Privacy Policy

Effective from 1 January 2025 • Last updated: 8. 7. 2026

1. Introduction

Rezervly ("we", "our platform") operates a booking system available at rezervly.eu. This document informs you about what personal data we process, why and how we process it, and what rights you have in connection with processing, in accordance with Regulation (EU) 2016/679 (GDPR).

2. Personal Data We Collect

a) Business owners (registered users):

• Full name / business name
• E-mail address
• Password (stored exclusively as a bcrypt hash — never in readable form)
• Business type, logo, business address
• Payment information — processed exclusively by Stripe (see section 5); we store only the Stripe customer identifier
• IP address at login (for security purposes)

b) Customer data collected during booking:

• Customer's full name
• Customer's e-mail address
• Phone number
• Booking date, time, and notes

This data is processed on behalf of the business owner (Rezervly user), who acts as the data controller in relation to their customers.

3. Legal Basis for Processing

• Performance of a contract (Art. 6(1)(b) GDPR) — account registration, account management, payment processing
• Legitimate interests (Art. 6(1)(f) GDPR) — platform security and fraud prevention
• Consent (Art. 6(1)(a) GDPR) — marketing emails (only if consent has been given)
• Legal obligation (Art. 6(1)(c) GDPR) — tax and accounting records

4. How We Use Personal Data

• Providing and operating the booking platform
• Sending confirmation and notification emails
• Processing subscription payments
• Technical support and customer communication
• Platform security and fraud detection
• Fulfilment of legal obligations

5. Stripe as Payment Processor

All payments are processed by Stripe, Inc. (510 Townsend Street, San Francisco, CA 94103, USA). Stripe is certified to PCI DSS Level 1. Payment card numbers and full card details never pass through our servers and are not stored by us.

Stripe acts as our data processor within the meaning of Art. 28 GDPR. Processing is carried out in accordance with Stripe's privacy policy available at stripe.com/privacy.

Data transfers to the USA are carried out under Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Recipients of Personal Data

We do not sell your personal data to third parties. We share it only with:

• Stripe — payment processing
• Hostinger — server infrastructure provider (EU data centres)
• Public authorities — where required by law

7. Data Retention Periods

• User account — for the duration of the contractual relationship + 3 years after termination
• Bookings — 3 years from the date of the booking
• Billing records — 10 years (statutory obligation)
• Login logs — 90 days

8. Your Rights

Under GDPR you have the following rights, which you may exercise by e-mailing info@rezervly.eu:

• Right of access — to obtain confirmation of whether we process your data and a copy of it
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — under the conditions set out in Art. 17 GDPR
• Right to restriction of processing — in the cases set out in Art. 18 GDPR
• Right to data portability — to receive your data in a machine-readable format
• Right to object — to processing based on legitimate interests
• Right to withdraw consent — at any time, without affecting the lawfulness of processing carried out before withdrawal
• Right to lodge a complaint — with your national supervisory authority (in the Czech Republic: uoou.cz)

We will respond to your request without undue delay, and within 30 days at the latest.

9. Cookies

Information about cookies and how to manage them can be found in our Cookie Policy.

10. Security

We have implemented technical and organisational measures to protect your personal data: encrypted transmission (HTTPS/TLS), password hashing (bcrypt), least-privilege access controls, and regular data backups.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a notice on the platform. The current version is always available on this page.

12. Contact

Oliver Hlavnička
Company ID (IČO): 29521939
E-mail: info@rezervly.eu