Privacy Policy

The entity responsible for processing your personal data on the Reservo platform and mobile application is:

Company: BLIMZO DEVELOPMENT SRL

Address: Str. Sărarilor, nr. 29A, bl. C3, et. 2, ap. 14, Craiova, Dolj, Romania

Registration number: J2023002092161

Tax ID: 48902075

Email: contact@blimzo.ro

Phone: +40 737 591 489

We collect and process only the data strictly necessary to provide Reservo services:

- Account and profile data: first and last name, email address, phone number, city, date of birth, profile picture/avatar, preferred communication language, securely hashed passwords, authentication tokens, and two-factor authentication (2FA) verification tokens.

- Court bookings and match data: details of court bookings (date, time, venue, court, duration, calculated price), participation in public or private matches, team lineups (Team A / Team B), recorded final scores, match history, and sport-specific skill ratings.

- In-app communications and social features: messages sent on Match Chat and Group Chat channels, timestamps, message edit/deletion metadata within the 10-minute window, friend connections, notification settings, and muted conversations.

- Custom Match Alerts: user-configured criteria and filters (favorite sports, preferred days of the week, time slots) used to trigger real-time push notifications when matching games are posted.

- Business and venue administrative data: company legal name, tax ID, registered address, authorized representative details, sports venue and court configurations, external/manual reservation records, staff roles (Owner, Manager, Venue Manager), schedule overrides, and custom pricing rules.

- Technical data, push tokens, and security logs: device push tokens (FCM / APNs) for delivering alerts and booking notifications, IP addresses, session identifiers, device model, operating system version, and security access logs.

- Payment and subscription data (Stripe): for the Reservo Sport Package (Premium Subscription), payments are processed directly by the certified provider Stripe. Reservo stores only the Stripe customer ID, transaction metadata, and subscription status. Reservo does not collect or store full credit card numbers or CVV/CVC codes on its servers. Individual court rental payments are made directly at the venue.

- Feedback and customer support records: contents of feedback submissions, feature suggestions, bug reports sent from the in-app Account section or web contact form, attachments, and real-time ticket resolution status.

We process your personal data in accordance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679) under the following legal bases:

- Performance of a contract (Art. 6(1)(b) GDPR): to create accounts, confirm court bookings, coordinate matches, deliver chat messages, manage premium subscriptions, and grant access to platform features;

- Legitimate interests (Art. 6(1)(f) GDPR): to maintain platform security, prevent fraud, enhance service performance, provide technical support, and ensure system reliability;

- Legal obligations (Art. 6(1)(c) GDPR): to maintain fiscal, tax, and accounting records for subscription transactions in compliance with applicable statutory requirements;

- Consent (Art. 6(1)(a) GDPR): for delivering optional push notifications and personalized match alerts based on your preferences, which you can withdraw at any time via device or app settings.

To operate the platform effectively, certain data may be shared with the following categories of recipients:

- Partner sports venues and companies: your name, phone number, and reservation details are shared with the venue to validate court access and confirm your booking;

- Community members: your public profile name, avatar, skill ratings, match attendance, and chat messages are visible to relevant participants within social and game features;

- Technical service providers: secure cloud hosting providers, push notification infrastructure (Firebase Cloud Messaging, Apple Push Notification service), payment processor Stripe, and Google reCAPTCHA for spam defense. All providers process data under strict Data Processing Agreements (DPAs);

- Public authorities: we may disclose personal data to authorized statutory bodies only when strictly required by applicable law.

Reservo does not sell or rent your personal data to third parties for direct marketing purposes.

We implement advanced technical and organizational measures to safeguard your personal data against unauthorized access, loss, or misuse. These include TLS/HTTPS encryption in transit, secure password hashing algorithms, two-factor authentication (2FA), role-based database access permissions, and continuous security monitoring.

No method of transmission over the internet or electronic storage is 100% impenetrable; we continuously strive to apply industry-leading security practices to protect your information.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

- Account and profile data are kept for the active lifetime of your account;

- Upon account deletion (requested from the mobile app or via support), associated personal data is permanently deleted or irreversibly anonymized within 30 days, except for fiscal/accounting transaction records required by law to be archived for statutory retention periods;

- Match chat messages and game histories are maintained for participant reference for the duration of the involved accounts.

The Reservo website uses essential functional and preference cookies (such as remembering language and theme choices) as well as anti-spam security verification (Google reCAPTCHA) to protect the contact form. For detailed information, please review our Cookie Policy.

Under Regulation (EU) 2016/679 (GDPR), you have the following statutory rights regarding your personal data:

- Right of access: request confirmation and a copy of the personal data we hold about you;

- Right to rectification: request correction of inaccurate data or completion of incomplete information directly in the app or via email;

- Right to erasure ("right to be forgotten"): request permanent deletion of your account and associated personal data;

- Right to restriction of processing: under the conditions set out in Article 18 GDPR;

- Right to data portability: receive your provided personal data in a structured, commonly used, and machine-readable format;

- Right to object: object to data processing based on legitimate interests;

- Right to withdraw consent: withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal;

- Right to lodge a complaint: file a complaint with a supervisory authority, such as ANSPDCP in Romania (B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, email: anspdcp@dataprotection.ro, website: www.dataprotection.ro).

To exercise any of your rights or for privacy inquiries, contact us at: contact@blimzo.ro