1 · Privacy policy
This policy explains how Maventis s.r.o. ("we", "us", "easymedic") processes your personal data when you use our app and services, in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll. on personal data processing.
1.1 What data we process
- Identity & contact: name, email, phone, home address, country of residence, place and dates of your stay in Prague.
- Health data (special category, Art. 9 GDPR): the answers you give in the health questionnaire — allergies, conditions, medications, family history, pregnancy, lifestyle — and clinical notes created when we treat you.
- Identity-verification & biometric data (special category): when you verify your identity, a photo of your ID document and a selfie with facial matching, processed by our verification provider (Stripe Identity). We receive only the verification result and basic identity fields; we do not store the ID images or the biometric template ourselves.
- Booking & consent records: your orders, chosen services, triage answers, your electronic signature and the version of the documents you agreed to.
- Payment data: processed by Stripe. We do not receive or store your full card number.
- Technical data: essential session and security information needed to run the app.
1.2 Why we process it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Creating your account and providing the booked service | Art. 6(1)(b) — performance of a contract |
| Processing your health data to assess and deliver care safely | Art. 9(2)(a) explicit consent and Art. 9(2)(h) — provision of health care by/under the responsibility of a health professional (Act No. 372/2011 Coll.) |
| Identity & biometric verification (fraud prevention, patient safety) | Art. 9(2)(a) — your explicit consent |
| Keeping medical documentation | Art. 6(1)(c) & 9(2)(h) — legal obligation under Czech healthcare law |
| Payments, accounting and tax records | Art. 6(1)(c) — legal obligation |
| Security, and defending legal claims | Art. 6(1)(f) — legitimate interest |
Where we rely on your consent, you can withdraw it at any time (see 1.6); withdrawal does not affect processing already carried out, nor data we must keep by law.
1.3 Who we share it with (processors)
We use carefully selected providers who process data on our instructions under data-processing agreements:
- Supabase — database, authentication and secure storage (hosted in the EU, Frankfurt).
- Vercel — hosting and content delivery of the app and website.
- Stripe — payment processing and identity/biometric verification.
- Resend — sending transactional emails (e.g. booking notifications).
- Our doctors and nurses — the health professionals who assess and treat you.
We do not sell your data and do not use it for advertising.
1.4 International transfers
Our primary storage is in the EU. Some providers (e.g. Stripe) may process data outside the EEA; in that case transfers are protected by the European Commission's Standard Contractual Clauses or an adequacy decision.
1.5 How long we keep it
Medical documentation is retained for the periods required by Czech law (Decree No. 98/2012 Coll.). Accounting and tax records are kept for the statutory periods (typically 5–10 years). Account and contact data are kept while your account is active and then deleted or anonymised, unless a longer legal retention applies.
1.6 Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction, data portability, to object, and to withdraw consent. To exercise any of these, contact privacy@easymedic.io. You also have the right to lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7 (uoou.gov.cz).
1.7 Security
We apply appropriate technical and organisational measures, including encryption in transit, access controls and row-level security, so that your health data is visible only to you and the professionals treating you.
2 · Terms of service
2.1 The service
easymedic is a premium, self-pay health-concierge service for visitors to Prague, operated by Maventis s.r.o. It arranges mobile medical services — including IV infusion therapy, teleconsultations, doctor visits, medication via e-prescription, laboratory and other tests, care coordination and nursing — delivered to your accommodation by licensed health professionals.
2.2 Eligibility
You must be at least 18 years old and able to enter into a contract. You must provide accurate information, including in the health questionnaire, and verify your identity before your first treatment.
2.3 Medical assessment & the right to decline
Every request is reviewed by a doctor after a short screening. Treatment is provided only where it is medically appropriate. A doctor or nurse may decline, modify or stop a treatment for safety reasons. Nothing in the app is medical advice until confirmed by our doctor, and our services do not replace emergency or hospital care.
2.4 Prices & payment
Prices are shown in EUR in the app before you confirm. Payment is processed securely by Stripe. Membership plans run for the period you select and are confirmed by our coordinator before they start.
2.5 Cancellation & withdrawal
As a consumer you generally have a 14-day right to withdraw from a distance contract under Act No. 89/2012 Coll. (Civil Code). However, by requesting on-demand treatment you may ask us to begin performance before that period ends; where a service has been fully performed with your prior express consent, the withdrawal right no longer applies to that service (§ 1837 of the Civil Code). You can cancel a booking that has not yet started at any time via the app or by contacting us.
2.6 Your responsibilities
- Give complete and truthful health information.
- Be present and reachable at the address and time you booked.
- Not use the service for anyone other than yourself without our agreement.
2.7 Liability
We provide our services with professional care in line with Czech law. To the extent permitted by law, we are not liable for outcomes arising from inaccurate information you provide, from your failure to follow medical instructions, or from circumstances beyond our reasonable control. Nothing limits liability that cannot be limited by law, including for personal injury caused by negligence.
2.8 Governing law
These terms are governed by the law of the Czech Republic. Disputes fall under the competent Czech courts. Consumers may also use the EU Online Dispute Resolution platform.
4 · Informed consent for medical services
Before your first treatment we ask you to confirm the following. This is the text you agree to in the app.
- I confirm that the health information I have provided is true and complete to the best of my knowledge.
- I consent to a medical assessment and, where the doctor considers it appropriate, to IV infusion therapy or other treatment being administered by the easymedic medical team.
- I understand the general nature, benefits and common risks of IV therapy (for example minor bruising, local irritation, or, rarely, an allergic reaction) and that a health professional will be present.
- I understand this service is not a substitute for emergency care, and that in a life-threatening emergency I will call 155 or 112.
- I explicitly consent to the processing of my health data, and — for identity verification — of my identity-document and facial-image data, as described in the privacy policy above.
- I understand I may refuse or withdraw from treatment at any time before it is administered.