1. Introductory Provisions and Platform Operator Information

1.1 These General Terms of Use (hereinafter: "Terms") govern the relationship between the operator of the online booking platform and related services operating under the name VENUO (hereinafter: "Platform" or "VENUO"), and an individual using the Platform as a consumer (hereinafter: "Guest").

1.2 The technical operator and owner of the Platform is:

• Name: ENJOI d.o.o.
• Registered office: Mlinska ulica 26, 2000 Maribor, Slovenia
• Registration number: 8767513000
• Tax / VAT identification number: SI69310122
• Contact email: [email protected]
• (hereinafter: "Operator" or "we")

1.3 The Terms are intended exclusively for consumers, i.e., natural persons acting outside the scope of their gainful or professional activity (B2C relationship). Separate terms apply to business users (B2B) if concluded specifically.

1.4 By using the Platform, making a reservation, purchasing a ticket or a gift voucher, or by confirming these Terms, the Guest declares that they have read, understood, and agree to the Terms. If the Guest does not agree with the Terms, they must not use the Platform.

2. Definitions

In these Terms, the following definitions apply:

2.1 Platform (VENUO) – the website, mobile application, and related technical solutions operating under the name VENUO, through which the Operator enables the connection of Guests with Providers.

2.2 Provider – an independent economic entity (restaurant, venue, event organizer, gift voucher issuer, or other service provider) that offers its services, experiences, events, tickets, or gift vouchers through the Platform. The Provider is the party that actually performs the ordered service.

2.3 Guest – a user who makes a reservation, purchase, or other transaction through the Platform.

2.4 Reservation – the Guest's request to secure a table, service, experience, event, or other time slot with a specific Provider.

2.5 Platform Service – technical mediation between the Guest and the Provider, including the submission of reservations, processing of payments or payment authorizations through a third-party payment service provider, and the generation and delivery of gift vouchers and tickets on behalf of the Provider.

2.6 Provider's Terms – the price list, cancellation deadlines, no-show rules, refund policies, validity of gift vouchers, and other conditions determined by each individual Provider for their offer, which are displayed to the Guest upon reservation or purchase.

2.7 Stripe – the external payment service provider (Stripe Payments Europe, Ltd. or an affiliated company) that independently processes payment and card data.

2.8 Privacy Policy – a separate document governing the processing of personal data.

3. Nature of the Platform and the Operator's Role as an Intermediary

3.1 The Operator acts exclusively as an intermediary providing the technical infrastructure to connect Guests with Providers. The Operator is not a seller, service provider, restaurateur, event organizer, ticket seller, or gift voucher issuer.

3.2 The contract for the actual service (table reservation, service, experience, event, ticket, or gift voucher) is concluded directly between the Guest and the respective Provider. The Operator is not a contractual party to this relationship and assumes no performance obligations for it.

3.3 The services available through the Platform primarily include: table reservations, service reservations, experience reservations, event reservations, ticket sales, and a gift voucher shop. In all these cases, the Operator acts solely in an intermediary or technical capacity.

3.4 The content of the offer, descriptions, prices, availability, quality, and legality of the service are determined by and are the sole responsibility of the Provider. The Operator does not guarantee the accuracy or completeness of the data provided to the Platform by the Provider.

3.5 Any complaints, claims, or disputes regarding the performance of the service shall be enforced by the Guest directly against the Provider, who is their contractual party.

3.6 Content provided by the Provider. All content related to an individual offer – in particular prices, price lists, descriptions, texts, titles and terms of the offer, photographs and images, menus, allergen and ingredient information, availability, dates/times, trademarks and logos, and other information – is provided, entered, and updated exclusively by the respective Provider. The Operator does not create this content, does not verify its accuracy, completeness, timeliness, or legality, and is not responsible for it. The Provider is solely responsible for the correctness and compliance of this content with applicable regulations. The Operator is not liable for any damage incurred by the Guest due to inaccurate, incomplete, outdated, or misleading data from the Provider, without prejudice to the Operator's liability under Chapter 14 of these Terms.

4. Use of the Platform and User Account

4.1 The Platform may be used by adults who have the legal capacity to enter into contracts.

4.2 Registration of a user account is mandatory only when a specific Provider requires registration for their offer; in this case, a Guest without an account cannot complete a reservation or purchase with that Provider. In all other cases, account registration is merely an option and not a condition for using the Platform. Where a Guest creates an account, they are obliged to provide true, accurate, and complete information and to keep it updated.

