Privacy policy
1. Controller
NexTao GmbH, Königsallee 27, 40212 Düsseldorf, Germany
Phone: +49 1577 5588 888 (also WhatsApp), email: info@resavis.com
2. Principles
This website and the Resavis application do not load any content from third-party servers: no external fonts, no analytics or advertising services, no embedded maps or videos. When a page is requested, only the data that is technically necessary to deliver it is transmitted.
3. Hosting and server log files
The website is hosted by Hostinger International Ltd. on servers in the European Union. When a page is requested, the server records the IP address, date and time, requested page, amount of data transferred, browser and operating system in log files. The legal basis is Art. 6(1)(f) GDPR (secure and stable operation). The logs are deleted after a short time.
4. Account and application
Anyone who signs up for Resavis provides their name, email address, password (stored only as a hash) and details about their business. This data is processed to provide the account (Art. 6(1)(b) GDPR). The application runs at app.resavis.com and the information pages at resavis.com, and both use the same server in the EU.
The information pages do not set any cookies, not even when you switch language. For logging in, the application sets a technically necessary session cookie (RESAVISSESSID). The application (app.resavis.com) also stores the language you have chosen in a technically necessary cookie (resavis_lang). During the preview phase, an additional cookie is set for password protection (resavis_gate). None of these cookies contains personal data in plain text.
5. Booking pages of businesses
On the booking pages (address “/b/…”), customers enter their name, email address, phone number where applicable and answers to the business's form fields. The respective business is the controller for this data; the operator of Resavis (see section 1) processes it as a processor in the course of providing the application. The data is used to manage the appointment, to send confirmations and reminders by email and, if the business wishes, to add the appointment to its Google Calendar (Art. 6(1)(b) GDPR).
6. Online payment
If a business offers online payment, the customer is redirected after booking to Stripe (Stripe Payments Europe Ltd., Ireland) or PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg). Data is only transmitted to the payment service provider once this redirect takes place. No scripts from these providers are loaded on the booking page itself. The privacy notices of the respective provider apply.
7. Google Calendar
If a business connects a staff member to Google Calendar, appointment data (service, time, customer name and email address) is transmitted to Google Ireland Ltd. and stored there as a calendar entry. In addition, busy times in the calendar are retrieved to avoid double bookings. The business actively sets up the connection and can disconnect it at any time.
8. Sending emails
Confirmations, reminders and notifications are sent via the application's server or via an SMTP account provided by the business. Sent messages are logged in the application's outbox for traceability.
9. Webhooks
If a business sets up webhooks, appointment data is transmitted to the address specified by the business. The business is responsible for choosing the recipient and for the processing that takes place there.
10. Storage period
Account data is stored for as long as the account exists. Appointment and customer data is managed by the respective business, which can delete it at any time. Statutory retention periods remain unaffected.
11. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR), as well as the right to lodge a complaint with a supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen). Please send requests to info@resavis.com and, if your request concerns a booking with a business, also contact that business.
Last updated: 16 September 2026