Privacy Policy

1. Introduction

Moje nájmy s.r.o., with registered office at V háji 1092/15, Holešovice, 170 00 Prague 7, ID: 296 98 634 (hereinafter "Controller"), operates the Grento platform and is the controller of your personal data.

This privacy policy explains how we collect, use, store and protect your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 110/2019 Coll., on personal data processing.

2. What Data We Collect

We collect the following categories of personal data:

• Registration data: name, surname, email address, password (in encrypted form)
• Property data: addresses, size information, acquisition prices
• Tenant data: names, contact details, contract data
• Financial data: payment information, expenses, revenues
• Technical data: IP address, browser type, access times
• Documents: uploaded contracts, invoices and other documents

3. Purpose of Processing

We process your personal data for the following purposes:

• Providing Grento platform services
• Managing user accounts and authentication
• Sending important service notifications
• Improving our services and user experience
• Fulfilling legal obligations (e.g. accounting)
• Protection against fraud and misuse

4. Legal Basis for Processing

Personal data processing is based on:

• Contract performance (Art. 6(1)(b) GDPR): processing necessary for service provision
• Legitimate interest (Art. 6(1)(f) GDPR): service improvement, security
• Legal obligation (Art. 6(1)(c) GDPR): accounting and tax obligations
• Consent (Art. 6(1)(a) GDPR): marketing communication (if given)

5. Data Retention Period

We retain personal data for the duration of the contractual relationship and further as required by law:

• Accounting documents: 10 years from the end of the accounting period
• Registration data: for the duration of active account + 3 years
• Technical logs: maximum 1 year
• Marketing consents: until consent is withdrawn

6. Sharing Data with Third Parties

We may share your data with:

• Hosting service providers (within EU/EEA)
• Payment service providers (for online payments)
• Government authorities (based on legal obligation)

We do not sell or rent your data to third parties for marketing purposes.

7. Data Security

We use appropriate technical and organizational measures to protect your data:

• Data encryption in transit (HTTPS/TLS)
• Password encryption using bcrypt
• Regular data backups
• Controlled access to personal data
• Regular security audits

8. Your Rights

As a data subject, you have the right to:

• Right of access: obtain information about the processing of your data
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of data ("right to be forgotten")
• Right to restriction: restrict the manner of processing
• Right to portability: receive your data in a structured format
• Right to object: against processing based on legitimate interest
• Right to withdraw consent: at any time without giving a reason

9. Cookies

Necessary technical cookies (sign-in, form security, language, storing your choice) are always used because the site and the app do not work without them. Analytics tools (Google Analytics, Microsoft Clarity) and marketing tools (Meta Pixel, Google Ads) are loaded only after you give consent in the cookie banner; without consent none of their cookies are stored in your browser. Consent is valid for 12 months and you can change or withdraw it at any time via the "Cookie settings" link in the site footer or the button below.

10. Contact

For questions regarding personal data processing, you can contact:

11. Complaints

If you believe that the processing of your personal data violates legal regulations, you have the right to file a complaint with the Office for Personal Data Protection (www.uoou.cz).

12. Changes to Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or in-app notification.