1. Introductory Provisions
1.1 This Privacy and Cookie Policy (the “Policy”) governs the manner, scope and purpose of the processing of personal data of natural persons by Venuvia s. r. o. (“Meetnity” or the “controller”) in connection with operating the Meetnity online platform available at www.meetnity.com (the “Platform”) and providing services under the Meetnity General Terms and Conditions (the “Terms”), as well as the use of cookies and similar technologies on the Platform.
1.2 With regard to the personal data processed under this Policy, Meetnity is the controller within the meaning of Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”) and of Act No. 18/2018 Coll. on Personal Data Protection, as amended.
1.3 This Policy applies to the personal data of: (a) Customers and Event Agencies who have created an Account or sent an Inquiry through the Platform, (b) Venue Owners who have created an Account through the Platform, (c) visitors to the Platform’s website without registration, and (d) contact persons of Venue Owners and Event Agencies that are legal entities. Capitalized terms not defined in this Policy have the meaning given to them in the Terms.
1.4 Meetnity is not required to appoint a data protection officer (DPO) under Article 37 GDPR and has not appointed one.
1.5 Meetnity’s contact details for matters relating to personal data protection and the use of cookies, including the exercise of rights under Article 5 of this Policy: email help@meetnity.com, tel.: +421 949 255 757.
1.6 Meetnity does not obtain the data of contact persons under Article 1.3(d) directly from them, but from the Venue Owner or Event Agency that provided them upon registration or while using the Platform, namely their first name, surname, job title, email address and phone number. The Venue Owner and the Event Agency must inform their contact person of this processing.
2. Categories of Personal Data and Purposes of Processing
2.1 Account registration and management (Customer, Event Agency, Venue Owner). When an Account is created, Meetnity processes the first name and surname, email address, phone number and password, which is stored in encrypted form. The legal basis is the performance of a contract under Article 6(1)(b) GDPR, which the User concludes with Meetnity by registering an Account.
2.2 Phone number verification via SMS. Upon registration, or for other actions requiring identity verification, such as a password change, Meetnity sends a one-time verification code by SMS to the User’s phone number, using the third-party service BulkGate s.r.o. The legal basis is the performance of a contract under Article 6(1)(b) GDPR and Meetnity’s legitimate interest in protecting Accounts against misuse under Article 6(1)(f) GDPR.
2.3 Billing and payment data. To the extent set out in the Terms, Meetnity processes the billing data of the Venue Owner, the Event Agency and the Customer for paid packages, in particular the business name, Company ID (IČO), Tax ID (DIČ) or VAT ID and billing address, and in the case of the Venue Owner also the bank account number for the purpose of paying out unused Credit under Article 5.13 of the Terms. Payments through the Platform are processed by the GoPay payment gateway, which, as an independent controller, processes payment data, such as payment card details, to the extent necessary to make the payment; Meetnity neither obtains nor stores this payment data. The legal basis is the performance of a contract under Article 6(1)(b) GDPR and compliance with Meetnity’s legal obligations, in particular accounting and tax obligations, under Article 6(1)(c) GDPR.
2.4 Inquiry content. When an Inquiry is sent, Meetnity processes the data provided by the Customer or Event Agency in the Inquiry, in particular the type of event, number of guests, requested date, budget and other additional information, and after the Inquiry has been accepted by the Venue, makes the contact details of the Customer or Event Agency available to the Venue for the purpose of mutual communication under Article 4.5 of the Terms. The legal basis is the performance of a contract under Article 6(1)(b) GDPR.
2.5 Venue profile and photos. Meetnity processes the data and photos that the Venue Owner has uploaded to the Venue profile for the purpose of publishing it on the Platform under Article 6 of the Terms. If a photo depicts a natural person, the Venue Owner is responsible for obtaining that person’s consent to publication within the meaning of Article 6.4 of the Terms. The legal basis for processing by Meetnity is the performance of a contract under Article 6(1)(b) GDPR.
