Privacy Policy

Last Updated: 05 May, 2025

This Privacy Policy explains how Fine Booking s.r.o. ("Finebooking", "we", "us", or "our") collects, processes, and protects your personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and other applicable Czech and EU laws. This document complements our Terms and Conditions.

1. Scope

This Privacy Policy applies to the use of our software-as-a-service application (https://app.finebooking.com) and our marketing website (https://finebooking.com). By using our services, you consent to the collection, use, and sharing of your personal information as described in this policy.

2. Roles and Responsibilities

We act as:

  • A data processor for any End-Customer data uploaded by our users for bookings or service records.
  • A data controller for user (business or freelancer) data collected when you register, use, or subscribe to the platform.

If you are an End-Customer using our system via a business, please refer to their privacy policy directly as they are the controller of your data.

3. Personal Data We Collect

3.1 Data from Users (Controllers)

  • First name, last name
  • Email address
  • Phone number
  • Billing information
  • OAuth authentication data (e.g., via Google)

3.2 Data from End-Customers (Processed on Behalf of Users)

  • First name, last name
  • Email address
  • Phone number
  • Booking data (e.g., event date and time)

We retain data only for as long as necessary to fulfill the purpose for which it was collected or to comply with legal obligations.

We process your data under one of the following legal bases:

  • Article 6(1)(a) GDPR – based on your consent (e.g., for marketing emails or cookies)
  • Article 6(1)(b) GDPR – for performance of a contract
  • Article 6(1)(c) GDPR – to comply with legal obligations
  • Article 6(1)(f) GDPR – based on our legitimate interest (e.g., to improve services)

5. Cookies and Tracking Technologies

We use cookies and similar tools, including Google Analytics, Google Tag Manager, and Hotjar, to understand user behavior and improve functionality. You will be asked to provide explicit consent for non-essential cookies when visiting our websites.

Types of Cookies:

  • Essential cookies: Required for service functionality.
  • Analytics cookies: Measure performance and usage.
  • Marketing cookies: Help us show you relevant content.

You may withdraw cookie consent at any time by adjusting settings in the cookie banner.

6. Email Communications

  • Transactional emails (e.g., onboarding or feature guides) are sent under contractual necessity.
  • Marketing emails are sent only with your prior consent. You can unsubscribe at any time via the link in the email.

7. Subprocessors and International Transfers

We work with trusted subprocessors, including:

  • Hotjar (Behavioral analytics)
  • Stripe (Payments)
  • Twilio (SMS)
  • AWS (Hosting)
  • Google (Analytics, OAuth)

Some subprocessors are located outside the EU. Where applicable, we ensure safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions.

8. Data Retention

We store:

  • User data for the duration of your account and up to 10 years for tax/accounting purposes.
  • End-Customer data for up to 30 days after termination, upon user request.

9. Security Measures

We apply appropriate technical and organizational safeguards, including data encryption, access restrictions, and regular backups.

10. Your Rights

You have the following rights under the GDPR:

  • Right of access (Art. 15)
  • Right to rectification (Art. 16)
  • Right to erasure (Art. 17)
  • Right to restriction (Art. 18)
  • Right to object (Art. 21)
  • Right to data portability (Art. 20)
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

To exercise your rights, contact us at: support@finebooking.com.

11. Data Breaches

In the event of a personal data breach likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or notices on our website. Continued use of the service constitutes your acceptance of the updated policy.

13. Supervisory Authority

If you believe your data is being processed unlawfully, you may contact:

Úřad pro ochranu osobních údajů

Pplk. Sochora 27, 170 00 Praha 7

Email: posta@uoou.cz

Tel: +420 234 665 125

For any questions or concerns about this Privacy Policy, contact us at: support@finebooking.com.