Privacy Policy | Serviska.eu

This is a courtesy translation. In case of any discrepancy, the Czech version of this Privacy Policy prevails.

Personal Data Processing and Protection Policy

We protect all personal data and treat it as strictly confidential. We handle it exclusively in accordance with applicable legal regulations and only for the purposes for which it was collected.

This document provides you with basic information on how we process personal data, together with an overview of the rights you have in this regard.

1) Who is the controller?

The controller of your personal data is Jakub Černý, Company ID: 878 529 00, with its registered office at Machuldova 576, Prague 4 (hereinafter the “Controller”). You can contact the Controller by e-mail.

Personal data is handled on the Controller’s behalf only by authorised persons – employees or contractual partners – and exclusively in the performance of tasks related to the operation of our digital services. These persons work with the data only to the extent necessary and are bound by a statutory or contractual duty of confidentiality.

We apply the principle of minimum access:

Only those persons who genuinely need personal data for their work have access to it.
All authorised persons are regularly trained in personal data protection.
We process only the data necessary for the specific purpose.
Based on the personal data obtained, the Controller may recommend services or products related to the data provided by the user (e.g. vehicle maintenance tips).

2) Personal data

Personal data means any information which, alone or in combination with other data, makes it possible to identify a specific natural person directly or indirectly.

Within the Serviska.eu services, this typically concerns:

Customers – natural persons who use the Serviska.eu application to manage the maintenance of their vehicles, as well as potential customers or persons interested in our services.
Professionals – for example mechanics, technicians and other providers of services in the field of vehicle diagnostics, maintenance and repairs.
Clients – persons to whom our services are provided directly or through other partners.
Persons whose data has been provided to us – for example contact persons named in contracts, owners or keepers of vehicles or accounts.
Employees and business partners of the Controller – including their authorised representatives or employees.
Persons acting on behalf of public authorities – where legal regulations require the disclosure or provision of data.

3) What personal data we process

Basic identification data

first name, surname, title, gender, date of birth, birth number, marital status,
address of permanent or temporary residence, delivery address,
identity card, passport or residence permit number,
company identification number (IČO) and tax identification number (DIČ).

Contact details

telephone number, e-mail address, data box number,
agents for service of documents, representatives, social network profiles.

Technical and operational data

network identifiers and designations (e.g. IP address, device ID, user profiles),
records of activity in the application (logins, operations, commands, timestamps),
data about the device and browser used.

Payment data

bank account details, data on payment instruments and cards,
data related to invoicing and accounting.

Data related to the provision of services

data on contractual performance and the subject of performance,
data from communication with us (e-mail, telephone, in-app messages),
photographs, documentation of vehicles and maintenance performed,
service ratings and reviews.

4) How we obtain personal data

Data provided directly by you

Registration and use of the Serviska.eu web application – for example by completing registration forms, entering vehicle data, a maintenance plan or other service records.
Communication with us – in person, by telephone, by e-mail, through in-app chat, website forms or by other means.
Conclusion of contracts and orders for services.
Completion of satisfaction questionnaires or provision of a review.

Data from our contractual partners and professionals

From authorised service technicians, mechanics and other professionals who, on the basis of a contract with the Controller, have access to the application and enter data with your consent.

Data obtained automatically when you use our services

Technical information – IP address, device type, operating system, application version, browser used.
Activity records – logins, operations performed, commands entered, timestamps.
Information collected through cookies and similar technologies.

5) Purposes of personal data processing

Compliance with legal obligations

keeping accounting and tax records,
retention of documents under tax and accounting legislation (usually for a period of 10 years),
obligations in the area of social security and health insurance,
providing cooperation to public authorities, courts and law enforcement authorities.

Performance of contracts and provision of services

creation and administration of a user account in the Serviska.eu application,
provision of services associated with the proper operation of the application,
keeping and managing data on vehicles and maintenance performed,
communicating with you and handling your requests,
handling complaints, service and technical requests.

Legitimate interests of the Controller

ensuring the security and protection of our systems and data,
protection of the rights and legitimate interests of the Controller (including debt recovery),
monitoring and optimising the operation of the application in order to improve the user experience,
evaluating statistics and measuring service performance.

Marketing and promotion (only on the basis of consent)

sending newsletters and commercial communications,
offering tailored services or products,
displaying personalised content in the application or on the website.

You may withdraw your consent at any time.

