DRAFT — legal review required. For the owners and staff of venues that use the reservation system (not for guests — each venue informs its guests with its own notice, which the system generates). The operator's details are placeholders. The Czech version prevails. Version 0.1-draft, 19 October 2026.
{OPERATOR — company name, company ID, registered office}, contact {operator e-mail}.
| Data | Purpose | Legal basis |
|---|---|---|
| Name, e-mail, role, venue | Creating and managing the account, invitations, password reset | Contract (Art. 6(1)(b) GDPR) |
| Password (hash only), two-step verification factors, trusted devices | Secure sign-in | Contract; legitimate interest in security (Art. 6(1)(f)) |
| IP address, time and result of sign-ins, change records (audit) | Abuse protection, traceability of changes | Legitimate interest (Art. 6(1)(f)) |
| Acceptance of the terms (version, time, IP) | Proof of what was accepted | Legitimate interest; contract |
Processors running the service, with servers in the EU: hosting Roští.cz (Czech Republic), standby server netcup (Germany), backups Scaleway (France), monitoring Better Stack, e-mail delivery Scaleway (France; as a fallback ZONER a.s., Czech Republic, which also hosts our mailboxes) We do not sell the data or use it for marketing.
You have the right of access, rectification, erasure, restriction, portability and to object. Write to {operator e-mail}. You may also complain to the Czech data protection authority (www.uoou.cz).