Privacy policy

Who processes the data

Sole proprietor (FOP)

Riabko Illia Olehovych

Email

hello@plan-wise.org

This site, plan-wise.org

The site sets no cookies, has no visit counters, advertising or third-party scripts, and has no forms. Its fonts and images are served from our own server.

The site is hosted on Cloudflare. Like any host, Cloudflare processes the technical data of each request (IP address, browser type, time) to deliver the page and protect it from attacks. We see only aggregate visit statistics, without IP addresses.

Pilot applications and correspondence

When you email us we receive what you put in the email: your name, email address, telephone number and details of your venue.

The purpose is to reply and prepare an offer. The basis is your request and steps taken at your request before a contract (Art. 6(1)(b) GDPR); under Ukrainian law you give your consent by sending the email.

Email for plan-wise.org is provided by Google Workspace. We keep the correspondence while the discussion lasts, and no longer than 12 months after the last email if no contract is signed.

A business account in PlanWise

To run the account at dashboard.plan-wise.org we process your email address, your password (only as an irreversible Argon2id hash: we never know the password itself), details of your business and venues, and a log of actions in the account: who changed what, and when.

The account uses one strictly necessary cookie: the sign-in session. Staying signed in is impossible without it, so it needs no consent.

The purpose is to provide the service under contract (Art. 6(1)(b) GDPR). The data and the action log are kept while the account exists. To delete the account and its data, email us: we delete them within 30 days, except what the law requires us to keep longer, such as accounting records.

Guests who book through PlanWise

When a guest books a place through the widget on a venue’s website, the venue is the controller of the guest’s personal data. PlanWise processes that data on the venue’s behalf and only for the booking. Ask the venue about such data; its own privacy policy prevails.

The venue, as the controller, decides how long bookings are kept.

Who receives the data

We do not sell personal data and do not share it for advertising. Only the providers the service cannot run without process it:

• Google Cloud: servers and the database, region europe-west1 (Belgium, EU);
• Amazon Web Services: venues’ plan files, region eu-central-1 (Frankfurt, EU);
• Cloudflare: delivering the site and the widget, attack protection, sending service emails;
• Google Workspace: email for plan-wise.org;
• the payment provider a venue connects: only to take payment for a booking.

Your rights

Under Article 8 of the Law of Ukraine "On Personal Data Protection" you have the right to know which of your data is processed, where, for what purpose and who receives it; to access it; to have it corrected or deleted; to object to processing; and to withdraw consent. Visitors from the EU also have the rights to restriction of processing and to data portability (Articles 15–21 GDPR).

To exercise a right, email the seller’s address given below. We reply within 30 days.

You may complain to the Ukrainian Parliament Commissioner for Human Rights, to a court, or, in the EU, to your country’s data protection authority.

Changes to this policy

If we change how data is processed, we update this page and the date at its top. We tell account holders about significant changes by email.