Privacy Policy

The Data Controller of personal data is Star's Enterprise s.r.o., Company ID 05598168, VAT ID CZ05598168, with its registered office at Alžbětín 53, 340 04 Železná Ruda.

Contact: info@starslounge.com | +420 777 992 999

2.1 User Account

When you register and manage your account, we may process in particular:

• your first name and surname, e-mail address and telephone number;
• your date of birth;
• login and authentication data;
• an internal account identifier and your app settings.

Purpose: creating and managing the account, signing in and providing the features of the app. The legal basis is the performance of a contract.

We use your date of birth for birthday marketing messages only if you have consented to marketing communication. This may be, for example, a birthday greeting, an offer or a reward. The legal basis is your consent, which you may withdraw at any time.

2.2 Loyalty Programme and Rewards

For the operation of the loyalty programme, we may process in particular:

• your membership account identifier and personal QR code;
• the number of Stars Coins earned and redeemed;
• cashback, membership level and available or redeemed rewards;
• the history of crediting and redemption of points, cashback and rewards.

Purpose: maintaining the loyalty account, crediting and drawing benefits and resolving any discrepancies. The legal basis is the performance of a contract.

The app is not intended for making payments and does not process payment card data or any other payment data.

2.3 Reservations

When creating and managing a reservation, we may process your name, telephone number, e-mail address, the date and time of the reservation, the number of guests, any note, the status of the reservation and the related communication.

Purpose: accepting, confirming, changing, cancelling and handling the reservation. The legal basis is the performance of a contract or steps taken prior to entering into it.

2.4 News and Push Notifications

If you enable push notifications, we may process your device identifier or push token, your notification settings and information about the sending or opening of notifications, where the technology used provides it to us.

Notifications may contain operational information about your account or reservation, as well as news, offers, promotions, rewards or birthday marketing messages.

We send marketing messages on the basis of consent. Consent may be withdrawn at any time in the app, in your device settings or by contacting the Data Controller.

2.5 Technical and Analytical Data

When you use the app, the following may be recorded automatically, in particular: IP address, device type, operating system, app version, date and time of use, technical identifiers, error information and basic information about the use of the app's features.

We use this data for security, functionality checks, error fixing, compiling statistics and improving the app. The legal basis is our legitimate interest in the secure and high-quality operation of the app.

We process analytical data in a secured form. We use encryption and, depending on the nature of the processing, also pseudonymisation or internal technical identifiers. First names and surnames are not shown in directly readable form in standard analytical outputs.

2.6 Communication and Customer Support

If you contact us, we process your contact details, the content of your message, any attachments and information about how your request was handled. We use this data to handle your enquiry, complaint or other request.

Personal data may be disclosed, to the extent necessary, in particular to:

• the provider of development, administration and technical support of the app;
• the provider of server, database, cloud or hosting infrastructure;
• the provider of the technical solution for the loyalty programme;
• the provider of the reservation system;
• providers of analytical, diagnostic and security services;
• providers of services for sending push notifications;
• authorised employees, contractors and professional advisers;
• public authorities, where required by law.

The specific providers may change over time. We always disclose to them only the data necessary for the given service and we require an adequate level of personal data protection. We do not sell personal data.

Some providers of technical services may also process data outside the European Union or the European Economic Area. In such cases we use the mechanisms required by the GDPR, for example an adequacy decision or the European Commission's standard contractual clauses.

We retain personal data only for the period necessary for the purpose for which it was obtained:

• account and loyalty programme data for the period of the existence of the account and subsequently for the period necessary to protect our rights;
• reservation data as a rule for no longer than 3 years from the date the reservation took place or was cancelled;
• the date of birth used for marketing and other marketing data until consent is withdrawn, the data is removed from the profile or the account is deleted;
• technical and security records for the period necessary for security and error resolution, as a rule for no longer than 12 months;
• data that we are required to retain under legal regulations, for the period laid down by those regulations.

Once the relevant period has elapsed, we delete or anonymise the data.

In connection with the processing of personal data, you have in particular the right to:

• request access to your personal data;
• request the rectification of inaccurate or incomplete data;
• request the erasure or restriction of processing;
• obtain your data in a machine-readable format, where the statutory conditions are met;
• object to processing based on legitimate interest;
• withdraw your consent to marketing at any time;
• lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

You may exercise your rights by e-mail at info@starslounge.com. Before handling your request, we may reasonably verify your identity. We will respond to your request without undue delay, as a rule within one month.

You can delete your account using the account deletion feature available in the app. If you are unable to use this option, you may request deletion by e-mail at info@starslounge.com. Please state in your request the e-mail address or telephone number associated with the account.

After the account has been deleted, we will delete or anonymise the data that we no longer need to retain. Deleting the account terminates access to the Stars Coins collected, cashback, membership level, unredeemed rewards and other benefits. These benefits cannot be restored or transferred to another account.

We may retain certain data where required to do so by law or where it is necessary for the protection of legal claims or for resolving a security incident. Merely removing the app from your device does not delete your account.

In accordance with predefined rules, the app may automatically calculate Stars Coins, cashback, the availability of rewards or the membership level. These calculations have no legal or similarly significant effects on users.

We use appropriate technical and organisational measures to protect data against unauthorised access, loss, alteration, disclosure or misuse. Access is granted only to persons who need the data in order to perform their employment or contractual duties.

We may update this policy, in particular when the features of the app, the manner of data processing, the technical services used or legal requirements change. The current version will be published on our website and may also be available in the app.

Star's Enterprise s.r.o.
Alžbětín 53, 340 04 Železná Ruda
Company ID: 05598168 | VAT ID: CZ05598168
info@starslounge.com | +420 777 992 999