Back to Home

Privacy Policy

Last Updated: February 28, 2026

1. Data Controller

The data controller responsible for your personal data is:

  • Company: Bliss Prague s.r.o.
  • Address: Prague, Czech Republic
  • Email: privacy@blissprague.cz

2. Information We Collect

2.1 Information You Provide

  • Account information: Name, email address, phone number, password
  • Profile information: Avatar, address, city, country, language preferences
  • User content: Reviews, ratings, and feedback
  • Support requests: Messages through our support system

2.2 Automatically Collected

  • Location data: With your permission, to show nearby venues. We do not store location history by default.
  • Device information: Device model, OS, unique identifiers, browser type
  • Usage data: Pages visited, features used, search queries
  • Cookies: See our Cookie Policy

2.3 From Third Parties

  • Social login: When using Google or Apple sign-in, we receive your name, email, and profile picture

3. Legal Basis for Processing (GDPR Article 6)

  • Contract performance (Art. 6(1)(b)): To provide our Services, manage your account, and fulfill obligations to you
  • Consent (Art. 6(1)(a)): For analytics cookies, marketing communications, and location data. You can withdraw consent at any time.
  • Legitimate interests (Art. 6(1)(f)): For improving Services, fraud prevention, security, and customer support
  • Legal obligation (Art. 6(1)(c)): Where required by law

4. How We Use Your Information

  • Provide, maintain, and improve our Services
  • Personalize your experience and show relevant recommendations
  • Process and display your reviews and ratings
  • Send service-related notifications
  • Send marketing communications (only with consent)
  • Respond to support requests
  • Analyze usage trends
  • Detect and prevent fraud and security issues

5. Data Sharing

We do not sell your personal information. We may share data with:

  • Service providers: Hosting, email delivery, analytics providers acting as data processors
  • Analytics partners: Google Analytics (with your consent)
  • Legal authorities: When required by law or to protect our rights

6. International Data Transfers

Your data is primarily stored within the EEA. If transferred outside the EEA, we ensure adequate protection through European Commission adequacy decisions, Standard Contractual Clauses (SCCs), or other appropriate GDPR Chapter V safeguards.

7. Data Retention

  • Account data: Retained while active, plus 30 days after deletion
  • Reviews: Anonymized upon account deletion
  • Support tickets: 2 years after resolution
  • Analytics data: Aggregated and anonymized after 26 months

8. Your Rights Under GDPR

As a data subject in the EEA, you have the following rights:

  • Right of access (Art. 15): Request a copy of your personal data via "Download My Data" in profile settings
  • Right to rectification (Art. 16): Correct inaccurate data via your profile
  • Right to erasure (Art. 17): Request deletion via "Delete My Account" in profile settings
  • Right to data portability (Art. 20): Receive your data in machine-readable format (JSON)
  • Right to restrict processing (Art. 18): Request limitation of processing
  • Right to object (Art. 21): Object to processing for legitimate interests or marketing
  • Right to withdraw consent (Art. 7(3)): Withdraw consent at any time

Contact us at privacy@blissprague.cz or use features in your account settings to exercise these rights.

9. Children's Privacy

Our Services are not intended for individuals under 16. We do not knowingly collect data from children under 16. If we become aware that a child has provided data, we will delete it promptly. Contact privacy@blissprague.cz if you believe a child has provided us with data.

10. Data Security

We implement appropriate technical and organizational measures including encryption in transit (TLS/SSL), secure password hashing (bcrypt), access controls, and regular security assessments. While we strive to protect your data, no method is 100% secure.

11. Right to Lodge a Complaint

If you believe our processing violates the GDPR, you may lodge a complaint with:

  • Czech Data Protection Authority (UOOU)
  • Pplk. Sochora 27, 170 00 Praha 7, Czech Republic
  • Website: www.uoou.cz | Email: posta@uoou.cz

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and, where appropriate, by email.

13. Contact Us

  • Data Protection: privacy@blissprague.cz
  • General Support: support@blissprague.cz
  • Company: Bliss Prague s.r.o., Prague, Czech Republic