Privacy policy
What data we process about you, why we need it, and how we handle it.
Who is the controller of your data
The JammClub Praha club is operated by SBCS s.r.o., Company ID 27075630, VAT ID CZ27075630, with registered office at Keltská 331, 252 62 Statenice. This company is the controller of the personal data you entrust to us. The club itself is located at Pod Kaštany 183/3, 160 00 Praha 6. For anything related to personal data, please contact us at jammclubpraha@gmail.com.
What data we process and why
Event inquiries and bookings
When you send a non-binding inquiry or booking through our website, we process your name, e-mail, phone number, requested date and description of the event. We need this to reply to you, arrange the details and prepare the event. The legal basis is contract negotiation and its subsequent performance.
Tickets
For ticket orders, we process your name, e-mail and order details. This is used to issue and deliver the ticket and to keep track of payments. Payments are collected by the event organizer; we do not store any payment details.
Daytime club bookings
We grant regular customers access to hourly bookings of our space. For these, we keep their name, e-mail, phone number and an overview of their bookings. Access is provided via a personal link that also serves as login, so please don't share it.
Sign up for Jamm Band Club
When you sign up for the Jamm Band Club, we process your name, email, phone number, year of birth (just to confirm you're an adult), what you play or sing, and how you heard about us. We need this to sign you up for an evening, send you payment details, and call you the day before the event. The application includes two separate consents: consent to being recorded (mandatory, since the whole evening is filmed and no one can be cut out of it) and consent to publishing the recording on the club's channels (optional, not a membership requirement, and you can withdraw it at any time by email). We keep your data for the duration of your membership and for three years afterward to offer you the next semester; after that, we delete it.
Optional Google Calendar connection
A customer booking the club during the day can, in the app at app.jammclub.cz, optionally connect their Google Calendar. Their bookings then automatically appear in their own calendar. This connection is not required for booking and can be cancelled at any time.
What permission we request
We request a single permission, calendar.events. We use it exclusively to create, update or remove calendar events that correspond to your club bookings. We do not read, download or store any other events in your calendar.
What we store
We only store a refresh token (a technical key that lets the app get permission to write) and the e-mail address of the connected Google account, so you can see in the app which account is linked. We keep nothing else from your Google account. The data is stored on a secured server and is not publicly accessible.
Who we share it with
No one. Data obtained from Google Calendar is never shared with third parties, and we do not use it for advertising, profiling or training artificial intelligence models.
How to disconnect
You can disconnect at any time directly in the app, or in your Google account settings at myaccount.google.com/permissions. We will then delete the stored token and stop writing to your calendar. Events already created will remain and you can delete them the usual way.
The use of information received from Google APIs is governed by the Google API Services User Data Policy, including the Limited Use requirements.
How we protect your data
All communication with the website and the booking app is encrypted via HTTPS. Data is stored in a Supabase database (hosted PostgreSQL with servers in the European Union) with row-level access control enabled.
The Google Calendar refresh token is stored in a table that has no public permissions whatsoever. It's read exclusively by the server-side part of the app using a secret key that never reaches the browser. The token isn't displayed in any interface, isn't logged, and isn't shared with anyone else. Only verified staff with their own account have access to the club's admin panel.
Cookies and traffic measurement
The website uses essential cookies and, with your consent, also analytical ones. Details, including how to change your consent, can be found in our Cookie Policy.
Who we share data with
We never sell your data. To run our website and app, we use the following processors: Vercel (website and app hosting), Supabase (database), Google (traffic measurement via Analytics and Tag Manager, and Calendar for the optional connection) and OpenStreetMap (map on the Contact page). We may also share data with public authorities where required by law.
How long we keep your data
We keep data from inquiries and bookings for the duration of the negotiation, and afterward for as long as rights under the contract can be enforced. Accounting documents are kept for the period required by law.
Data from your Google account is kept only for as long as the connection lasts. As soon as you disconnect it — in the app or in your Google account settings — the app revokes consent directly with Google and immediately deletes the stored refresh token and email address from the database. We don't retain anything else from your calendar, so once disconnected, none of your Google data remains with us. Events already in your calendar stay under your own control, and you can delete them yourself.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability, and the right to object to processing. Just write to us at jammclubpraha@gmail.com and we'll get back to you. If you believe we are not handling your data properly, you can file a complaint with the Office for Personal Data Protection at uoou.cz.
Effective date
These terms are effective from July 27, 2026. If we make changes, we will publish the new version on this page.