licences, checkout collects the licence administrator’s name and business email; the complete user list is not collected at checkout.
After payment, the licence administrator uses a secure allocation link to nominate users gradually, up to 5 Team users or 15 Corporate users. Each nomination is limited to the user’s name and individual business email plus the organisation already associated with the order. The system records whether the email domain matches an approved domain for the licensed organisation. A different corporate domain or third-party allocation is held for review rather than accepted automatically.
Acceptance of the Terms and the business-purpose declaration is recorded as contract evidence; it is not consent to unrelated processing or marketing. Purchasing the Publication does not add a purchaser, representative, licence administrator or Named User to a newsletter or promotional mailing list. Marketing requires a separate choice and is governed by the general website Privacy Policy.
Each authorised user receives a separate personalised PDF. The visible personalisation is limited to the Named User’s name, licensed organisation where applicable, licence tier and unique licence ID. It does not display a residential or billing address, email address, telephone number, payment information or other unnecessary personal data. Anyone given access to the personalised copy will be able to see the visible personalisation.
The seat number and status, hashed allocation, claim and delivery tokens, recorded SHA-256 hash, user ID, licence status, quality-assurance result and delivery metadata support integrity, traceability and controlled revocation. A controlled Named User replacement is permitted only for a genuine employee departure; the former invitation, licence ID and access are revoked and a new personalised copy and new licence ID are issued.
4. Recipients and processors
Paul Ceronio is the only natural person with routine access to eVTOL enquiries, customer records, orders, invoices, licence records, watermark records and delivery records. There are no employees or other internal authorised users with routine access to those data.
Automated technical providers may receive only the data necessary for their functions:
- GoDaddy hosting group — WordPress and WooCommerce hosting, database storage, network services, server security, caching and automated backups. Provider information is available in the GoDaddy subprocessor list.
- Brevo (Sendinblue SAS, France) — transactional email delivery for order confirmation, licence administration and secure-delivery messages. Further information is available in the Brevo privacy policy.
- WooPayments / WooCommerce Ireland Ltd. and relevant Automattic or WooCommerce group companies — payment connectivity, transaction support, fraud prevention and administration if WooPayments is offered at eVTOL checkout. Further information is available in the Automattic and Woo privacy policy.
- Stripe Payments Europe, Ltd., Stripe Technology Company, Ltd. and relevant Stripe affiliates and subprocessors — payment authorisation, settlement, fraud prevention, refunds, chargebacks, disputes and payment-law compliance if Stripe is offered at checkout. Further information is available in the Stripe Privacy Center.
- PayPal (Europe) S.à r.l. et Cie, S.C.A. and relevant group companies and service providers — payment authorisation, settlement, fraud prevention, refunds, chargebacks, disputes and compliance if PayPal is offered at checkout. Further information is available in the PayPal Privacy Statement.
- Defiant, Inc., through Wordfence — firewall, malware detection, login protection and security monitoring. Further information is available in the Wordfence data-processing addendum.
Payment-related eVTOL disclosures apply when ordering is enabled and a customer proceeds through checkout using the selected payment provider.
Complete card numbers and card verification codes are collected through payment-provider-hosted fields and are not stored in the website database. The website may retain order and billing information, payment status, transaction identifiers and an applicable payment token rather than the complete card details.
Personal data may also be disclosed to professional advisers, insurers, auditors, courts, regulators, tax or law-enforcement authorities where disclosure is required by law or reasonably necessary to establish, exercise or defend legal claims. Payment providers may act as separate or joint controllers for regulated payment, fraud-prevention and compliance activities under their own notices.
5. International transfers
Some providers are established in the EEA, including Brevo in France and relevant WooCommerce and Stripe entities in Ireland. Global hosting, payment and security providers or their approved subprocessors may also process data in the United States or other countries outside the EEA.
A transfer outside the EEA is made only where a lawful transfer mechanism is available, such as an adequacy decision under GDPR Article 45, the European Commission’s standard contractual clauses under Article 46 together with any required transfer assessment and supplementary measures, or another mechanism permitted by applicable data-protection law.
Provider privacy notices, data-processing terms and subprocessor information are linked above. Information about safeguards relevant to a particular transfer may be requested at info@ceroniorealestate.com; confidential or security-sensitive terms may be summarised or redacted where legally permitted.
