Privacy policy
Information on personal-data processing under the GDPR and Act No. 110/2019 Coll.
The final wording is being prepared with a lawyer. This is a working draft reflecting the operator's intent per product specification — not a legally binding document.
1. Data controller
The data controller is Vistario. For questions regarding personal-data processing, contact the operator at the e-mail listed in the Contact section.
2. Scope of processed data
We process data you provide to us (registration, listing creation, contact forms), data generated by using the portal (IP address, device, cookies), and — for advertisers — data necessary for identification per the terms of service.
3. Legal basis (GDPR)
We process data based on: contract performance (account and service operation), legitimate interest (security, prevention of abuse), legal obligation (accounting, archiving), and consent (marketing, optional cookies).
4. Cookies and analytics
We use technical cookies necessary for portal operation, analytical cookies for traffic measurement, and marketing cookies only after explicit consent. Details and settings are in the Cookies section.
5. Processors and data transfers
We cooperate with these processors: Hetzner (hosting and object storage, EU), Resend (transactional e-mail), Cloudflare (CDN, attack protection). For advertiser payments we will use a certified provider (Stripe). All processors have a data-processing agreement in place.
6. Rights of the data subject
You have the right to: access data, rectification and erasure, restriction of processing, portability, object to processing based on legitimate interest, withdraw consent, and lodge a complaint with the Data Protection Authority (ÚOOÚ).
7. Transfers outside the EU/EEA
We primarily process data within the EU. Exceptionally, for transfers outside EU/EEA we ensure adequate protection via Standard Contractual Clauses or another GDPR-compliant mechanism.
8. Retention period
We retain data for the duration of the contractual relationship and afterward for the period necessary to fulfil legal obligations (typically 10 years for accounting documents). After these periods data is erased or anonymised.
9. Contact for personal-data matters
Questions, data-subject-rights requests, complaints — write to the e-mail in the Contact section. We will respond without undue delay, no later than 30 days.