Privacy policy

This Privacy Policy explains how PREVIO s.r.o. processes personal data in its capacity as an independent controller. It applies in particular to prospective customers, clients, their contact persons and users of Previo.app, website visitors, and persons who communicate with us.

It does not apply to personal data of hotel guests, customers and other persons entered by a client into Previo.app or other ordered services. The client, usually the accommodation establishment, is the controller of such data, and PREVIO processes the data on its instructions. The terms governing this processing form part of the Agreement and the General terms and conditions. If you are a guest of an accommodation establishment and wish to exercise your rights, you should primarily contact that establishment.

Who is the controller

PREVIO s.r.o., Company ID No. 259 75 234, with its registered office at Kolbenova 882/3a, 190 00 Prague 9 – Vysočany, Czech Republic (“PREVIO”).

Contact for questions and the exercise of rights: gdpr@previo.cz, tel. +420 251 613 924.

What data we process and why

Business negotiations, contracting and billing

We process identification and contact details, job title, information about the represented company, communications, contractual data, and accounting or payment information. We need this data to respond to enquiries, enter into and administer contracts, provide services, issue invoices, and protect legal claims.

The legal basis is taking steps before entering into a contract or performing a contract where the contracting party is an individual, our legitimate interests in communicating with clients and properly managing business relationships, and compliance with legal obligations, particularly accounting and tax obligations.

Personal data contained in contracts, invoices, accounting records and other documents relating to our business relationships are retained for the period required by applicable legal regulations and, where appropriate, for a longer period where reasonably necessary for the protection of our legitimate interests, including the establishment, exercise or defence of legal claims and the maintenance of appropriate records of our contractual relationships.

Retention periods may therefore vary depending on the nature of the document, the applicable legal requirements and the purposes for which the information is retained.

User accounts and security

We process the user’s name, business contact details, role and permissions, account and login data, IP address, device data, operational and security logs, and the content of support requests. We use this data to create and administer accounts, provide support, protect the system and data, prevent misuse, resolve incidents, and protect legal claims.

The legal basis is performance of the contract or our legitimate interest in providing secure and reliable services and, where necessary, compliance with legal obligations.

We retain account data while the account is in use and thereafter only for as long as necessary for security, auditing and the protection of legal claims. We retain ordinary operational and security logs for no more than twelve (12) months; we retain them longer only where needed to resolve an incident or dispute or comply with a legal obligation. We retain support records for the duration of the contractual relationship and the applicable limitation period thereafter.

Telephone and Electronic Communications

When you communicate with us, we process contact details and the content of messages or requests. We record telephone calls and inform callers before recording begins. We use communications and recordings to document and handle requests, maintain the history and continuity of customer support, monitor support quality, resolve incidents and disputes, and protect legal claims. We retain these records for as long as reasonably necessary for these purposes, taking into account the duration of our business relationship, the relevance of the communication to the customer’s support history, applicable limitation periods, ongoing incidents or disputes, and any applicable legal obligations.

The legal basis is performance of the contract and our legitimate interest in properly handling requests, monitoring quality and protecting our rights. For general analysis and service improvement, we use only data that has been irreversibly anonymised.

Marketing Communications

We may send clients information about our own related services, news and offers on the basis of our legitimate interest and within the rules governing marketing communications. We send marketing communications to other persons on the basis of consent where required. You may opt out at any time using the link in the message or by contacting info@previo.cz.

We use contact details for marketing until consent is withdrawn or an objection is made. We may then retain limited information about the opt-out to ensure that no further communications are sent and to demonstrate compliance with our obligations.

Websites and Cookies

When you visit our website, we may process your IP address and information about your device, browser, visit and use of the website. We use essential technologies to operate and secure the website. We use analytics and marketing technologies according to your consent settings. Details, retention periods and information on changing your preferences are set out in our Cookie Policy.

Recruitment

If you apply for a job, we process your identification, contact and professional details to assess your application, communicate with you and manage the recruitment process. The legal basis is taking steps at your request prior to entering into an employment contract and, after the recruitment process has ended, our legitimate interest in documenting the recruitment process and protecting our rights in connection with potential claims or disputes.

We retain recruitment data for the duration of the recruitment process and thereafter for the period reasonably necessary to protect these interests, taking into account applicable local laws and limitation periods. We retain your data for consideration for future job opportunities only with your consent.

Where we obtain data and whether you must provide it

We obtain data directly from you, from the client or employer you represent, through your use of our services, from public registers and, where applicable, from a business partner who forwarded your request to us.

You must provide the data required to enter into and perform a contract, create an account, handle a support request or comply with a legal obligation; without it, we may be unable to provide the service or handle the request. Providing data for marketing purposes is voluntary.

Who we share data with

We do not sell personal data. To the extent necessary, it may be processed by our vetted service providers, particularly in the following areas:

• cloud operations, hosting, backups and cybersecurity
• email, customer support, CRM and business communications
• accounting, billing and payment services
• analytics and marketing services according to your consent settings
• legal, tax and other professional advisers

We may also disclose data to public authorities where required by law and to other persons where necessary to protect our rights. We require service providers to comply with appropriate confidentiality and data protection obligations.

Transfers outside the European Economic Area

We seek to process data primarily within the European Economic Area. Where it must be disclosed outside the EEA, we do so only in compliance with the GDPR, particularly on the basis of an adequacy decision, standard contractual clauses or another permitted safeguard. Information about the specific safeguard used is available on request.

How we protect data

We use appropriate technical and organisational measures reflecting the nature of the data and the risks of processing. Access is limited to persons who need it for their work and are bound by confidentiality obligations. We regularly review and adjust our security measures. For security reasons, we do not disclose detailed technical configurations.

Your rights

Under the GDPR, you have a number of rights in relation to the processing of your personal data. The availability of individual rights depends on the circumstances and, in particular, on the legal basis and purpose of the relevant processing.

Subject to the conditions set out in the GDPR, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request erasure of your personal data where the conditions for erasure are met;
• request restriction of processing;
• receive personal data you have provided to us in a structured, commonly used and machine-readable format and transmit those data to another controller, where the processing is based on your consent or on a contract and is carried out by automated means;
• object to processing based on our legitimate interests. If you object, we will cease such processing unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims;
• object at any time to the processing of your personal data for direct marketing purposes;
• withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal; and
• lodge a complaint with the competent data protection supervisory authority.

Send your request to gdpr@previo.cz. Before responding, we may reasonably verify your identity. If the request concerns data of a hotel guest entered by a client into Previo.app, we will forward it to the relevant client or ask you to contact that client directly.

Automated decision-making

We do not use personal data for decisions based solely on automated processing that produce legal effects or similarly significantly affect you, unless we expressly inform you otherwise in advance.

Complaints and changes to this policy

If you have concerns about the processing of your data, please contact us first at gdpr@previo.cz. You also have the right to lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, posta@uoou.gov.cz.

We may update this Policy from time to time. The current version will always be published on our website.

This Policy is effective from 1 November, 2026.