Privacy and cookies

Quick Summary

• Voutie processes data needed for accounts, login, voting, rankings, restaurant search, security, support, campaigns, and service measurement.
• Analytics and marketing cookies are used only if the user gives consent in the cookie settings.
• Browser location is used only after the user grants permission and only for features such as finding nearby restaurants.
• User content, such as comments or photos, may be publicly visible if the user submits it to the service.
• Data protection rights can be exercised at [email protected].

1. Data Controller

The data controller is Samuel Ján Pavličko, ID No.: 21957304, registered address Boženy Němcové 788/1, 288 02 Nymburk, Czech Republic, email: [email protected].

The Controller has not currently appointed a data protection officer. For privacy matters, users may contact the Controller at the email address above.

2. What Personal Data We Process

Depending on how the user uses the service, we may process in particular the following categories of data:

• Identification and contact data: email, username, name, or business name if provided by the user.
• Account and login data: user ID, login provider data, encrypted authentication data, session data, and security records.
• Voting and activity data: voted restaurants and categories, voting time, comments, vote changes, content reports, restaurant suggestions, and service interactions.
• Search and location data: entered address or locality, city, area, search queries, radius filters, and approximate browser location if the user grants permission.
• Technical data: IP address, user agent, device, browser, operating system, URL, request time, logs, error diagnostics, and security signals.
• Online identifiers: cookie ID, session ID, anonymous consent identifier, analytics event ID, or advertising identifiers if the relevant tools are enabled.
• Consent records: selected cookie settings, consent version, consent source, and the time consent was granted or rejected.
• User content: comments, photos, content metadata, and other information voluntarily submitted by the user.
• Campaign and contest data: participation, fulfilment of conditions, contact details for prize delivery, and related administrative records.
• Business profile management data: the connection to a business, information submitted in a profile claim, contact and billing details, and evidence used to verify authority to act for the business.
• Free Drop data: collection card, redemption status and time, verification of conditions, security records, and related technical identifiers.
• Voucher purchase data: buyer identification and contact details, purchased vouchers, amount, payment and redemption status, billing details and, for printed delivery, recipient shipping details.
• Communication data: messages sent to the Controller, support requests, and responses.

3. Purposes, Legal Bases, and Retention

We process personal data only to the extent necessary for a specific purpose. The main purposes, legal bases, and indicative retention periods are:

• Account creation and management: email, account ID, login and session data. Legal basis: performance of contract. We check unverified accounts with no activity once a week and delete them no earlier than 7 days after registration. We retain a verified account for its duration and then for the period necessary for legal claims or security reasons.
• Login and authentication: session data, login provider data, and security logs. Legal basis: performance of contract and legitimate interest in security. Retention: for the account duration; security logs typically for 6 to 24 months depending on the risk.
• Voting, rankings, and results: user ID, vote, category, restaurant, city, voting time, and related technical data. Legal basis: performance of contract and legitimate interest in ranking integrity. Retention: for the account duration or the existence of relevant voting; aggregated or anonymized statistics may be retained longer.
• Restaurant search and location features: search query, entered address, city, filter, radius, and optionally browser location. Legal basis: performance of contract; browser location is based on user consent. Retention: only for the period necessary for the feature, or in local browser settings if the user saves it.
• User content and photos: comments, photos, content metadata, reports, and moderation records. Legal basis: performance of contract and legitimate interest in operating and moderating the service and protecting rights. Retention: while the content is published and then for the period necessary for backups, moderation, or legal claims.
• Security, anti-fraud, and fair voting: IP address, technical logs, device/browser data, behavior patterns, unusual voting, and security signals. Legal basis: legitimate interest of the Controller and users in a safe and fair service. Retention: typically 6 to 24 months, longer only for incidents, disputes, or suspected abuse.
• Product analytics and service improvement: traffic, in-app events, technical data, and aggregated metrics. Legal basis: consent for analytics cookies and similar technologies; legitimate interest for necessary technical diagnostics. Retention: according to tool settings, generally from months up to 26 months unless a shorter period is configured.
• Marketing and remarketing: online identifiers, advertising cookies, and marketing events. Legal basis: consent. Retention: according to consent settings and individual tools; the user can withdraw consent at any time.
• Contests and campaigns: identification and contact data, fulfilment of conditions, prize, and communication. Legal basis: performance of contest rules, legitimate interest in proving the contest process, and where applicable legal obligation. Retention: for the contest period, prize delivery, and then for legal, tax, or accounting purposes as needed.
• Service communication and support: email, request content, and responses. Legal basis: performance of contract or legitimate interest. Retention: for the request handling period and a reasonable period for follow-up communication or protection of rights.
• Legal obligations: data necessary for accounting, tax, legal claims, or public authority requests. Legal basis: legal obligation or legitimate interest. Retention: according to applicable legal periods.