2.6 Reviews. Meetnity processes the content of a review and the name or nickname of its author for the purpose of publishing it on the Venue profile under Article 7 of the Terms. The legal basis is the legitimate interest of Meetnity and Venues in providing verified references within the Platform under Article 6(1)(f) GDPR.
2.7 Handling complaints and communication with Users. Meetnity processes data provided by the User when communicating with Meetnity, in particular when filing a complaint under Article 9 of the Terms or in other correspondence to help@meetnity.com. The legal basis is compliance with legal obligations under Article 6(1)(c) GDPR, in particular under Act No. 108/2024 Coll. on Consumer Protection, and the performance of a contract under Article 6(1)(b) GDPR.
2.8 Platform security and operation. Meetnity processes login and operational data, such as login records and IP addresses, for the purpose of securing the Platform and preventing fraudulent conduct and circumvention of Credit payment under Article 3.8 of the Terms. The legal basis is Meetnity’s legitimate interest in the secure operation of the Platform under Article 6(1)(f) GDPR.
2.9 Providing the personal data under Article 2.1 of this Policy is a contractual requirement necessary for creating an Account and concluding the Terms; without it, an Account cannot be created and the Platform’s services cannot be used. Providing other data, such as Inquiry content or a Venue profile, is voluntary but necessary to use the relevant Platform feature to which the data relate.
2.10 Marketing use of Venue photos. If a photo published in a Venue profile depicts a natural person, its use for Meetnity’s marketing purposes under Article 6.4.2(b) of the Terms (in particular in paid advertising) is based on Meetnity’s legitimate interest in promoting the Platform under Article 6(1)(f) GDPR; in this context, Meetnity has carried out a balancing test between this interest and the rights of the data subject. The data subject has the right to object to such processing under the procedure in Article 5.5 of this Policy.
2.11 Internal chat. Meetnity processes the content of communication between the Customer and the Venue Owner in the Platform’s internal chat for the purpose of enabling this communication on the basis of the performance of a contract under Article 6(1)(b) GDPR, and for the purpose of handling complaints, reports and disputes under Articles 9 and 14 of the Terms on the basis of Meetnity’s legitimate interest under Article 6(1)(f) GDPR. Meetnity accesses the content of this communication only to the extent necessary to handle a specific complaint, content report or dispute.
2.12 Newsletter. If a data subject subscribes to tips and news via the form in the Platform’s footer, Meetnity processes their email address for the purpose of sending news and inspiration from Meetnity. The legal basis is the data subject’s consent under Article 6(1)(a) GDPR, which they may withdraw at any time via the unsubscribe link in every email or at help@meetnity.com.
3. Cookies and Marketing Tools
3.1 We use the following categories of cookies on the Platform: (a) necessary cookies, which are required for the basic functionality of the Platform, in particular for logging in and maintaining the User’s session, securing the Platform and storing the User’s choice in the cookie banner; the legal basis is Meetnity’s legitimate interest in the proper and secure operation of the Platform under Article 6(1)(f) GDPR or the performance of a contract under Article 6(1)(b) GDPR, and no consent is required for their use, (b) analytical cookies, which make it possible to evaluate traffic and how the Platform is used in order to improve it, and (c) marketing cookies, which make it possible to display targeted advertising for the Platform on other websites and to evaluate the effectiveness of marketing campaigns; the legal basis for the use of analytical and marketing cookies is the User’s consent under Article 6(1)(a) GDPR.
3.2 Consent to the use of analytical and marketing cookies is freely given, specific and informed; the User gives it separately for each of these categories via the cookie banner on their first visit to the Platform. The User may withdraw their consent at any time as easily as it was given, by changing the cookie settings available on the Platform; withdrawal of consent does not affect the lawfulness of the use of cookies based on consent given before its withdrawal. Refusing or withdrawing consent to analytical or marketing cookies does not affect the ability to use the Platform and its basic features.