4.3 The Guest is solely responsible for safeguarding their access data and for all activities performed through their account. They must immediately notify the Operator of any suspicion of unauthorized use at [email protected].

4.4 The Guest undertakes not to use the Platform in violation of the law or these Terms, not to interfere with its operation or security, not to use automated means for mass bookings, and not to resell reservations, tickets, or gift vouchers without the explicit permission of the Provider.

4.5 The Operator may temporarily restrict or terminate access to the account or the Platform if the Guest violates these Terms or the law, or if it is necessary for the security of the Platform, other Guests, or Providers.

5. Conclusion of Contract and Reservation Process

5.1 The Guest selects a Provider and the desired service through the Platform and submits a reservation or order following the steps displayed by the Platform. Before the final submission, the Guest is shown the essential details of the offer, including the price (where fixed in advance) and the applicable Provider's Terms.

5.2 By submitting a reservation or order, the Guest makes an offer to the Provider. The contract is concluded when the Provider (or the Platform on their behalf) confirms the reservation, typically via an electronic confirmation message. The Operator forwards the confirmation to the Guest on behalf of the Provider.

5.3 The availability of slots is determined at the moment of inquiry and is based on the Provider's data; availability is not guaranteed until confirmation.

5.4 The Guest agrees to receive confirmations, changes, reminders, and cancellations of reservations electronically (email, SMS, or push notifications, as agreed).

5.5 The essential characteristics of the service, the identity of the Provider, and the terms relating to the specific offer are determined by the Provider and are displayed at the time of reservation. In the event of a discrepancy between the general description on the Platform and the specific Provider's Terms, the latter shall prevail.

6. Waiting List

6.1 When an individual Provider enables the waiting list feature and the selected slot is already booked or unavailable, the Guest can place themselves on the waiting list for that slot.

6.2 Placement on a waiting list is not a reservation. Placement on the waiting list does not in itself constitute a reservation, does not guarantee the availability of the slot, and does not create a contract between the Guest and the Provider. No payment obligation arises for the Guest on this basis.

6.3 If a slot becomes available, the Platform will notify the Guest electronically (usually via email) and offer them the opportunity to confirm the reservation. The release of a slot depends on the circumstances and is not guaranteed.

6.4 Deadline for confirmation. The Guest must confirm the reservation within the deadline specified in the notification. This deadline is determined dynamically based on the imminence of the slot (shorter deadline for near dates, longer for distant ones) and is in any case clearly stated in the notification (request for reservation confirmation).

6.5 Confirmation terms identical to a regular reservation. To confirm a reservation from the waiting list, the same terms apply as for a regular reservation with that Provider. If the Provider uses a prepayment method or a card authorization method for no-shows (see Chapter 7), the Guest must make the prepayment or enter and authorize a payment card upon confirmation in the same manner as for a regular reservation. The contract between the Guest and the Provider is concluded only upon this confirmation, in accordance with Chapter 5.

6.6 Missed deadline. If the Guest does not confirm the reservation within the specified deadline, the offer expires, and the slot may be offered to another Guest on the waiting list or released. The Guest incurs no obligation or cost due to an untimely confirmation.

6.7 The Guest may withdraw from the waiting list at any time in the manner provided by the Platform.

7. Prices, Reservation Methods, and Payment Processing via Stripe

7.1 Prices for services are determined by the Provider. Prices displayed to the Guest as a consumer are final and include value-added tax and all mandatory charges, displayed in Euros, unless expressly stated otherwise next to an individual offer. Any additional costs (e.g., costs of a specific service by the Provider) shall be clearly stated by the Provider before the reservation is completed.

7.2 Reservation Methods. Each Provider chooses one of three reservation methods for their offer, which is displayed to the Guest during the booking process, prior to final confirmation:

a) Reservation without a card. No payment card input is required upon reservation, no charge is made, and no prepayment or no-show rules apply. Any payment for the service is made directly to the Provider upon execution.

b) Reservation with prepayment. To confirm the reservation, the Guest pays a certain amount in advance via Stripe, which is displayed during the booking process. The payment is executed upon confirmation of the reservation. The conditions regarding prepayment, potential refunds, and cancellations are determined by the Provider and displayed during the reservation process (see Chapter 8).

c) Reservation with card authorization for no-shows. Upon reservation, no charge is made and no amount is held (reserved) on the Guest's payment card. The Guest merely enters and authorizes the payment card via a Strong Customer Authentication mechanism (3-D Secure / SCA), enabling the Provider to potentially charge a fee for a no-show or late cancellation later, strictly under the conditions set out in Chapter 8.