3.1 Voutie Creators

If a person applies to the Voutie Creators programme, we process their name, email, optional phone number, approximate location, age-group information, links to public profiles, and any work sample. This information is not public.

The purpose is to assess the application, keep a record for a potential collaboration, contact the applicant directly, and protect the form against spam. The legal basis is taking steps before a potential collaboration at the applicant’s request and the Controller’s legitimate interest in a proportionate and secure selection of collaborators.

We keep a new application for no more than 6 months. We keep an interesting application, an application marked as collaborating, and a Voutie Creator application for no more than 24 months; after moving it to not a fit / archived, for no more than 6 months. We track the specific deadline internally. An application is not automatically added to MailerLite or another newsletter list and submitting it does not trigger an automatic email.

3.2 Business profile management and billing data

If a user asks to claim or manage a business profile, we process their account, contact details, connection to the business, information provided in the request, and evidence needed to verify that they are authorized to act for the business. For a paid service, we may also process the company or personal name, company ID, VAT ID, billing address, and information needed for payment and accounting.

The purpose is to verify the applicant, provide access to profile management, deliver the ordered features, communicate about the service, and meet accounting and tax obligations. The legal bases are steps taken before entering into a contract, performance of contract, legal obligation, and legitimate interest in protecting profiles against unauthorized claims.

We keep profile verification and management data for the duration of profile management and for no more than 3 years afterwards, unless it is needed longer because of a dispute or legal obligation. Accounting and tax documents are retained for the period required by law, generally up to 10 years.

3.3 Free Drop

If a user opens a Free Drop collection card, we process their account and user ID, the card, redemption status and time, verification of conditions, confirmation attempt count, and technical identifiers needed for secure one-time redemption. This information is not public.

The purpose is to create and display the collection card, prevent duplicate redemption and abuse, confirm that the offer was provided, and resolve possible errors or disputes. The legal bases are performance of contract and the legitimate interests of the Controller, users, and participating businesses in a secure and fair Free Drop.

We keep personal data connected with a collection card and redemption for no more than 12 months after the relevant Free Drop ends. We then remove the link to the individual user and may retain only anonymized operational and aggregate data for longer.

3.4 Collaboration requests

If a verified business owner submits a Free Drop, Mission, or individual collaboration request, we process the signed-in account email, submitted phone number, business, and selected collaboration type. If a company or brand contacts us through the public form, we process the name, email, phone number, and message content. This information is not public.

The purpose is to assess the request, make direct contact, and arrange a potential collaboration. The legal basis is taking steps before a potential collaboration at the interested party’s request and the Controller’s legitimate interest in protecting the form from abuse.

We keep a request for no more than 6 months from submission and then delete it automatically. Submitting a request does not automatically add it to MailerLite or another newsletter list.

3.5 Purchasing and redeeming Voutie Vouchers

When you buy vouchers, we process the buyer's first and last name, email address, phone number, order contents and price, details needed to issue a purchase document, and payment status. For company purchases, we also process the company name, registration number, any tax number and billing address. If printed delivery is selected, we process the recipient's name or company name, phone number and postal address. On redemption, we record the voucher identifier, value, status, time and participating business.

We use this information to accept and fulfil orders, confirm payment, email vouchers and documents to the buyer, deliver printed shipments, verify one-time redemption, settle with participating businesses, and handle questions, withdrawals and complaints. Our legal bases are performance of contract, compliance with accounting and tax obligations, and legitimate interest in preventing abuse and protecting rights. A purchase does not, by itself, constitute consent to marketing messages.

We keep order and redemption data for the voucher's validity period and afterwards for settlement and protection of rights, usually no longer than three years. Accounting and tax documents are kept for the period required by law, generally up to ten years. Necessary information may be retained longer in the event of a dispute or legal obligation.

A payment gateway provider processes the payment; Voutie receives the details needed to confirm its status, not complete payment card details. A billing service may process information needed to issue a document, and a postal carrier receives details needed for delivery. On redemption, a participating business sees the information needed to verify the voucher, not the buyer's billing details.

4. Legitimate Interest

Where processing is based on legitimate interest, this mainly covers service security, prevention of vote manipulation, protection of the Controller’s and users’ rights, technical diagnostics, content moderation, and service quality improvement.

The user may object to processing based on legitimate interest by contacting [email protected]. The Controller will assess the objection and explain whether compelling legitimate grounds for continued processing exist.

5. Recipients, Processors, and Tools

Personal data may be made available only to the necessary extent to the following categories of recipients and tools:

• Supabase: database, authentication, storage, and related backend infrastructure.
• Vercel: hosting, CDN, serverless infrastructure, technical logs, and where applicable Vercel Analytics.
• Google: Google Maps, Google Places, Google Analytics, and related services depending on which features the user uses and what consent is granted.
• PostHog: product analytics and service usage analysis if enabled according to cookie settings.
• Meta: Facebook Pixel and analytics measurement only after analytics consent is granted.
• Reddit: Reddit Pixel for measuring visits and completed registrations only after analytics consent is granted.
• Sentry: error monitoring, performance monitoring, and technical diagnostics.
• Email, accounting, legal, or technical support providers if used for the service.
• Public authorities where required by law or necessary to protect rights.