3.3 The following third-party tools in particular are deployed on the Platform: (a) Google Analytics 4 and Google Tag Manager, provided by Google Ireland Limited, for analysing traffic and how the Platform is used, (b) Google Ads, provided by Google Ireland Limited, for displaying and evaluating the effectiveness of advertising for the Platform, and (c) Meta Pixel, provided by Meta Platforms Ireland Limited, for displaying and evaluating the effectiveness of advertising for the Platform on Facebook and Instagram. These tools use analytical and marketing cookies under Article 3.1(b) and (c) of this Policy.
3.4 In connection with the use of the tools under Article 3.3, personal data may be transferred to the United States of America, specifically to Google LLC and Meta Platforms, Inc. This transfer is safeguarded by the relevant company’s certification under the EU-U.S. Data Privacy Framework pursuant to the European Commission’s adequacy decision, or by standard contractual clauses under Article 46 GDPR approved by the European Commission.
4. Data Retention Period
4.1 Meetnity retains personal data associated with the Account of a Customer who is a consumer for as long as the Account exists and for a further 3 years after it is closed, corresponding to the general limitation period under Section 101 of the Civil Code. Meetnity retains personal data associated with the Account of a Venue Owner or Event Agency, including data related to the contractual relationship established by the Terms, for as long as the Account exists and for a further 4 years after it is closed, corresponding to the general limitation period under Section 397 of the Commercial Code. In all cases, if special legislation or the need to establish or defend Meetnity’s legal claims, such as an ongoing complaint or dispute under Article 9 or 12 of the Terms, requires the data to be retained for longer, Meetnity retains them until the relevant proceedings end or the limitation period for the related claim expires.
4.2 Meetnity retains invoices and accounting documents for the period required by generally binding legislation, in particular Act No. 431/2002 Coll. on Accounting and Act No. 222/2004 Coll. on Value Added Tax, usually 10 years from the end of the tax period to which they relate.
4.3 Data processed on the basis of consent, i.e. analytical and marketing cookies under Article 3.1(b) and (c) of this Policy, are retained by Meetnity or the relevant tool provider under Article 3.3 for as long as the consent is valid, but no longer than the period set in the settings of the relevant tool, which is available to the User in the cookie banner, until the User withdraws consent under Article 3.2. Necessary cookies under Article 3.1(a) are retained for as long as necessary to fulfil their purpose, usually for the duration of the User’s session or for the usual validity period of the relevant type of cookie.
4.4 Reviews remain published on the Venue profile for as long as the Venue is active on the Platform, unless the Customer exercises the right to erasure under Article 5.4 of this Policy.
4.5 Meetnity retains the email address processed for the purpose of sending the newsletter under Article 2.12 of this Policy until consent is withdrawn.
5. Rights of the Data Subject
5.1 The data subject has the right to request access to their personal data from Meetnity under Article 15 GDPR, i.e. confirmation as to whether their personal data are being processed and, if so, access to those data and to information about the processing.
5.2 The data subject has the right to have inaccurate personal data rectified or incomplete personal data completed under Article 16 GDPR; data in the Account can also be corrected by the data subject in the Account settings after logging in.
5.3 The data subject has the right to restriction of processing of their personal data under Article 18 GDPR, in particular if they contest the accuracy of the data, the processing is unlawful, or Meetnity no longer needs the data but the data subject requires them to establish a legal claim.
5.4 The data subject has the right to erasure of their personal data under Article 17 GDPR if the purpose of processing no longer applies, the data subject has withdrawn the consent on which the processing was based, or they object to the processing and there are no overriding legitimate grounds for continuing it. Meetnity may refuse or postpone erasure to the extent that the processing of personal data is necessary to comply with a legal obligation of Meetnity, in particular the archiving obligation under Article 4.1 or 4.2 of this Policy, or for the establishment, exercise or defence of Meetnity’s legal claims, for example while a complaint under Article 9 of the Terms is being handled or a dispute under Article 12 of the Terms is ongoing.
