Privacy policy

1. Controller

Elevate You GmbH, Petrusgasse 16/1, 1030 Vienna, Austria is the controller for elu rooms.

E-Mail: info@elevateyou.app

This privacy policy applies to the elu rooms website, accounts, bookings and related communication.

2. Hosting and server log files

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the site, technically necessary data is processed: IP address, date and time of access, requested page, referrer URL, browser type and operating system.

Purpose: delivery, stability and security of the website.

Legal basis: legitimate interest (Art. 6 (1) (f) GDPR).

Retention: log files are stored by Vercel only briefly for operations and security and then deleted automatically. A data processing agreement is in place. Vercel is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition.

3. Accounts, bookings and platform data

If you create an account or book a room, we process name, email address, role, booking times, selected rooms, messages to our team and technically necessary account identifiers.

Purpose: providing the platform, processing bookings, communicating with hosts and customers, and fulfilling the contract.

Legal basis: contract performance (Art. 6 (1) (b) GDPR) and, where required, legitimate interest (Art. 6 (1) (f) GDPR). Data is stored in a database operated by Supabase Inc. A data processing agreement is in place.

4. Payments

Payments are processed by Stripe. Stripe receives the payment data required to collect the booking amount. elu rooms stores payment status and Stripe identifiers, not full card details.

Legal basis: contract performance (Art. 6 (1) (b) GDPR). Stripe acts as an independent controller or processor depending on the processing step; Stripe's privacy policy applies in addition.

5. Maps

Room locations may be shown using Google Maps. Google may process technical data such as IP address when a map is loaded. Legal basis: legitimate interest in showing room locations (Art. 6 (1) (f) GDPR).

6. Contact by email

If you contact us by email or via the contact form, we process your details to handle the request (Art. 6 (1) (b) GDPR for pre-contractual enquiries, otherwise Art. 6 (1) (f) GDPR). We delete the data once the request is completed unless statutory retention periods apply.

7. Cookies and analytics

We use technically necessary cookies for authentication and session security. We do not use advertising cookies or third-party tracking pixels on the public pages.

8. Recipients

We do not sell personal data. Recipients are our processors (Vercel, Supabase, Stripe) and, where a booking requires it, the host of the booked room, limited to the data needed to provide access.

We disclose data if we are legally obliged to do so.

9. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time. Write to us at info@elevateyou.app.

You also have the right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at

10. Data security

Transmission is encrypted (TLS). We use appropriate technical and organizational measures to protect your data against loss and unauthorized access.