Privacy policy
What data plejo processes, why, and how to change it.
Operator
Operator: Nichita Roilean, sole trader (fyzická osoba podnikající), Company ID (IČO) 22389032, VAT ID (DIČ) CZ0212231877, registered address Petržílkova 2705/32, 158 00 Prague, Czech Republic. Privacy contact: niro.dev.01@gmail.com
No account needed
You can reach any venue without an account and without telling us anything about yourself. An account is optional.
Your account and signing in
When you create an account, we store:
- your e-mail address;
- a hash of your password, if you set one; never the password itself;
- with Google sign-in, your Google account id and e-mail address; we do not store your Google name or photo;
- a name, only if you enter one in settings;
- an encrypted two-factor key, only if you turn two-factor sign-in on.
For each signed-in device we store its IP address, browser type and last activity, so you can see in settings where you are signed in and sign it out. Purpose: running your account. Legal basis: performance of a contract (GDPR art. 6(1)(b)).
Security
For every sign-in attempt we record the e-mail address, IP address, browser type and the outcome. After repeated failed attempts we lock the account for a while, and we limit attempts per address. We delete login-attempt records after 90 days. Legal basis: legitimate interest in keeping accounts safe (GDPR art. 6(1)(f)).
Retention and deleting your account
We keep your account data until you delete the account. You can do that yourself under Account settings → Delete account; its signed-in devices and sign-in records go with it. A sign-in expires at most 30 days after your last visit. If you cannot sign in, write to niro.dev.01@gmail.com.
Your position
The "Nearest" order and the distances are computed by your browser. The position is asked for only when you ask for it, and it never leaves your device.
Reporting a mistake
When you send us a correction, we process the message, and your e-mail if you give one, only to make that correction. Legal basis: legitimate interest in correct data (GDPR art. 6(1)(f)).
Who receives data
- Hetzner Online GmbH (Germany, EU) runs the servers the site and its database run on.
- niro-platform, a service of the same operator, sends the sign-in and verification e-mails (delivered by Amazon Web Services EMEA SARL through Amazon SES in the EU, Frankfurt) and receives reported mistakes.
- Google Ireland Limited, only if you choose to sign in with Google.
Measurement and diagnostics
Audience and advertising measurement run only with your consent; which services they are and which cookies they set is in the cookie policy. When something on the site breaks, we record the error; a replay of the session only with your consent.
Your rights
Access, rectification, erasure, restriction, portability and objection, and you can withdraw consent at any time through Cookie preferences in the footer. You may lodge a complaint with the Czech data protection authority (ÚOOÚ).