7.3 Consent for potential subsequent charge (method under point 7.2(c)). By authorizing the card, the Guest explicitly agrees that their authorized payment method may be charged later for the amount of the no-show or late cancellation fee, only then and solely to the extent resulting from the Provider's Terms displayed at the time of reservation. This consent does not in itself constitute a payment, prepayment, or withholding of funds at the time of reservation.

7.4 Stripe as a Payment Processor. Payments, payment authentication, and any subsequent charges are technically executed by the external payment service provider Stripe. Full payment card data is processed directly by Stripe and is neither received nor stored by the Operator. Stripe acts as an independent controller of personal data in relation to payment data, in accordance with its own terms and privacy policy.

7.5 Even in the case of prepayment (7.2(b)), the Operator does not receive or hold funds as a seller or service provider; the payment is executed via Stripe to the benefit of the Provider as the Guest's contractual partner. The Operator is not a payment institution and does not have access to full card data.

8. Provider's Cancellation and No-Show Rules

8.1 The Operator does not prescribe uniform cancellation or no-show rules. Each Provider independently determines their own cancellation notice period, late cancellation conditions, no-show rules, and the amount of any applicable fee.

8.2 The applicable Provider's Terms are displayed to the Guest at the time of reservation, before its final confirmation. By submitting a reservation, the Guest binds themselves to the specific terms of the displayed Provider.

8.3 If the Guest cancels the reservation within the deadline and in the manner specified by the Provider, no fee is generally owed, except for any costs announced by the Provider in advance. In the case of a reservation with prepayment (7.2(b)), the Guest has the right to a refund of the prepaid amount upon timely cancellation, reduced at most by any costs clearly announced by the Provider in advance.

8.4 If the Guest fails to show up at the agreed time or cancels the reservation too late (after the Provider's cancellation deadline):

a) in the case of a reservation with card authorization (7.2(c)), the Guest's authorized payment method may be charged for the amount of the no-show or late cancellation fee in accordance with the Provider's Terms;

b) in the case of a reservation with prepayment (7.2(b)), the Provider may retain the entire or a proportionate part of the prepayment as a cancellation fee (withdrawal fee) in accordance with their terms.

The amount and conditions of the fee or retention in both cases are determined exclusively by the Provider and are displayed at the time of reservation.

8.5 The Operator merely technically enables the charging mechanism and mediates on behalf of the Provider. The Operator does not decide on the justification of the charge and is not responsible for it; any objection against a charge shall be addressed by the Guest to the Provider, though the Operator may assist technically.

8.6 The no-show or late cancellation fee has the nature of a withdrawal fee or an agreed consequence of non-performance and does not prejudice any mandatory consumer rights of the Guest under applicable legislation.

9. Tickets

9.1 By purchasing a ticket, a contract is concluded directly between the Guest and the Provider (event organizer). The Operator merely technically generates and delivers the ticket on behalf of the organizer and does not act as an organizer or seller.

9.2 Event conditions, potential changes to the date/time, entry restrictions, and refund policies are determined by the organizer and are displayed at the time of purchase.

9.3 In the event of cancellation or material change of the event by the organizer (including force majeure), the Guest shall claim rights to a refund or replacement ticket directly from the organizer, in accordance with their terms and applicable legislation.

9.4 Resale of tickets without the organizer's permission is prohibited and may be grounds for ticket invalidation.

9.5 Regarding the right of withdrawal for tickets for leisure events tied to a specific date, Chapter 11 of these Terms applies.

10. Gift Vouchers

10.1 The Issuer and Obligor is the Provider. Gift vouchers are issued by the individual Provider, who also determines their content and validity. From an accounting and obligational perspective, the transaction belongs to the Provider; the Provider is the seller and the party liable for redeeming the voucher.

10.2 The Role of the Operator. The Operator merely technically generates and delivers the gift voucher in the name and for the account of the Provider. The Operator is not the issuer of the voucher, is not liable for its redemption, and does not guarantee the fulfillment of the service to which the voucher relates.

10.3 Redemption and Validity. The voucher is redeemed with the Provider who issued it, in accordance with the stated validity and conditions. The validity period must be clearly stated at the time of purchase.

10.4 Protection of Voucher Value. The prepaid value of a gift voucher must not be unfairly forfeited. In accordance with Slovenian and EU consumer legislation, any conditions regarding validity and redemption shall be interpreted in favor of the consumer; unfair terms that would unjustifiably deprive the consumer of the paid value shall have no effect.

