Privacy Policy

Effective from 1 January 2025 • Last updated: 6. 10. 2026

1. Introduction

Rezervly ("we", "our platform") operates a booking system available at rezervly.eu. This document informs you about what personal data we process, why and how we process it, and what rights you have in connection with processing, in accordance with Regulation (EU) 2016/679 (GDPR).

2. Personal Data We Collect

a) Business owners (registered users):

• Full name / business name
• E-mail address
• Password (stored exclusively as a bcrypt hash — never in readable form)
• Business type, logo, business address
• IP address at login (for security purposes)

b) Customer data collected during booking:

• Customer's full name
• Customer's e-mail address
• Phone number
• Booking date, time, and notes

This data is processed on behalf of the business owner (Rezervly user), who acts as the data controller in relation to their customers.

3. Legal Basis for Processing

• Performance of a contract (Art. 6(1)(b) GDPR) — account registration and account management
• Legitimate interests (Art. 6(1)(f) GDPR) — platform security and fraud prevention
• Consent (Art. 6(1)(a) GDPR) — marketing emails (only if consent has been given)

4. How We Use Personal Data

• Providing and operating the booking platform
• Sending confirmation and notification emails
• Technical support and customer communication
• Platform security and fraud detection
• Fulfilment of legal obligations

5. Recipients of Personal Data

We do not sell your personal data to third parties. We share it only with:

• Hostinger — server infrastructure provider (EU data centres)
• Public authorities — where required by law

6. Data Retention Periods

• User account — for the duration of the contractual relationship + 3 years after termination
• Bookings — 3 years from the date of the booking
• Login logs — 90 days

7. Your Rights

Under GDPR you have the following rights, which you may exercise by e-mailing info@rezervly.eu:

• Right of access — to obtain confirmation of whether we process your data and a copy of it
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — under the conditions set out in Art. 17 GDPR
• Right to restriction of processing — in the cases set out in Art. 18 GDPR
• Right to data portability — to receive your data in a machine-readable format
• Right to object — to processing based on legitimate interests
• Right to withdraw consent — at any time, without affecting the lawfulness of processing carried out before withdrawal
• Right to lodge a complaint — with your national supervisory authority (in the Czech Republic: uoou.cz)

We will respond to your request without undue delay, and within 30 days at the latest.

8. Cookies

Information about cookies and how to manage them can be found in our Cookie Policy.

9. Security

We have implemented technical and organisational measures to protect your personal data: encrypted transmission (HTTPS/TLS), password hashing (bcrypt), least-privilege access controls, and regular data backups.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a notice on the platform. The current version is always available on this page.

11. Contact

Oliver Hlavnička
Company ID (IČO): 29521939
E-mail: info@rezervly.eu