6. Security and fulfilment controls
Technical and organisational measures appropriate to the processing risks include restricted administrative access, administrator two-factor authentication, HTTPS encryption, Wordfence firewall and login-security controls, malware and vulnerability scanning, update monitoring, managed-hosting backups, payment-provider-hosted card-entry fields, hashed allocation, claim and final-access tokens, single-use claims, unique non-indexed private access links, unique licence IDs, recorded SHA-256 hashes, separate personalised files in private storage, restricted licence records and an append-only allocation and access event history.
For Team and Corporate licences, the administrator allocation link normally expires after 14 days. Each nominated user receives a separate single-use claim invitation that normally expires after 7 days; resending revokes the earlier invitation. These periods limit exposure of emailed workflow links without shortening the underlying perpetual licence for the delivered edition. After a legitimate claim and successful quality assurance, the user’s final private access link does not routinely expire; it is logged, remains revocable and may be replaced after appropriate verification if compromised.
Generation for an Individual Professional licence begins after successful payment and receipt of complete Named User information. Generation for each Team or Corporate seat begins after payment and that user’s secure nomination and claim. Each file must pass page-count, identity, licence-ID, opening and hash validation. A file that fails remains undelivered until it passes; validated files for other claimed seats are not required to wait.
Suspected security incidents are assessed and documented. Where a personal-data breach is likely to create a risk to individuals, it is reported to the competent supervisory authority without undue delay and, where feasible, within 72 hours after the controller becomes aware of it. Affected individuals are informed without undue delay where the breach is likely to result in a high risk to their rights and freedoms.
No internet-based service or electronic-storage method can guarantee absolute security. This statement does not limit obligations under applicable data-protection law.
7. Individual rights and complaints
Data-protection rights belong to every individual whose personal data are processed, including an individual professional purchaser, authorised representative, licence administrator and Named User. Subject to applicable conditions and limits, an individual may request access, correction, erasure, restriction or portability; object to processing based on legitimate interests; and obtain information about relevant processing.
Requests may be sent to info@ceroniorealestate.com or to the postal address in section 1. Identifying the relevant order, licence ID or Named User is helpful but no particular form is required. Proportionate additional information may be requested where reasonably necessary to verify identity.
Requests are handled without undue delay and normally within one month, subject to any extension permitted by law. Requests are normally free of charge. A reasonable fee may be charged, or action refused, only where permitted for a manifestly unfounded or excessive request.
An individual may lodge a complaint with the supervisory authority in the EEA Member State of their habitual residence, place of work or the alleged infringement. The controller’s supervisory authority is the Office for Personal Data Protection of the Slovak Republic, Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava, Slovak Republic.
8. Automated processing, updates and governing notice
Automated decisions and profiling. Paul Ceronio does not use personal data to make solely automated decisions, including profiling, that produce legal or similarly significant effects. Rights requests and decisions concerning suspected licence misuse are not determined by profiling or a solely automated decision-making system.
Business-domain matching, seat-limit enforcement, invitation handling, personalised PDF generation, validation, hashing, delivery and security monitoring are rule-based technical processes and do not evaluate personal characteristics. A failed domain match is held for review rather than used as a solely automated decision with legal or similarly significant effect. Wordfence may automatically block requests identified as malicious or abusive. When eVTOL payment is enabled, payment providers and card issuers may independently use automated authentication, fraud-prevention, risk-scoring or payment-authorisation systems under their own notices and legal responsibilities.
Effective date and updates. This Notice is effective from 1 September 2026 and is version 1.4. The version and effective date will change when a material revision is made. Earlier versions may be requested through the privacy contact in section 1.
This eVTOL 2035 Privacy and Personalised-Watermark Notice governs eVTOL checkout and licensing data. It takes priority over the general website Privacy Policy for personal data processed in connection with Publication enquiries, checkout, business-purpose confirmation, orders, payments, invoices, Named Users, licence administration, personalised files, secure delivery, security records and rights enforcement. The general website Privacy Policy continues to apply to unrelated website functions such as general browsing, cookies and subscriptions. Recipient privacy notices continue to govern processing for which those recipients act as separate or joint controllers.