6) Data processing by means of artificial intelligence

The Serviska.eu application uses artificial intelligence (AI) technologies for the automatic recognition and extraction of data from photographs uploaded by users. This function serves to simplify data entry and is available in the paid versions of the application.

Purpose of processing

Automatic text recognition (OCR) from photographs of refuelling receipts — extraction of data on the date, amount, quantity of fuel and name of the filling station.
Automatic recognition of the odometer/mileage reading from photographs — extraction of the vehicle’s current mileage.

Scope of the data processed

Photographs taken by the user (receipts, odometers).
Data contained on the receipts (date, amount, name of the seller, purchased items).
Data on the vehicle’s mileage.

Recipient and processor

For the purposes of automatic text recognition from photographs we use the services of Google LLC (Gemini API), with its registered office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, as a processor of personal data within the meaning of Article 28 of the GDPR. A Data Processing Agreement has been concluded with the processor.

Legal basis for processing

The processing is carried out on the basis of Article 6(1)(b) of the GDPR — processing is necessary for the performance of a contract to which the data subject is a party. The user uploads photographs voluntarily in order to make use of the automatic recognition function.

Transfer of data to a third country

For processing purposes, photographs are transferred to Google’s servers. The transfer to the USA is carried out on the basis of the European Commission’s adequacy decision under the EU-US Data Privacy Framework (decision of 10 July 2023).

Retention period

Photographs are transferred to the processor solely for the purpose of one-off processing (text recognition). After processing, the processor does not retain the photographs and does not use them to train AI models. The extracted data (text) is retained in the application for the duration of the user account.

Automated decision-making

The results of automatic recognition are always displayed to the user for manual review and adjustment before being saved. This does not constitute automated decision-making within the meaning of Article 22 of the GDPR that would produce legal effects or similarly significantly affect the data subject.

7) Personal data retention periods

Accounting and tax documents – 10 years from the end of the accounting period.
Data processed for the performance of contracts – for the duration of the contractual relationship and for at least 5 years from the moment it was obtained.
Data on service operations – for the duration of the account and 3 years after its cancellation.
Data processed for legitimate interest – for a maximum of 3 years from the moment it was obtained.
Data processed on the basis of consent – for the period of validity of the consent granted or until it is withdrawn; for marketing purposes for a maximum of 3 years.
Satisfaction questionnaires – for a maximum of 6 months from the time they were provided.

8) Rights of data subjects

As a user (data subject) you have the following rights under the GDPR:

Right of access to personal data – you have the right to know whether and what personal data of yours we process.
Right to rectification – if you find that we process inaccurate or incomplete data, you have the right to request its rectification.
Right to erasure – you may ask us to erase your personal data if it is no longer necessary for the purposes for which it was collected.
Right to restriction of processing – you have the right to request restriction of processing in certain cases.
Right to data portability – you have the right to receive your personal data in a structured, commonly used and machine-readable format.
Right to object – if we process your personal data on the basis of a legitimate interest, you have the right to object to such processing at any time.
Right to lodge a complaint – you may lodge a complaint with the supervisory authority: Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, web: www.uoou.cz

9) Further processing of the personal data received

Categories of recipients of personal data:

Our employees – only to the extent necessary for the performance of their work.
Contractual processors – providers of IT services, hosting, application maintenance, payment gateways, accounting and tax services, customer support.
AI service provider – Google LLC (processing of photographs by means of artificial intelligence for the purposes of automatic text recognition).
Business partners – service technicians, insurance companies, technical inspection stations.
Public authorities – where required by legal regulations.

We do not process or transfer personal data outside the European Union unless an adequate level of protection under the GDPR is ensured.

10) Further information

Profiling and automated decision-making
Within the AI scanning function, photographs are processed automatically in order to extract textual data. The results are always submitted to the user for review and adjustment — this does not constitute automated decision-making with legal or similarly significant effects within the meaning of Article 22 of the GDPR.

Security of personal data
We apply technical and organisational measures appropriate to the risks associated with the processing of personal data: encryption of data transmission, access and permission management, regular updates of software and systems, training of persons with access to the data.

Place of data processing
We process your personal data primarily within the territory of the Czech Republic and other European Union states. Where the AI scanning function is used, photographs are temporarily processed on the servers of Google LLC under the EU-US Data Privacy Framework.

Effective date
This Personal Data Processing Policy is effective as of 10 February 2026.