Privacy Policy

KickBooker is operated by Planesta s. r. o., company ID 57050376, with its registered office at Tomášikova 12573/50E, 831 04 Bratislava – Nové Mesto, Slovakia. Planesta is responsible for the personal data it processes to operate the platform, manage accounts, respond to enquiries and protect the service. Contact us at info@planesta.sk.

The workspace or independent provider organising your activity also determines how it uses information to provide its own services. For data entered and managed on a workspace’s behalf, Planesta provides the platform under that workspace’s instructions. This notice does not replace the organiser’s own privacy information. We can help identify the relevant organiser when you contact us.

Account information includes your identifier, email, name, profile image when provided, language preference, workspace memberships and authentication/session information. We receive it from you, an authorised inviter or, if you choose that method, Google.

Bookings and participant records contain the information supplied in the relevant form: names, email, phone, activity, room, date, duration, attendance and registration status. Participant administration can also include date of birth and municipality. Provider profiles and uploaded images contain the information their authors choose to provide. Public profiles and activities are visible according to their publishing settings. Do not put diagnoses or other sensitive information into general booking or contact fields.

We also process orders, credit movements, payment identifiers and statuses, enquiries, transactional email contents and delivery records. Operational and security records can include the acting user, time, action, browser/device information and technical identifiers. IP addresses and email addresses may be processed to limit abusive requests. Where door access is configured, attempts to open a door and their results are recorded.

Google sign-in is optional. When you choose it, Google supplies Supabase, our authentication provider, with your Google account identifier, email and verification status, name and profile-image information where available. We use this basic identity to authenticate you, identify your KickBooker account, display your profile and associate your actions with that account. These data are stored with the account through Supabase and may appear to authorised workspace users where needed for the service. Signing in does not by itself publish your profile.

KickBooker requests only basic identity scopes: openid, email and profile. It does not request access to your Gmail messages, Google Drive files, contacts or Google Calendar. You enter your Google password with Google, not KickBooker. Session credentials are used to maintain your authenticated session; we do not claim that signing in involves no stored tokens. Google identity data are not used by KickBooker for advertising or sold to third parties.

You can remove the connection in your Google Account settings. Removing it stops that connection but does not automatically erase your existing KickBooker account, bookings or financial history. Contact us to request a review of deletion or to arrange another available way to access your account.

We use data needed to create and operate your account, provide requested bookings and workspace services, process payments and send related confirmations. Where you are a party to the relevant service agreement, this processing is necessary to perform it or take steps you request before entering it (GDPR Article 6(1)(b)).

Protecting accounts, preventing abuse, investigating errors, maintaining an audit trail and responding to ordinary enquiries serve our legitimate interests in running a reliable, secure service (Article 6(1)(f)), balanced against your rights. Records required by applicable accounting, tax or other laws are processed to meet those obligations (Article 6(1)(c)). If a separate optional use requires consent, we request it for that use; choosing Google sign-in is not blanket consent to unrelated processing.

Without the information needed for a particular account, booking or payment, we may be unable to provide that function. Availability, capacity and payment status are handled using the service’s booking rules. We do not use Google profile data to make solely automated decisions producing legal or similarly significant effects about you.

Information is available to Planesta personnel and authorised workspace administrators or providers as needed for their roles. Service suppliers process data needed for their functions: Supabase for authentication, the database and file storage; Vercel for hosting and running the website; configured email-delivery providers for transactional messages; and Google when you choose Google sign-in.

If you pay online, Stripe receives payment and order information such as customer email, amount, currency and booking identifiers. Some checkout items include the participant’s name. KickBooker records transaction results and may receive payment-event payloads; it is not a service for storing your full card number or card security code. Stripe also processes information under its own applicable terms.

Optional door integrations communicate with the configured device service, such as Nuki or SwitchBot, to carry out authorised access actions. Not every workspace uses every integration. Data may also be disclosed when required by law or necessary to establish, exercise or defend legal claims. The privacy information of the main service providers is linked below.

Cloud hosting, authentication, payments and email delivery can involve processing outside the European Economic Area, including by providers and their subprocessors. Selecting a European database region does not mean that all support, payment or other processing occurs only in the EEA.

Applicable provider data-processing terms govern those services and provide transfer safeguards, including European Commission standard contractual clauses where required, or an applicable adequacy decision. Ask info@planesta.sk for information about the safeguards relevant to your data or how to obtain a copy. We do not describe the service as EU-only storage.

Account information is kept while needed to provide and manage the account. For bookings, credits, payments, enquiries and related history, the relevant criteria are completion of the service, settlement of payments or refunds, applicable accounting and other legal obligations, and the period needed to resolve an outstanding complaint or legal claim. These criteria can require keeping specific records after access to a workspace ends.

The separate workspace operational-history records are assigned a 12-month expiry and scheduled for cleanup. This is not a 12-month deadline for every business, financial or door-access record. Limited technical cleanup also exists for expired guest-verification records and old payment-event payloads; it does not erase the related bookings or financial ledger. Provider logs and backups have their own applicable retention and replacement cycles.

Cancelling a booking, archiving a participant or disabling membership is not account erasure and does not remove all personal fields. Deletion requests are assessed individually against the purposes and obligations above. We remove or anonymise data when there is no continuing reason to retain it; this is not a promise of instant deletion from every system or backup. Contact us for the retention criteria applying to a specific record.

KickBooker uses browser storage for sign-in sessions, your language, the selected workspace and temporary return or verification information. Some values persist between visits; others last for a browser tab or a particular flow. Clearing this storage may sign you out, reset preferences or interrupt verification. External services you visit, such as Google or Stripe, use their own technologies under their privacy information.

Access controls, authenticated requests and role checks limit access to platform data. Operational events support security and troubleshooting; they are not a promise that no activity is logged. No method of transmission or storage can guarantee absolute security. Keep your credentials private and contact us if you suspect unauthorised access.

Subject to applicable law, you can request access, correction, erasure, restriction or portability of your personal data. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. These rights are not absolute; for example, a legal record-keeping obligation can prevent immediate erasure of a particular transaction.

You may complain to your competent supervisory authority. In Slovakia this is the Office for Personal Data Protection of the Slovak Republic; its information and complaint procedure are linked below. You do not have to contact us before exercising that right.

Email info@planesta.sk from the address associated with your account where possible. Tell us what you need and identify the relevant workspace or booking if the request concerns one. Do not send passwords, sign-in codes or full payment-card details. We may need proportionate information to verify your identity before disclosing or changing protected data.

We respond within the periods required by applicable law, normally within one month for GDPR rights requests. If a lawful extension is needed, we explain it. If another workspace or provider is responsible for the processing concerned, we identify that party or help route your request appropriately. Removing a Google connection and requesting deletion from KickBooker are separate actions.

We update this notice when the service or relevant processing changes and show the updated date on this page. If a change requires a separate notice or consent, we provide it as required. This page describes KickBooker and does not change an activity’s booking, payment, cancellation or door-access rules.