10.5 Any claims regarding the gift voucher (redemption, validity, refund of value) shall be asserted by the Guest against the Provider as the issuer.

11. Right of Withdrawal and Exceptions

11.1 For contracts concluded at a distance, the consumer generally has the right to withdraw from the contract within 14 days without giving any reason, in accordance with the Consumer Protection Act (ZVPot-1) and the Consumer Rights Directive. However, since the service contract is concluded directly with the Provider, the right of withdrawal must be exercised against the Provider.

11.2 Statutory Exceptions to the Right of Withdrawal. The 14-day right of withdrawal does not apply in particular to the following cases, which are common in these types of reservations:

a) catering services and the supply of food and beverages – as this is a service tied to a specific date/time or involves perishable goods;

b) accommodation services not intended for permanent residential purposes;

c) leisure services tied to a specific date or period of performance (e.g., events, experiences, admission tickets for events on a specific day).

11.3 It follows from the above, classified by individual types of reservations:

• Table reservation / catering service: the right of withdrawal generally does not apply (points a and c). The Provider's cancellation and no-show rules from Chapter 8 apply.
• Experience or event on a specific date: the right of withdrawal generally does not apply (point c).
• Ticket for an event on a specific day: the right of withdrawal generally does not apply (point c). By confirming the purchase, the Guest acknowledges that they are informed of this.
• Gift voucher: the right of withdrawal may apply as long as the voucher has not been redeemed or tied to a specific service on a specific date; if the voucher is personalized or tied to a concrete slot, it may be exempted. The specific assessment is made by the Provider as the issuer.
• Service without a binding specific date: where the service is not tied to a specific date/time, the 14-day right of withdrawal may apply; in this case, the Guest exercises it against the Provider.

11.4 If, for a service tied to execution within the 14-day period, the Guest explicitly agrees to the commencement of performance before the expiry of the withdrawal period and confirms this, they may lose the right of withdrawal or pay a proportionate part of the price for the service already performed, in accordance with ZVPot-1.

11.5 The stated exceptions derive from the law and are not determined by the Operator; in case of doubt and regarding a specific offer, the information provided by the Provider at the time of reservation shall apply.

12. Guest Obligations and Acceptable Use

12.1 The Guest undertakes to use the Platform fairly and in compliance with the law, to provide accurate information, and to respect the Provider's Terms accepted upon reservation.

12.2 The Guest is obliged to inform the Provider in a timely manner, prior to submitting the order, about any allergies, intolerances, or special requests. The Provider is responsible for allergen information and adjustments.

12.3 The Guest must not: submit false or malicious reservations, make mass bookings via automated means, resell reservations, tickets, or vouchers without permission, or interfere with the security or operation of the Platform.

12.4 Violation of these obligations may be grounds for cancellation of reservations, restriction of access to the Platform, and for enforcement of damage claims by the Provider or the Operator in accordance with the law.

13. Reporting Illegal or Contentious Content

13.1 A Guest or a third party may notify the Operator of an offer, content, description, image, link, or other information on the Platform that they believe is illegal, misleading, or violates the rights of third parties, at [email protected].

13.2 The report should contain a description of the contentious content, its location or link, the reasons why it is contentious, and the contact details of the reporter.

13.3 Upon receiving a report or on its own initiative, the Operator may temporarily restrict, hide, or remove manifestly illegal or contentious content, acting proportionately and in accordance with applicable legislation, including the rules of the Digital Services Act (DSA), where applicable. When a report relates to content provided by a Provider, the Operator may forward it to that Provider.

14. Limitation of Liability and Disclaimer of Warranties

14.1 Since the Operator acts exclusively as an intermediary and is not the performer of the service, it is not liable for the execution, quality, safety, or legality of the Providers' services, nor for their business decisions (prices, cancellations, refunds, no-show rules).

14.2 The Operator is liable without limitation:

a) for intent and gross negligence;

b) for damages resulting from injury to life, body, or health;

c) in accordance with mandatory provisions on product liability;

d) when it has explicitly given a guarantee.

14.3 In the event of slight negligence, the Operator is liable only for the breach of essential contractual obligations (those whose fulfillment makes the execution of the contract possible in the first place and on whose fulfillment the Guest reasonably relies), whereby liability is limited to typical and foreseeable damage.

14.4 To the remaining extent, the Operator's liability is excluded to the maximum extent permitted by applicable law.

14.5 These limitations also apply to the legal representatives, employees, and contractual partners of the Operator. No provision of these Terms limits the mandatory consumer rights of the Guest under statutory law.

