Privacy Policy

The controller of your personal data is Desktechub s.r.o., ID No. 24531596, with establishment address at Turnovská 430/10, 180 00 Praha 8 - Libeň and establishment ID 1016069146.

Commercial register details are available in the linked official company extract.

If you have any privacy-related request, contact us at workspace@deskohub.cz.

We process the data you provide through our public website, especially contact details and message content sent through the contact form, plus reservation details: your name, email, phone number, selected reservation family and product, date or date range, start time, duration, seat count, and any coworking refreshment, monitor, or workstation preferences.

When you continue to checkout, we also process the quoted and paid amount, currency, applied discounts, payment and reservation identifiers and status, accepted legal-document references and hashes, related checkout acknowledgements, access and fulfillment status, and any optional billing details you request us to use for an accounting document. We do not receive your complete payment-card details from the payment provider.

If you create a customer account, we process an authentication identifier, your profile details, your verified email address, and the session and single-use sign-in link data needed to sign you in and operate the account securely. The account works with one-time email links, so we never collect a password.

For website operation and abuse prevention, we may also process limited technical data such as IP address, User-Agent, origin or host information where available, and short-lived rate-limit or anti-spam signals connected with a submission.

If you consent to analytics cookies or similar technologies, we and our analytics service providers may process website usage and campaign measurement data, such as pageviews, browser and device information, IP-derived technical data, event types, and standard campaign parameters from URLs. These campaign parameters are limited to utm_source, utm_medium, utm_campaign, utm_content, and utm_term.

If you separately opt in to future marketing communications, we also process your name, email address, preferred language, consent time, and the version of the marketing notice you accepted. We record this choice with the relevant customer record. The choice belongs to that customer record, not to the email address. If the customer's email address changes, the choice follows that customer record. Customer records that use the same email address have separate choices.

We use submitted contact, reservation, order, and payment data to check availability, prepare and confirm a Booking, hold capacity, collect or verify payment, issue access, send confirmations, provide requested accounting documents, handle cancellation or complaints, prevent duplicate or fraudulent orders, and support the Booking when you contact us.

We use customer account data to authenticate you, let you manage your profile, and connect the account with reservations made using the same verified email address. The Workspace application stores only opaque account and customer identifiers for this connection.

We do not use reservation or enquiry data for marketing unless you separately consent to receive marketing communication.

When you give that optional consent, we may use your email address for future Deskohub Workspace marketing and community communications. We do not share your contact details with another business for its own marketing.

With your analytics consent, we use analytics and external measurement services to understand site usage, reservation submission performance, and campaign effectiveness. Reservation submitted conversion events are used only at category and purpose level and do not include reservation form values or personal details such as name, email, phone, message, reservation date, selected tier, coffee preference, or monitor preference.

Before a contract is concluded, we process reservation data to take steps at your request. After conclusion, we process it to perform the contract, including payment, access, support, cancellation, and complaints. We process accounting and transaction records where necessary to comply with legal obligations.

Account authentication, profile management, and the reservation history are processed to provide the account service you request and, where applicable, to perform or prepare the related reservation contract. Account security, session integrity, and abuse prevention are based on our legitimate interests.

For website security, abuse and fraud prevention, reliable payment and reservation evidence, and the establishment, exercise, or defense of legal claims, we rely on our legitimate interests where those interests are not overridden by your rights.

Optional non-essential cookies are processed only on the basis of your consent. Analytics and campaign measurement processing is based on consent, which you can withdraw or change at any time via cookie settings.

Future marketing communications are based on your separate consent. Giving this consent is voluntary and is not a condition of making or paying for a reservation.

We keep unsuccessful enquiries and abandoned reservation data only for as long as needed to handle the request, recover an incomplete checkout, prevent abuse, or protect legal claims. For completed Bookings, we retain the transaction, accounting, legal-acceptance, and complaint records for the periods required by applicable law or reasonably necessary to establish, exercise, or defend legal claims. Technical abuse-prevention signals are short-lived.

We keep the customer account profile and authentication sessions while the account is active, and expired sessions and unused sign-in links are removed automatically every day. Deleting the account removes its login identity, sessions, and the Workspace account-to-customer link, and expires the linked customer profile. Reservation, payment, accounting, fraud-prevention, and legal evidence records are not erased with the login account and remain only for the applicable service, statutory, or legitimate retention period.

Analytics and campaign measurement data is retained according to the applicable analytics and technical provider settings and only as long as necessary for the stated measurement purposes.

The customer-level marketing consent record remains tied to the relevant customer record when you withdraw consent. A withdrawal changes only that customer record. Customer records that use the same email address have separate choices.

Your data may be accessed by our internal workspace team and, as necessary for their role, by providers of website hosting, reservation and customer management, payment processing, email delivery, accounting-document generation, security, analytics, external measurement, and other technical services. Payment data is sent to the payment provider only to create and verify the transaction. We use appropriate contractual, organizational, and technical safeguards for provider access.

Customer accounts run inside our application with the open-source Better Auth authentication library; we do not use a separate managed authentication provider. The account database is hosted by our database provider, magic-link emails are delivered by our email delivery provider, and customer profiles and reservations are processed in our booking-system provider Dotypos. Each provider may process only the account, session, delivery, profile, or technical data needed to perform its role on our behalf.

If we send marketing communications in the future, our email delivery provider may process the contact and delivery information needed to send them on our behalf.

Under applicable data protection law, you may request access, rectification, erasure, restriction, objection, or data portability where applicable. You may lodge a complaint with the Czech Office for Personal Data Protection at uoou.gov.cz.

You can opt in to or withdraw marketing consent on the privacy page in your account when you are signed in with a verified account linked to the relevant customer record. A dedicated customer-specific link in a future marketing message can also let you opt in or withdraw. If neither option is available, contact our support team at workspace@deskohub.cz. Withdrawal does not affect processing that took place before it.

You can delete the customer account from its profile page. This self-service action deletes the login account but does not replace a broader data-protection request concerning reservations or legally retained records; send those requests to workspace@deskohub.cz.