Data sharing within the network and party roles

1. Purpose

CesiSync is a network in which owners share calendar and price with the agencies they approve. This page explains who processes which data in which role.

2. Roles

CesiSync is the controller of account, property, calendar and booking data processed to provide the Service. From the moment a subscribed agency begins to process the contact and price data it received from an owner for its own purposes, it is a separate controller of that data. The agency is the controller of data about its own customers/guests; CesiSync stores it only on the agency's instructions as a booking record in its account and acts as a processor in that respect.

3. What is visible to whom

Approved agency without a subscription: general property information, photos, blurred location. Subscribed agency: exact address, owner contact details, prices, calendar (free/busy/own booking), commission rate, downloads and its own iCal address. Other agencies: only "busy" dates. Owner: for their own property, the commercial details and bookings of subscribed agencies. Staff: access for support and security purposes, limited and recorded in the audit log.

4. Responsibilities

The agency must keep received data secure, not use it for other purposes, stop access when a subscription ends and meet its KVKK/GDPR obligations. The owner is responsible for having the right to share the information it shares, especially anything relating to third parties.

5. Records and audit

Subscriptions, approvals, bookings and cancellations are written to the audit log along with who made them. For questions or objections about data sharing write to our contact address.