14.6 The Operator makes reasonable efforts to ensure the smooth operation of the Platform, but does not guarantee its uninterrupted availability, compatibility with all devices, or the absence of errors. Access to the Platform requires an internet connection, the costs of which are borne by the Guest.

15. Intellectual Property

15.1 All intellectual property rights on the Platform (software, design, texts, trademarks, logos, databases) belong to the Operator or its licensors. Content provided by the Provider remains the property of the Provider.

15.2 The Guest is permitted to use the Platform exclusively for their own, non-commercial needs within the framework of these Terms. Without prior written permission, it is prohibited to copy, reproduce, distribute, modify, or otherwise commercially use the content of the Platform.

16. Protection of Personal Data

16.1 The processing of personal data is comprehensively regulated in a separate Privacy Policy. These Terms do not replace the Privacy Policy and do not contain a comprehensive regulation of personal data protection.

16.2 Roles in the processing of personal data vary depending on the purpose of processing:

• The Operator processes the Guest's personal data for the purpose of the Platform's operation (e.g., account management, mediation of reservations, technical support, security). For these purposes, the Operator acts as a data controller within the meaning of the General Data Protection Regulation (GDPR).
• Individual Providers process Guests' personal data for their own purposes (service execution, contract fulfillment, invoicing) as independent data controllers, under their own terms and privacy policies.
• Payment service providers, including Stripe, act as independent controllers in relation to payment and card data.

16.3 Details on legal bases, retention periods, data subject rights (access, rectification, erasure, restriction, portability, objection) and how to exercise them are defined in the Privacy Policy.

17. Applicable Law and Jurisdiction

17.1 These Terms and the relationship between the Guest and the Operator shall be governed by the laws of the Republic of Slovenia, taking into account the law of the European Union.

17.2 If the Guest, as a consumer, has their habitual residence in another EU member state, they retain the protection afforded to them by the mandatory provisions of the law of the country of their habitual residence.

17.3 For the resolution of disputes, the court with material and territorial jurisdiction in the Republic of Slovenia shall be competent, without prejudice to the consumer's right to initiate proceedings before a court in their country of residence where provided by a mandatory regulation.

18. Amendments to the Terms

18.1 The Operator may update these Terms from time to time due to changes in legislation, the operation of the Platform, or business reasons. The updated version becomes effective upon publication on the Platform.

18.2 For each individual reservation, purchase, or other transaction, the Terms in force at the moment of that transaction shall apply. Material changes will be announced in advance by the Operator in an appropriate manner; continued use of the Platform after the changes take effect constitutes consent to them.

19. Final Provisions

19.1 If any individual provision of these Terms is found to be invalid or unenforceable, this shall not affect the validity of the remaining provisions. The invalid provision shall be replaced by a valid provision that comes closest to its intent.

19.2 The Operator may transfer its rights and obligations under these Terms to a third party, provided that this does not deteriorate the position of the Guest.

20. Provider's Contact Information

• Name: DOM TRADE, D.O.O.
• Registered office: Zgornje Rute 9, Kranjska Gora
• Tax number: SI15830560
• Email: [email protected]

For questions and complaints regarding the operation of the Platform (technical issues, user account, reservation process), the Guest may contact the Operator at [email protected]; the Operator endeavors to respond within a reasonable timeframe.

For questions and claims regarding the performance of the service, invoicing, refunds, or cancellations, the Guest shall contact the individual Provider directly as their contractual party.

1. Introduction and controller details

1.1 This privacy policy (hereinafter: the “Policy”) explains how the personal data of individuals (hereinafter: the “Guest” or “you”) is processed when using the online platform for reservations and related services operating under the name VENUO (hereinafter: the “Platform” or “VENUO”).

1.2 The operator of the Platform and the controller of personal data for the purposes of operating the Platform is:

• Name: ENJOI d.o.o.
• Registered office: Mlinska ulica 26, 2000 Maribor, Slovenia
• Company registration number: 8767513000
• Tax / VAT identification number: SI69310122
• Contact e-mail: [email protected]
• (hereinafter: the “Controller” or “we”)

1.3 This Policy is a separate document from the VENUO Platform General Terms of Use. Where the General Terms of Use refer to the processing of personal data, this Policy applies.

1.4 Personal data is processed in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter: the “GDPR”), the Personal Data Protection Act (ZVOP-2), and other applicable legislation.

