Privacy Policy for the BookNext App

As of: June 2026

1. Data Protection at a Glance

General Information

The protection of your personal data is important to us. This privacy policy explains how personal data is collected, processed and used when you use the mobile application BookNext („BookNext“ or the „App“).

BookNext is a platform that allows users to find participating businesses and manage appointments through integrated booking systems. The app itself does not provide the services offered by the participating businesses, nor does it process payments on behalf of these businesses.

By using the app, you agree to the collection and processing of personal data in accordance with this privacy policy.

2. Controller

The data controller for the BookNext App is:

Synext IT / BookNext

Owner: Syed Shah

Becklemer Weg 11

45711 Datteln

Germany

Email: service@synext-it.de

Should you have any questions regarding this privacy policy or the processing of your personal data, you can reach us using the contact details provided above.

3. Scope of this Privacy Policy

This privacy policy applies exclusively to the BookNext mobile application.

It does not apply to:

Websites operated by participating companies

Third-party booking systems outside the app

External payment providers

Third-party websites or services linked from within the app

Participating companies may have their own data protection declarations that govern the processing of appointment-related, customer-related, and payment-related information within their own systems.

4. How BookNext Works

BookNext serves as a technical platform that connects users with participating businesses.

When using the app:

1. Users select a participating company.

2. Can users create or access a customer account.

Appointments can be booked via the company's integrated booking system.

4. Appointment information will be exchanged with the selected company to enable booking and appointment management.

BookNext acts as a provider of a technical platform.

The respective participating company remains responsible for the processing of personal data in connection with:

The semester

Services

Customer accounts

Customer communication

Payments

Business operations

5. Categories of personal data that we process

Depending on how you use the app, we may process the following categories of data:

Account details

First name and surname

Email address

Phone number

Customer account information

Booking details

Appointment details

Selected Services

Date and time of appointments

Booking History

Information required for managing appointments

Device and technical data

IP address

Device type

Operating system

App version

Language settings

Technical diagnostic information

Communication data

Information to provide when contacting support

Enquiries and correspondence relating to app usage

6. Purposes of Data Processing

Personal data may be processed for the following purposes:

Provisioning of app functionality

Creation and management of customer accounts

Appointment and booking management

Connecting users with participating companies

Maintaining the security and stability of the app

Troubleshooting technical issues

Responding to support requests

Fulfilment of legal obligations

Prevention of abuse and fraudulent activities

7. Legal Basis for Processing

Where applicable, personal data will be processed on one or more of the following legal bases under the General Data Protection Regulation (GDPR):

Art. 6 para. 1 lit. a GDPR – Consent

When users voluntarily give their consent for specific processing operations.

Art. 6(1)(b) GDPR – Contractual Necessity

If processing is necessary to provide requested services or fulfil contractual obligations.

Art. 6(1)(c) GDPR – Legal Obligation

When processing is necessary to comply with applicable laws and regulations.

Art. 6 Para. 1 lit. f GDPR – Legitimate Interests

If the processing is necessary for the purposes of the legitimate interests pursued by us, for example:

Platform security maintenance

Improving reliability

Prevention of abuse

Troubleshooting technical issues

Protection of users and participating companies

8. Customer Accounts

Users can create customer accounts via the BookNext app after selecting a participating company.

Customer accounts are linked to the booking system used by the selected company and are generally managed via that company's appointment management infrastructure.

Users are responsible for maintaining the confidentiality of their login credentials.

BookNext does not publicly display information about user accounts.

9. Local device storage

To provide core functionalities, the app may store certain information locally on the user's device using encrypted storage technologies.

This may include:

User identifiers

Information about the selected shop or company

Language settings

Saved booking data

Application settings

This information is stored solely to ensure the proper functioning of the app and to improve the user experience.

The stored information will not be passed on to third parties, except insofar as this is necessary for the normal operation of the app.

10. Technical Error Logging and Diagnostics

To maintain the stability and security of the app, BookNext may process limited technical diagnostic information.

This may include:

Flutter crash reports

API error logs

Connection timeout protocols

Device diagnostic information

Technical protocols can include:

Hashed device identifiers

Device platform (Android or iOS)

Screen or function where an error occurred

Error messages

Technical debugging information

These protocols are used exclusively for:

Diagnose technical problems

Improving app stability

Security Incident Detection

Maintaining service reliability

Technical diagnostic logs do not intentionally include:

Passwords

Payment information

Email addresses

Raw device identifiers

Personal data

11. Payments

BookNext does not process payments directly.

All payments relating to appointments or services are processed by the respective participating company and their chosen payment providers.

BookNext is not responsible for payment processing, payment security, refunds, billing disputes, or financial transactions conducted by participating businesses.

12. Data Transfer and Recipients

Personal data can only be shared if it is necessary for the provision of the requested services.

Recipients can be:

Participating companies selected by the user

Hosting and infrastructure providers

Technical service providers who support app operations

Authorities, as required by law

BookNext does not sell personal data to third parties.

13. Participating Companies

When a user selects a company and makes a booking through the app, relevant information is transmitted to that company to provide appointment-related services.

The respective company acts as the primary controller for personal data processed within its own booking system, customer management system, and business operations.

Users should check the privacy policies of companies they interact with through the app.

14. Hosting and technical infrastructure

BookNext utilises secure hosting and technical infrastructure providers to operate the app and associated services.

These providers may process data solely on our behalf and only to the extent necessary for the provision of technical services, security, maintenance, and operational support.

To the extent required by law, appropriate contractual and technical safeguards will be implemented.

15. Data Storage

Personal data will only be stored for as long as is necessary to fulfil the purposes described in this privacy policy, or as required by applicable law.

Retention periods can vary depending on:

Account activity

Appointment schedule

Legal obligations

Security requirements

Technical operational requirements

When data are no longer needed, they are deleted or, as far as is reasonably possible, anonymised.

16. Account Deletion

Users can request the deletion of their customer account and associated personal data.

For detailed information on account deletion, please see:

https://booknext.synext-it.com/account-deletion

Please note that deletion requests regarding appointments or customer data records may also need to be processed by the participating company responsible for the respective customer account.

Certain information may be retained if this is required due to applicable legal obligations.

17. International Data Transfers

When personal data is transferred outside the European Economic Area (EEA), appropriate safeguards are put in place in accordance with applicable data protection laws.

Such safeguards may include:

Standard contractual clauses approved by the European Commission

Adequacy decisions

Other legally recognised transfer mechanisms

18. Your Rights

Under the GDPR and applicable data protection laws, you may have the right to:

Information about your personal data

Correction of incorrect data

Deletion of personal data

Restriction of processing

Objection to processing

Withdrawal of consent, where applicable

Receipt of your data in a transferable format

Submitting a complaint to a supervisory authority

Requests for personal data can be sent to:

service@synext-it.de

19. Safety measures

We implement suitable technical and organisational measures to protect personal data from:

Unauthorized access

Accidental loss

Abuse

Change

Disclosure

Destruction

Although we endeavour to protect personal data through commercially reasonable security measures, no method of electronic transmission or storage can be guaranteed to be completely secure.

20. Children's Data Protection

The BookNext App is not specifically aimed at children.

We do not knowingly collect personal information from children in violation of applicable laws.

If we determine that personal information has been unlawfully collected from a child, we will take appropriate steps to delete that information.

21. Changes to this privacy policy

We reserve the right to update this privacy policy at any time to reflect changes in legal requirements, technical developments, or app functionality.

The current version is always provided within the app and via official BookNext channels.

Users are asked to review this privacy policy regularly.

22. Contact

If you have questions about this privacy policy or the processing of your personal data, please contact: