1. Data controller
The controller of personal data processed in the online service at vizitly.cloud and related services (the Service) is the operator of the Vizitly platform. For privacy matters you may contact the email address shown on the Contact page in the Service.
2. What data we process
Depending on how you use the Service, we may process among others: business account email and password (hash), company or property profile data (name, address, phone, location, gallery), staff, services and lodging units entered by the owner, the guest’s phone number, name and optional email when booking a visit or stay, SMS confirmation content, billing data and payment identifiers (Stripe), deposit information for lodging bookings, technical logs (e.g. IP address, timestamps), cookies required for the Service to work and — if enabled — an anti-spam verification token (e.g. Cloudflare Turnstile).
3. Purposes and legal bases (GDPR)
We process data to provide booking, marketplace and calendar services (Art. 6(1)(b) GDPR — contract performance), commission and payment settlement (Art. 6(1)(b) and (c)), claims and security (Art. 6(1)(f) — legitimate interest), own-service marketing only with consent or under direct marketing rules (where used), and anonymised statistics (legitimate interest). A lodging deposit or other payments may be collected by bank transfer to the business account or via Stripe, according to the property setup and payment-provider terms.
4. Recipients
Data may be entrusted to processors acting on the controller’s instructions (e.g. hosting, database, email and SMS providers, Stripe, Cloudflare), under processing agreements where required. The business or property sees its guests’ booking data in the dashboard to deliver the service or stay.
5. Retention
We keep data while the Service is used and for periods required by law (e.g. tax and accounting), then delete or anonymise it unless longer archiving is required.
6. Your rights
You have among others the rights of access, rectification, erasure, restriction, portability (where applicable), objection to processing based on legitimate interest, and the right to lodge a complaint with a supervisory authority. For guest booking data, the business or property may act as a separate controller toward its customers — we will point you to the right contact if needed.
7. Cookies
The Service uses cookies and similar technologies required for operation (session, security, language preferences, remembering consent). Details and acceptance are shown in the cookie banner. Analytics or marketing cookies are used only with consent, if enabled.