2. VENUO’s role and allocation of responsibility

2.1 VENUO as an intermediary. VENUO acts as a technical intermediary that connects Guests with independent service providers (restaurants, venues, event organisers, gift voucher issuers and other providers; hereinafter: the “Provider”). The contract for the actual service is concluded directly between the Guest and the Provider.

2.2 VENUO as a controller. For the processing necessary to operate the Platform (in particular managing the user account, transmitting reservations and orders, the waiting list, transmitting transactional messages, security and the prevention of abuse), the controller of personal data is VENUO.

2.3 The Provider as an independent controller. For the processing of personal data necessary to perform the ordered service (performance of the contract, issuing the invoice, keeping its own records, any of the Provider’s own marketing), the controller of personal data is the individual Provider. The Provider processes such data under its own terms and its own privacy policy, over which VENUO has no influence.

2.4 The payment service provider as an independent controller. Payments and payment authorisation are carried out technically by the external payment service provider Stripe (Stripe Payments Europe, Ltd. or an affiliated company), which acts as an independent controller with regard to payment and card data. Details are set out in Stripe’s privacy policy.

2.5 VENUO is not a joint controller with Providers. Data processed for an individual Provider is handled separately and is not accessible to other Providers.

3. Which personal data is processed

3.1 Identification and contact data. To carry out a reservation, order or purchase, even without registering a user account, the Guest’s first and last name, e-mail address and telephone number are processed. This data is necessary to conclude and perform the intermediated reservation and for related communication; without it, the reservation or purchase cannot be carried out.

3.2 Account data. Where the Guest creates a user account, in addition to the data referred to in point 3.1, the password in encrypted form and the account settings and preferences are processed.

3.3 Reservation, waiting list, ticket and gift voucher data. Data that the Guest enters or that arises upon a reservation, order or placement on a waiting list: the selected Provider, the date and time of the appointment, the number of persons, the contents of the order, any notes, and any special requests communicated, including data on allergies or intolerances where the Guest provides them. For tickets and gift vouchers, the data necessary for their generation and delivery on behalf of the Provider is also processed (e.g. recipient, code, validity).

3.4 Payment data. For a reservation with prepayment or with card authorisation for the event of a no-show, the payment or authorisation is carried out via Stripe. VENUO does not receive, see or store the full payment card data; this is stored exclusively by Stripe. VENUO may process only the token of the payment method, generated by Stripe, which does not itself reveal card data, as well as the transaction status (e.g. confirmed, authorised, failed) and the amount.

3.5 Communication data. The e-mail address and telephone number used to send transactional messages (confirmations, changes, reminders and cancellations of reservations) and any communication with user support.

3.6 Technical data. IP address, device and browser data, system logs, and data collected via cookies in accordance with Chapter 9 of this Policy.

3.7 Data upon a report of disputed content. Where a Guest or a third party reports unlawful or disputed content, the data from the report is processed (description, the reporter’s contact details where provided).

3.8 Source of data. VENUO generally obtains personal data directly from the Guest. Exceptionally, it may obtain it from the person who makes the reservation on the Guest’s behalf (e.g. a co-named guest in the same reservation), or from the Provider to the extent necessary to intermediate the reservation.

4. Purposes and legal bases of processing

4.1 Provision of the Platform service and pre-contractual measures. Managing the account, transmitting reservations, orders and the waiting list, generating and delivering tickets and gift vouchers on behalf of the Provider, processing the payment method token and the transaction status in order to carry out prepayment or authorisation and any subsequent charging of the no-show fee under the Provider’s terms, and sending transactional messages. Legal basis: performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR).

4.2 Security and the prevention of abuse. Processing of technical data to ensure security, stability, the prevention of fraud and abuse, and the proper functioning of the Platform. Legal basis: legitimate interest (Article 6(1)(f) GDPR).

4.3 Legal obligations. Fulfilment of obligations imposed by law (e.g. responding to requests from competent authorities). Legal basis: legal obligation (Article 6(1)(c) GDPR). Accounting and tax obligations relating to an individual service are borne by the Provider as the seller.

4.4 Analytics. Where analytics cookies or similar technologies are used, they are used on the basis of consent. Legal basis: consent (Article 6(1)(a) GDPR).

4.5 No marketing by VENUO. VENUO does not use Guests’ personal data for its own direct marketing, does not combine it into marketing profiles, does not monetise it and does not sell it. VENUO uses the e-mail address and telephone number solely for the transmission of transactional messages and communication related to the reservation. Any marketing by the Provider is the sole responsibility of the Provider and is based on the Provider’s own legal basis.

