Privacy

What data we process

• identification and contact details, such as name, e-mail and phone number,
• owner or guest account data,
• information given in a booking request and related communication,
• billing and payment details for the owner's subscription,
• technical data about the device, browser and use of the service.

Why we need the data

We use the data to create and manage accounts, connect guests with owners, run booking features, invoice subscriptions, secure the platform and handle enquiries.

• Performance of the contract and provision of the requested service.
• Compliance with legal obligations under Article 6(1)(c) GDPR, in particular under Act No. 563/1991 Coll., on Accounting, and tax legislation.
• Legitimate interest under Article 6(1)(f) GDPR in the secure operation and development of the service.
• Consent for optional marketing messages.

Who the data may be disclosed to

Guest data needed to handle a booking is made available to the owner of the selected property. Data may also be processed by vetted providers of hosting, e-mail services, analytics, customer support and the payment gateway for subscriptions.

• Accommodation owners also act as separate controllers in relation to guest data.
• Providers process the data only to the necessary extent and on the basis of contractual terms.
• We do not sell data to third parties.

How long we keep the data

We keep data for the duration of an active account and then for the period necessary to protect legal claims and meet statutory obligations. Marketing consent applies until withdrawn. Specific retention periods will be added before the full launch according to the final setup of the service.

Cookies and technical data

The portal may use necessary cookies for sign-in, security and the functioning of bookings. Analytical or marketing cookies will only be stored in line with the user's consent settings.

Your rights

• request access to your personal data,
• request correction or completion of the data,
• request erasure under Article 17 GDPR or restriction of processing under Article 18 GDPR where the legal conditions are met,
• object to processing based on legitimate interest,
• withdraw consent and lodge a complaint with the Office for Personal Data Protection.

Security

We use appropriate technical and organisational measures that protect data against loss, misuse and unauthorised access. Only people who need the data to operate the service have access to it.