Privacy Policy | Flatpals

Introduction

This Privacy Policy explains how CATCHI s.r.o. ("we," "us," or "our") collects, uses, and protects your personal data when you use our websites flatpals.sk, flatpals.cz, flatpals.at, flatpals.de and flatpals.com (collectively, the "Platform"). These three websites share the same backend server and account system, meaning that registering on any one of these websites automatically creates an account accessible across all three. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

We are the data controller responsible for your personal data. Our details are:

Company Name: CATCHI s.r.o.
IČO: 57021040 | DIČ: 2122540893
Registered Address: Janotova 431/16, 841 04 Bratislava - mestská časť Karlova Ves, Slovakia

For any questions about this Privacy Policy or your personal data, please contact us atprivacy@flatpals.com.

The Platform connects individuals seeking affordable housing options, such as young professionals and people looking for shared rooms or dorms, with those offering rentals, including private landlords, individuals seeking roommates, and businesses managing dorms. This policy applies to all users of the Platform, including visitors, registered users, and listers across flatpals.sk, flatpals.cz, flatpals.at, flatpals.de and flatpals.com.

What Personal Data Do We Collect?

We collect only the personal data necessary to provide our services across flatpals.sk, flatpals.cz, flatpals.at, flatpals.de and flatpals.com, which share the same backend server and account system. The types of data we collect include:

For registered users: Your name and email address, which are shared across flatpals.sk, flatpals.cz, flatpals.at, flatpals.de and flatpals.com to enable a single account for all three platforms.
For users creating listings: The address of the property (with an option to anonymize it by providing approximate location details instead of a full address). We also store latitude and longitude coordinates derived from the address for distance-based filtering.
Service-specific data: Details related to listings or inquiries, such as listing type, number of rooms, capacity, and records of inquiries made through the Platform. These may be accessible across flatpals.sk, flatpals.cz, flatpals.at, flatpals.de and flatpals.com. We do not collect sensitive personal data (e.g., health information).
Other data: Confirmation that you have accepted our Terms of Service (TOS) and this Privacy Policy. We also receive notifications from our payment processor (Stripe) confirming successful payments for our services, but we do not store any payment card details or financial information.

We do not collect data from users under 18 years old, as per our TOS, which requires users to be at least 18.

How Do We Collect Your Data?

We collect data directly from you through the following methods across flatpals.sk, flatpals.cz, flatpals.at, flatpals.de and flatpals.com, which share the same backend server and account system:

Registration and Account Creation: When you sign up on any of flatpals.sk, flatpals.cz, flatpals.at, flatpals.de or flatpals.com, we collect your name and email address to create a single account accessible across all three platforms. During registration, you must check a box to accept our TOS and Privacy Policy.
Creating Listings: If you list a property on any of the three platforms, we collect the address (or anonymized version) and related details, which may be displayed across flatpals.sk, flatpals.cz, flatpals.at, flatpals.de and flatpals.com.
Inquiries and Interactions: We track inquiries you make about listings to facilitate connections between users. When you inquire about a listing, your email address is shared with the listing owner so they can respond directly to you and continue communication outside the Platform.
Cookies and Similar Technologies: We use essential cookies to store preferences such as language settings and temporary values (e.g., room types) to improve performance and avoid repeated server requests across flatpals.sk, flatpals.cz, flatpals.at, flatpals.de and flatpals.com. A cookie banner on the site informs you about these cookies, and by clicking "Got it" or continuing to use the Platform, you acknowledge their use. These cookies do not track user behavior for analytics or marketing purposes.
Payments: Payments are handled entirely by Stripe. We only receive a confirmation from Stripe that a payment has been processed successfully.

We do not collect data indirectly from third parties, except for the payment confirmations from Stripe.

How and Why Do We Use Your Data?

We process your personal data only for the purposes necessary to operate the Platform and provide our services. Below are the key purposes and the legal bases under GDPR:

To Provide and Operate the Platform (Legal Basis: Performance of a contract - Article 6(1)(b) GDPR): We use your name, email, and listing details to enable user registrations, property listings, inquiries, and connections between seekers and providers. For example, latitude/longitude data allows distance-based search filtering.
To Facilitate Inquiries (Legal Basis: Performance of a contract - Article 6(1)(b) GDPR): We share your email address with the listing owner when you inquire about a listing to allow direct communication.
To Communicate with You (Legal Basis: Performance of a contract - Article 6(1)(b) GDPR): We use your email to send service-related notifications, such as inquiry confirmations or account updates.
To Ensure Compliance and Record-Keeping (Legal Basis: Legitimate interests - Article 6(1)(f) GDPR): We store records of TOS and Privacy Policy acceptance to demonstrate user agreement.
To Process Payments (Legal Basis: Performance of a contract - Article 6(1)(b) GDPR): We use Stripe's payment confirmations to verify service fees have been paid.
For Technical and Performance Improvements (Legal Basis: Legitimate interests - Article 6(1)(f) GDPR): Cookies help store preferences to enhance user experience without reloading data.