4.6 No automated decision-making. In processing personal data, VENUO does not carry out automated decision-making, including profiling, that produces legal or similarly significant effects on the Guest within the meaning of Article 22 GDPR.

4.7 Children. The Platform is intended for adults and is not directed at minors. VENUO does not knowingly collect the personal data of minors. If VENUO determines that an account has been created or a reservation has been made by a minor without an appropriate basis, it will delete such data.

4.8 Anonymised data for analytics and statistics. VENUO may anonymise personal data so that the individual can no longer be identified, and use such anonymised data for analytical and statistical purposes (e.g. measuring usage, improving the Platform, aggregated reports). In accordance with Recital 26 GDPR, anonymised data is not considered personal data, and its use does not fall within the scope of this Policy. The anonymisation process is designed to be irreversible; anonymised data is not re-combined with an individual’s identification data.

5. Encryption and data security

5.1 Personal data is stored in encrypted form. VENUO implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or misuse, including encryption of data at rest, access controls and regular security monitoring.

5.2 Despite diligent measures, no system of data transmission or storage is completely secure, and therefore absolute security cannot be guaranteed.

5.3 In the event of a personal data breach that would pose a risk to the rights and freedoms of individuals, VENUO acts in accordance with the notification obligations under Articles 33 and 34 GDPR.

6. Data retention

6.1 Personal data is retained only for as long as necessary for the purposes for which it was collected.

6.2 Account data is retained for as long as the account is active; after deletion of the account, it is deleted or anonymised, except for data that must be retained for legal reasons or for the establishment or defence of legal claims.

6.3 Data on an individual reservation is retained by VENUO for the period necessary to carry out the intermediation and for any dispute resolution; any longer retention related to the performance of the service and to statutory obligations (e.g. accounting) is carried out by the Provider as an independent controller.

6.4 Consent data (e.g. for analytics) is retained for as long as necessary to demonstrate the lawfulness of the consent and is deleted upon its withdrawal, except where further retention is required by law.

7. Disclosure and recipients of data

7.1 Personal data may be disclosed only to the following categories of recipients and only to the extent necessary for the stated purpose:

a) to the individual Provider with which the Guest makes a reservation, purchase or other action, as an independent controller;

b) to the payment service provider Stripe for the execution of payment or payment authorisation;

c) to processors that provide IT infrastructure, hosting, communication or e-mail services and technical support to VENUO, on the basis of a data processing agreement under Article 28 GDPR;

d) to competent authorities where required by law.

7.2 VENUO does not sell personal data and does not disclose it to third parties for their own marketing purposes.

8. Location of processing and international transfers

8.1 Personal data is processed and stored within the European Union or the European Economic Area (EU/EEA).

8.2 VENUO generally does not transfer personal data to third countries outside the EU/EEA. Should such a transfer exceptionally occur (e.g. due to a change of processor), it will be carried out only with appropriate safeguards in accordance with Chapter V GDPR (e.g. standard contractual clauses or an adequacy decision).

9. Cookies and similar technologies

9.1 Strictly necessary cookies. The Platform uses cookies that are strictly necessary for its operation, security and basic functions. These are used without consent, in accordance with the ePrivacy rules and the Electronic Communications Act (ZEKom-2).

9.2 Analytics cookies. To understand the use of the Platform and to improve it, VENUO uses analytics cookies only on the basis of consent of the Guest. VENUO itself does not use advertising cookies; however, an individual Provider may enable its own third-party analytics or marketing cookies for its offer (e.g. Google Analytics, Google Tag Manager or the Facebook Pixel), which are likewise loaded only on the basis of the Guest’s consent. Details are set out in the Cookie Policy.

9.3 Managing consent. The Guest may give, change or withdraw consent for non-essential cookies at any time via the cookie settings on the Platform or the browser settings. If certain cookies are disabled, some functions may not work properly.

10. Rights of the individual

10.1 With regard to personal data for which VENUO is the controller, the Guest has the right to:

a) access to personal data and a copy of the data;

b) rectification of inaccurate or incomplete data;

c) erasure of data under the conditions set out in the GDPR;

d) restriction of processing;

e) data portability;

f) object to processing based on legitimate interest;

g) withdraw consent where processing is based on consent, whereby the withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10.2 The Guest exercises rights regarding data for which VENUO is the controller at the address [email protected]. VENUO responds to a request without undue delay and at the latest within one month of receipt of the request; this period may be extended having regard to the complexity and number of requests, in accordance with Article 12(3) GDPR, of which VENUO will inform the Guest.

