Zásady ochrany osobných údajov

Tento dokument zatiaľ nie je preložený do vášho jazyka. Záväzné je anglické znenie nižšie.

This policy explains how [bude doplnené], [bude doplnené] ("we", "us") handles personal data in Rezdock. For questions or to use your rights, write to [email protected].

1. Two roles

• Businesses and their team members, and visitors to rezdock.com: we decide why and how your data is used. We are the controller, and this policy applies to you in full.
• Clients who book with a business through Rezdock: the business you book with is the controller of your data, and its own privacy notice applies. We process your data only on the business's behalf, under our Data Processing Agreement. If you want to see, correct or delete your data, contact the business; we help it answer. Section 8 explains what we do with your data.

2. What we collect, why, and on what basis

Card details are entered on Stripe's page and never reach us. Stripe is the reseller of the subscription and handles the payment as an independent controller under its own privacy policy.

We do not use your data for advertising, we do not sell it, and we do not share it for cross-context behavioural advertising.

3. Cookies

• rezdock.com (the website): no cookies and no third-party tracking. Any visit statistics are counted without cookies and without identifying you.
• The Rezdock app: strictly necessary cookies only, to keep you signed in and protect forms (session and security cookies). They do not need consent.
• Booking widget on a business's website: it sets no cookies. To stop automated bookings it may use Cloudflare Turnstile, which checks the browser without tracking cookies.

4. Who receives data

We use these service providers (sub-processors). Each is bound by a contract to protect the data and use it only for the service it provides to us:

We may also disclose data where the law requires it, or to protect our rights and the safety of users.

5. International transfers

Some providers are outside the European Economic Area. Where that is the case, transfers rely on the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework, together with additional safeguards where needed.

6. How long we keep data

• Account and business data: while the account exists, then 30 days after it is closed, then deleted.
• Invoices and accounting records: as long as tax law requires (usually up to 10 years).
• Sign-in records: 12 months. The audit log of administrative actions: 3 years. Longer only if needed for an ongoing investigation.
• Addresses that bounced or reported spam: as long as needed to avoid sending to them again.

7. Your rights

Under the GDPR you can ask us for access to your data, correction, deletion, restriction of processing, a copy in a portable format, and you can object to processing based on legitimate interest. You can also complain to the data protection authority: the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), www.uoou.gov.cz, or the authority where you live or work.

California residents (CCPA/CPRA): you have the right to know what personal information we collect and how we use it (this policy), to access, correct and delete it, and not to be discriminated against for using these rights. We do not sell or share personal information and do not use sensitive personal information beyond what is needed to provide the service. To use your rights, write to [email protected]; you may use an authorised agent. We verify requests by e-mail before acting on them.

We answer requests within one month (45 days under the CCPA), free of charge.

8. Clients of businesses: what we do with your data

When you book through a business's Rezdock page, the business receives your name, e-mail, phone number (if asked), any answers to its booking questions, your note, the booking details and, for visits at your place, your address. We store this on the business's behalf to:

• confirm your e-mail address with a one-time code (first booking at that business),
• show the booking to the business and its team,
• send you the confirmation, reminders and changes by e-mail, with a link to manage your booking,
• if the business connected a team member's Google, Outlook or Apple calendar, add the booking there (service, your name, phone and note); that calendar is the business's own account.

We record the IP address and time of a booking request to prevent abuse. We do not use clients' data for our own purposes and never contact you about anything other than your bookings. A client with no booking at a business for 24 months is anonymised automatically; the business can anonymise a client earlier at any time.

9. Security

Passwords are hashed, connections are encrypted (HTTPS), each business's data is kept separate, staff with access to the platform must use two-factor authentication, and every administrative action is logged. Details are in Annex 1 of the Data Processing Agreement.

10. Children

Rezdock is for businesses and is not directed at children under 16. Clients under 16 should book only with the consent of a parent or guardian.

11. Changes

When we change this policy, we update the date below; for significant changes we notify account holders by e-mail beforehand.

Effective from 07. novembra 2026.