We do not use your data for marketing, profiling, or automated decision-making.

Do We Share Your Data?

We share your personal data only in limited circumstances necessary for our operations across flatpals.sk, flatpals.cz, flatpals.at, flatpals.de and flatpals.com, which share the same backend server and account system:

Inquiries: When you inquire about a listing, your email address is shared with the listing owner to enable direct communication (e.g., to discuss the rental further).
Cross-Platform Data Access: As flatpals.sk, flatpals.cz, flatpals.at, flatpals.de and flatpals.com share the same account system, your account data (e.g., name, email, listings) may be accessible or displayed across all three platforms to provide a seamless user experience.
Email Services: We use an SMTP email server hosted by Web Support to send service-related emails from our Platform. This may involve transmitting email addresses to them for delivery purposes only.
Payment Processor: Stripe handles all payments and may process data as needed for transactions, but we do not share payment details with them ourselves.
Legal Requirements: We may disclose data if required by law, such as in response to a court order or regulatory authority.

We do not sell or rent your data to anyone.

International Data Transfers

All data processing occurs within the European Union. Our servers are hosted in Germany by Hetzner, ensuring no transfers outside the EEA. We comply with GDPR by using up-to-date encryption and best practices for all data handling.

How Long Do We Retain Your Data?

We retain your personal data only as long as necessary for the purposes outlined above across flatpals.sk, flatpals.cz, flatpals.at, flatpals.de and flatpals.com:

Active user data (e.g., name, email, listings) is kept while your account is active.
Upon account deletion, all your personal data is immediately and permanently deleted from our shared databases across flatpals.sk, flatpals.cz, flatpals.at, flatpals.de and flatpals.com.
We do not retain any data after deletion, except for anonymized, aggregated data that cannot identify you (e.g., for internal statistics).

How Do We Secure Your Data?

We take data security seriously and implement appropriate technical and organizational measures:

Encryption: All data in transit is protected via HTTPS, and stored data uses standard encryption protocols.
Infrastructure: Our systems run on Docker containers, preventing direct database access without going through our secure Django server.
Access Controls: We use JWT (JSON Web Tokens) for authentication, ensuring only authorized users can access their data.
Best Practices: Regular updates, firewalls, and monitoring to prevent unauthorized access, loss, or breaches.

In the event of a data breach, we will notify affected users and relevant authorities as required by GDPR.

Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access: Request a copy of your data.
Right to Rectification: Correct inaccurate data.
Right to Erasure ("Right to be Forgotten"): Delete your data (available directly via the account deletion option on your profile page).
Right to Restrict Processing: Limit how we use your data.
Right to Data Portability: Receive your data in a structured format.
Right to Object: Object to processing based on legitimate interests.
Right to Withdraw Consent: If applicable (though we rely minimally on consent).

To exercise these rights, contact us at privacy@flatpals.com. We will respond within one month, free of charge, unless the request is complex or repetitive. You also have the right to lodge a complaint with the Slovak data protection authority (Office for Personal Data Protection of the Slovak Republic) or your local supervisory authority.

Account deletion is straightforward: Visit your profile page and select the delete option. This immediately removes your data.

Cookies

We use a limited number of essential cookies for functional purposes:

Language Preferences: To remember your selected language.
Session Storage: To cache small values like room types, reducing server load.

These are not used for tracking or analytics. A cookie banner on the site informs you about these essential cookies, and by clicking "Got it" or continuing to use the Platform, you acknowledge their use. You can also control cookies through your browser settings.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or a notice on the Platform. The updated policy will be posted here with a new effective date.

How to Contact Us

If you have questions or need to exercise your rights, email us atprivacy@flatpals.com.

For complaints, you can also contact the Office for Personal Data Protection of the Slovak Republic athttps://dataprotection.gov.sk/.