10.3 Rights regarding data processed by an individual Provider as an independent controller (performance of the service, issuing the invoice, the Provider’s own marketing) are exercised by the Guest directly with that Provider. Rights regarding payment data are exercised with Stripe.

11. Amendments to the Policy

11.1 VENUO may update this Policy from time to time due to legislative, technical or business changes. The updated version takes effect upon publication on the Platform. Each processing is governed by the version of the Policy in force at the time of that processing.

12. Contact

For questions regarding this Policy or to exercise rights in relation to processing for which VENUO is the controller, the following e-mail is available: [email protected].

For questions regarding processing related to the performance of the service, the issuing of the invoice or the Provider’s marketing, the Guest should contact the individual Provider directly as the independent controller.

1. Introduction

1.1 This cookie policy explains which cookies and similar technologies are used by the online platform operating under the name VENUO (hereinafter: the “Platform” or “VENUO”), for what purpose, and how the user (hereinafter: the “Guest”) can manage their consent.

1.2 The processing of personal data arising in connection with cookies is set out in more detail in the Privacy Policy.

1.3 Cookies are small text files that a website stores on the Guest’s device. Similar technologies include device IDs, pixel tags and web beacons, which enable a device to be recognised and certain information to be stored or read.

1.4 Some cookies last only for the duration of a single session and expire when the browser is closed, while others remain stored for longer so that the Platform can remember settings or recognise the Guest on a return visit.

2. Consent and legal basis

2.1 Strictly necessary cookies are used without consent, as they are necessary for the operation, security and basic functions of the Platform, in accordance with the ePrivacy rules and the Electronic Communications Act (ZEKom-2).

2.2 Analytics and marketing cookies and other technologies that are not strictly necessary are loaded only after the Guest’s consent. Such cookies are not loaded before consent is given. The legal basis is consent (Article 6(1)(a) GDPR).

2.3 The Guest may give, change or withdraw consent at any time via the cookie settings on the Platform. Withdrawing consent is as easy as giving it and does not affect the lawfulness of processing carried out before the withdrawal.

3. Strictly necessary cookies

3.1 These cookies are necessary for the operation of the Platform, its security and the provision of services explicitly requested by the Guest. They are used without consent.

4. Analytics cookies

4.1 These cookies allow us to recognise and count visitors and to understand how the Platform is used, which helps us improve its operation. They are loaded only on the basis of the Guest’s consent.

5. Provider marketing cookies

5.1 VENUO itself does not use advertising cookies. Where an individual Provider enables the Facebook (Meta) Pixel for its offer, the marketing cookies below may be loaded, and only on the basis of the Guest’s consent. The Provider, or Meta as an independent controller, is responsible for the use of the Pixel and the related processing.

6. Analytics and tags enabled by the Provider (Google Analytics / Google Tag Manager)

6.1 An individual Provider may enable its own web analytics for its offer via Google Analytics (GA4) and/or Google Tag Manager (GTM). In that case, additional analytics cookies and similar technologies belonging to the Provider’s own account or container may be loaded.

6.2 Because these cookies are tied to the account of an individual Provider, their names, identifiers and expiry periods vary by Provider and cannot be listed exhaustively in advance. They are typically cookies of the Google Analytics family (e.g. _ga, _ga_*) and any additional tags that the Provider configures in its GTM container.

6.3 These technologies are loaded only on the basis of the Guest’s consent and are not triggered before it. The legal basis is consent (Article 6(1)(a) GDPR).

6.4 For this analytics, the controller of personal data is the individual Provider, which determines its purposes and provides its own legal basis and notices to individuals. VENUO merely technically enables the collection and transmission of data on behalf of the Provider; VENUO does not use data from the Provider’s analytics for its own purposes. The Guest exercises rights in relation to this processing directly with the Provider.

7. Managing and disabling cookies

7.1 The Guest may change or withdraw consent for analytics and marketing cookies at any time via the cookie settings on the Platform.

7.2 Cookies can also be managed and deleted via the web browser settings. Instructions vary depending on the browser and are available in the help sections of each browser (Google Chrome, Mozilla Firefox, Safari, Microsoft Edge, Opera and others).

7.3 If certain cookies are disabled, some functions of the Platform may not work properly.

8. Amendments to the policy

8.1 We may update this cookie policy from time to time due to legislative or technical changes. The updated version takes effect upon publication on the Platform.