Privacy policy

1. Data controller

The data controller responsible for your personal data in relation to the Klikteren platform is Klikteren (the entity operating this service). You can contact us using the details on the Contact page. If you use a venue through our platform, the respective Venue Owner may also act as a data controller for data they process in connection with your booking; their processing is governed by their own privacy practices and applicable law.

2. Data we collect

We collect: (a) Account and profile data: email address, name, phone number (if provided), password (stored in hashed form), and any other information you provide when registering or updating your profile. (b) Booking and transaction data: booking details (venue, court, date, time, price), payment-related information as applicable, and communications related to bookings. (c) Usage data: log data (IP address, browser type, device information, pages visited, time and date of access), and data collected through cookies and similar technologies as described below. (d) Communications: messages you send to us or to Venue Owners through the platform, and feedback you provide. We do not collect more data than is necessary for the purposes set out in this policy.

3. Legal basis for processing

We process your personal data on the following bases: (a) Contract: to perform our contract with you (e.g. to create and manage your account, process bookings, and communicate about your use of the Service). (b) Legitimate interests: to operate, secure and improve the Service, prevent fraud and abuse, and defend our rights, where not overridden by your interests. (c) Consent: where we have asked for your consent (e.g. for optional marketing or non-essential cookies). You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. (d) Legal obligation: where we must process data to comply with applicable law (e.g. tax, anti-fraud or data retention obligations).

4. How we use your data

We use your data to: provide, maintain and improve the Service; create and manage your account; process and display your bookings and communicate with you and Venue Owners about them; send booking confirmations, reminders and service-related notifications; respond to your enquiries and support requests; enforce our Terms of Use and prevent fraud or misuse; comply with legal obligations; and, where permitted and with your consent where required, send marketing communications. We may also use aggregated or anonymised data for analytics and product improvement.

5. Sharing and disclosure of data

We may share your data: (a) With Venue Owners: as necessary to fulfil your booking (e.g. your name, contact details and booking details). (b) With service providers: we use trusted third parties (e.g. hosting, email delivery, analytics, payment processors) who process data on our instructions and are bound by confidentiality and data protection obligations. (c) For legal reasons: when required by law, court order or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety or the safety of others, or to detect or prevent fraud. We do not sell your personal data to third parties.

6. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting or reporting requirements. Account and profile data are retained while your account is active and for a reasonable period after closure. Booking and transaction data may be retained for the period required by law (e.g. tax and consumer law). Log and usage data may be retained for a limited period for security and analytics. After the retention period, we delete or anonymise the data so that it can no longer identify you.

7. Your rights

Depending on your jurisdiction (including under the GDPR if you are in the EEA/UK), you may have the right to: access your personal data; rectify inaccurate data; request erasure ("right to be forgotten"); restrict processing; data portability; object to processing based on legitimate interests or for direct marketing; withdraw consent where processing is based on consent; and lodge a complaint with a supervisory authority (e.g. in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection). To exercise these rights, contact us using the details on the Contact page. We will respond within the time limits set by applicable law (e.g. one month under the GDPR).

8. Cookies and similar technologies

We use cookies and similar technologies (e.g. local storage) to enable essential functionality (e.g. authentication, session management, security), to remember your preferences, and to understand how the Service is used (analytics). Some cookies are strictly necessary; others may be optional. You can control or delete cookies through your browser settings; blocking essential cookies may affect the availability or functionality of the Service. We do not use third-party advertising cookies that track you across other websites for advertising purposes without your consent where required by law.

9. International transfers

Your data may be processed in the country where we or our service providers operate. If we transfer personal data outside the European Economic Area, the UK or your country of residence to a country not recognised as providing an adequate level of data protection, we will implement appropriate safeguards (e.g. standard contractual clauses approved by the European Commission or equivalent) as required by applicable law.

10. Children

The Service is not intended for users under 16 years of age. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data without parental consent, please contact us and we will take steps to delete such information.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on the Service and update the "Last updated" date. Where required by law or where changes materially affect how we use your data, we will notify you by email or through the Service before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy, except where further consent or other steps are required by law.

12. Contact

For any questions about this Privacy Policy or our handling of your personal data, or to exercise your rights, please contact us at the email address provided on the Contact page. We will respond as required by applicable data protection law.