Legal Documents
Privacy Policy
Information about personal data processing in accordance with GDPR
1. Data Controller
The data controller is EroLounge s.r.o., based in the Czech Republic. Contact: info@erolounge.cz.
2. Purpose of Processing
- Service Provision — registration, account management, profile display in catalog.
- Communication — sending account information, technical support.
- Payment Operations — processing credit payments, invoicing.
- Security — protection against misuse, identity verification.
- Service Improvement — platform usage analysis, statistics.
3. Categories of Processed Data
- Identification Data — name, email, phone number.
- Profile Data — service description, photographs, location.
- Payment Data — transaction history, credit balance.
- Technical Data — IP address, browser type, cookies.
4. Legal Basis for Processing
- Contract Performance — Art. 6(1)(b) GDPR.
- Legitimate Interest — security, analytics (Art. 6(1)(f) GDPR).
- Consent — marketing, third-party cookies (Art. 6(1)(a) GDPR).
- Legal Obligation — tax obligations (Art. 6(1)(c) GDPR).
5. Data Retention Period
- Active users — for the duration of the account.
- After account deletion — max. 3 years.
- Payment data — 10 years (tax obligations).
- Cookies and logs — max. 12 months.
6. Your Rights
- Right of Access — information about processed data.
- Right to Rectification — correction of inaccurate data.
- Right to Erasure — deletion of data ("right to be forgotten").
- Right to Restriction of Processing.
- Right to Data Portability — data in machine-readable format.
- Right to Object.
- Right to Withdraw Consent.
Contact: info@erolounge.cz. We will respond within 30 days.
7. Data Security
We use encryption (HTTPS), password hashing, regular backups and restricted data access.
8. Supervisory Authority
You may file a complaint with the Office for Personal Data Protection (UOOU), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
Effective from January 1, 2026 | EroLounge s.r.o. | info@erolounge.cz
