Data Privacy
Is Locaboo GDPR-compliant?
Section titled “Is Locaboo GDPR-compliant?”Yes. Locaboo meets the requirements of the EU General Data Protection Regulation (GDPR). All data is stored and processed in German data centres.
Data processing agreement (DPA)
Section titled “Data processing agreement (DPA)”The data processing agreement (DPA) governs the processing of personal data by Locaboo on your behalf. The DPA does not need to be signed separately—it forms part of the general terms and conditions and takes effect automatically when you use Locaboo.
Retention periods
Section titled “Retention periods”Different types of information are stored in your Locaboo account. The following retention periods apply:
| Data type | Period |
|---|---|
| Notifications and activities | 2 years |
| Communication data | 2 years |
| Booking data | 10 years |
| Billing data (e.g. invoices, quotes, payments) | 10 years |
| Contracts (via the Contract Manager) | 10 years |
| Customer data (created manually via customer management) | 10 years |
| Customer data (guest booking via platform) | configurable under Settings > Booking > Privacy |
| Backups | 7 days retrospectively, monthly for 10 years |
In the event of contract termination, all data is deleted within 6 months in coordination with you.
Sub-processors and third-party providers
Section titled “Sub-processors and third-party providers”Locaboo distinguishes between sub-processors and third-party providers:
| Type | Description |
|---|---|
| Sub-processors | Companies that process data on behalf of Locaboo (e.g. hosting providers). They are subject to the same privacy requirements as Locaboo itself. |
| Third-party providers | External services you connect yourself (e.g. payment providers such as Mollie or PayPal). The respective provider’s privacy terms apply. |
GPS check-in and privacy
Section titled “GPS check-in and privacy”The GPS check-in feature allows customers to confirm check-in using their device location. The following privacy rules apply:
- Location data is collected only at the moment of check-in.
- There is no continuous location tracking.
- Customers must actively consent to sharing location in the browser.
- Location data is not stored—only whether the customer is within the defined radius of the resource is checked.
Paid additional services in the area of privacy
Section titled “Paid additional services in the area of privacy”For special privacy requirements (e.g. individual data protection impact assessments, extended audit requirements), additional costs may apply. Contact Locaboo support to discuss your needs.
Terms and liability
Section titled “Terms and liability”Section 11 of the terms and conditions governs Locaboo’s limitation of liability. This does not constitute a disclaimer of liability regarding data protection. Locaboo remains liable within the statutory framework for the proper processing of personal data in accordance with the GDPR and the DPA.
Privacy settings in Locaboo
Section titled “Privacy settings in Locaboo”The following areas in Locaboo are relevant for privacy:
| Area | Description |
|---|---|
| Settings > Booking > Privacy | Privacy settings for the booking process. |
| Settings > Platform / Widgets > Legal information | Privacy policy, terms, and right of withdrawal for the platform. |
| Settings > Customer registration | Required fields and data collected during customer registration. |
| Profile settings > Tracking | Web analytics opt-out for individual users. |