5.5 The data subject has the right to object under Article 21 GDPR to the processing of their personal data based on Meetnity’s legitimate interest under Article 6(1)(f) GDPR; in the case of processing for direct marketing purposes, the data subject may object at any time and without giving a reason, and following such an objection Meetnity will no longer process the personal data for that purpose.
5.6 The data subject has the right to data portability under Article 20 GDPR with respect to personal data they have provided to Meetnity and that are processed by automated means on the basis of consent or a contract, i.e. the right to receive those data in a structured, commonly used and machine-readable format and the right to have them transmitted to another controller.
5.7 If the processing of personal data is based on consent, including consent to analytical and marketing cookies under Article 3.2 of this Policy, the data subject has the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent given before its withdrawal.
5.8 The data subject has the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava, www.dataprotection.gov.sk, in particular if they believe that the processing of their personal data infringes the GDPR or the Personal Data Protection Act.
5.9 The data subject may exercise the rights under this Article in writing or electronically using Meetnity’s contact details set out in Article 1.5 of this Policy. Meetnity will provide the data subject with information on the action taken on their request without undue delay and in any event within one month of receiving the request; where necessary, taking into account the complexity and number of requests, this period may be extended by a further two months, of which Meetnity will inform the data subject.
6. Recipients and Processors
6.1 Meetnity makes personal data available to third parties only to the extent necessary to achieve the purposes set out in Articles 2 and 3 of this Policy, in particular to the following recipients and processors: (a) WebSupport, s.r.o., as the provider of hosting and server infrastructure for the Platform, (b) GoPay, as the payment gateway provider for processing payments under Article 2.3 of this Policy, (c) BulkGate s.r.o., as the provider of the service for sending verification SMS messages under Article 2.2 of this Policy, (d) Google Ireland Limited, as the provider of Google Analytics 4, Google Tag Manager and Google Ads under Article 3.3 of this Policy, (e) Meta Platforms Ireland Limited, as the provider of Meta Pixel under Article 3.3 of this Policy, (f) the Venue to which the contact details of the Customer or Event Agency are made available after acceptance of an Inquiry, to the extent set out in Article 4.5 of the Terms, (g) public authorities, courts and law enforcement authorities, where they require the data to be disclosed under generally binding legislation, (h) Meetnity’s tax, accounting and legal advisers, to the extent necessary for them to provide their services to Meetnity, and (i) Sendinblue SAS (Brevo), as the provider of the newsletter service under Article 2.12 of this Policy.
6.2 Meetnity reserves the right to use additional processors in the future and will inform data subjects of this by updating this Policy under Article 9.2.
6.3 Meetnity has concluded a data processing agreement under Article 28 GDPR with all processors that process personal data on its behalf, which obliges the processor to process personal data only on Meetnity’s instructions and in accordance with the GDPR.
7. Security of Personal Data
7.1 Meetnity has adopted appropriate technical and organisational measures to protect personal data against loss, destruction, misuse, unauthorised access or other unlawful processing, corresponding in particular to the nature, scope and purpose of the processing and the risks to the rights and freedoms of data subjects.
7.2 Users’ passwords are stored in encrypted form and Meetnity has no access to them in readable form. Within Meetnity, only persons who strictly need access to personal data to perform their work have such access, and they are bound by confidentiality.
8. Automated Decision-Making
8.1 Meetnity does not carry out automated individual decision-making or profiling within the meaning of Article 22 GDPR that would produce legal effects concerning the data subject or similarly significantly affect them.
9. Final Provisions
9.1 This Policy forms an integral part of the relationship between Meetnity and the User established under the Terms; matters not governed by this Policy are governed by the relevant provisions of the Terms and generally binding legislation.
9.2 Meetnity may amend this Policy unilaterally, in particular as a result of changes in legislation, the scope of data processed or the third-party tools used. The current version of the Policy is always available on the Platform; Meetnity will inform Users of any material change to the Policy in the manner set out in Article 1.5 of the Terms.
9.3 This Policy takes effect on 28 September 2026.