The role of each provider may differ by service. Some act as processors of the Controller, while others may act as independent controllers or joint controllers for selected services according to their terms and service settings.

6. Transfers Outside the EU/EEA

Some providers may process personal data outside the European Union or the European Economic Area, especially in the United States.

Where such transfers occur, the Controller uses available GDPR mechanisms, in particular adequacy decisions, the EU-US Data Privacy Framework for certified entities, standard contractual clauses (SCCs), and where appropriate additional technical or contractual safeguards.

7.1 What Cookies Are

Cookies are small files stored on the user’s device. Similar technologies may include local storage, session storage, pixels, SDKs, or other online identifiers.

7.2 What Cookies We Use

• Necessary cookies and storage: used for login, sessions, security, remembering language or cookie settings, and core service operation. These technologies are not subject to consent because they are necessary for the service to work.
• Analytics cookies: help measure traffic, feature usage, and technical service quality. They are used only after consent, unless they are necessary cookieless technical diagnostics.
• Marketing cookies and pixels: used for campaign measurement, remarketing, and advertising audiences. They are used only after consent.
• Map and search technologies: when using maps, Google Places, or address search, the search query, map position, or technical data may be transferred to the provider of the relevant service.

7.3 Cookie Consent and Rejection

Analytics and marketing cookies are stored and read only based on user consent. Consent is voluntary and can be changed or withdrawn at any time in cookie settings, where available, or in browser settings.

Rejecting analytics or marketing cookies does not affect basic use of the service. Restricting necessary cookies in the browser may cause some parts of the service not to work properly.

8. Google Maps, Google Places, and User Location

Voutie may use Google Maps and Google Places for restaurant search, address search, photos, map tiles, and enriching restaurant information.

If the user searches for an address or restaurant, the search query and related technical data may be transferred to the map or search provider. If the user allows browser location, we use it to show nearby restaurants or prefill locality.

The user can reject or revoke location access at any time in browser or device settings. The service can still be used without location permission, but location-based features may not work.

9. Public Content, Photos, and Third-Party Data

Comments, photos, restaurant suggestions, and other content submitted by the user may be publicly visible within the service if intended for publication.

The user should upload only content for which they have the necessary rights and which does not violate the privacy or rights of third parties. Photos may contain recognizable people, location, device data, or other metadata. If a user believes content violates their rights, they may request removal or report it at [email protected].

10. Security, Anti-Fraud, and Fair Voting

To keep rankings trustworthy, Voutie may use technical and automated checks to detect suspicious voting patterns, spam behavior, account abuse, bot traffic, or attempts to manipulate results.

These checks may lead to technical limitation, moderation, verification, or human review. If an automated check significantly affects the user, the user may contact the Controller and request an explanation or review.

11. Contests and Campaigns

If the user participates in a contest or campaign, we may process data needed to verify participation, fulfilment of conditions, winner selection, winner contact, prize delivery, and proof of proper contest operation.

Specific contest rules may include additional information about data processing. If contest rules conflict with this policy, the more specific rule for the relevant contest applies to the extent compatible with GDPR.

12. Children and Minors

The service is not intended for children under 15 without consent of their legal guardian. Users under 18 may participate in contests or campaigns only if allowed by the specific rules and applicable law.

If the Controller learns that it processes a child’s data in violation of law or this policy, it will take appropriate steps to remedy the situation.

13. Data Security

The Controller uses appropriate technical and organizational measures to protect personal data, including access controls, encrypted communication, permission limits, security event logging, backups, and error monitoring.

No online system is absolutely secure. Users should protect their login credentials and promptly inform the Controller if they suspect account misuse.

14. User Rights

Subject to GDPR conditions, the user has in particular the following rights:

• right of access to personal data
• right to rectification of inaccurate or incomplete data
• right to erasure
• right to restriction of processing
• right to object to processing based on legitimate interest
• right to data portability
• right to withdraw consent where processing is based on consent
• right to lodge a complaint with a supervisory authority

Rights can be exercised at [email protected]. The Controller may request reasonable identity verification where necessary to protect data. The Controller generally responds within one month, or within an extended period permitted by GDPR for complex requests.

15. Complaint to Supervisory Authority

The user has the right to lodge a complaint with the Czech Data Protection Authority (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz.

16. Changes to This Policy

The Controller may reasonably update this policy, especially when the service, tools used, legal requirements, or processing methods change. The current version will always be published on the service website.

For material changes, the Controller may inform users in an appropriate way, for example by email or in-service notice.

17. Contact Details