This is an unofficial working translation of the Czech document “Zásady soukromí”, awaiting legal review. If it differs from the Czech version, the Czech version prevails.
1. Introduction and controller’s contact details
1.1 These policy informs Clients and other data subjects how SLUGGER s.r.o., with its registered office at Sokolovská 615/138, Karlín, 186 00 Prague 8, Company ID (IČO): 22658742, registered in the commercial register kept by the Municipal Court in Prague, file no. C 419759 (the “Controller” or “Operator”) processes their personal data (the “policy”).
1.2 Controller’s contact details: [email protected], +420 736 488 541
2. What personal data we process
2.1 We process in particular the following categories of personal data:
- identification data (first name, surname, date of birth, where applicable company ID),
- contact data (e-mail, phone, address),
- data about the use of the Services (booking of Classes, types of activity, attendance),
- payment data (information about payments made, account number),
- data about health limitations that you voluntarily tell us so that we can adapt the training,
- image records (in particular photographs, video and CCTV recordings) made in connection with the operation of the Gym.
3. For what purpose and on what legal basis
3.1 Purposes of processing:
- concluding and performing the Contract – keeping the client account, booking Classes, recording Memberships, invoicing,
- compliance with legal obligations – in particular accounting and tax regulations, keeping the accident book,
- protection of the Controller’s legitimate interests – safety of operations, recording of incidents, protection of property, recovery of receivables, basic marketing,
- marketing purposes – sending commercial communications, using photographs and videos for promotion,
- processing of selected health data to adapt the training – only on the basis of your consent or on your own initiative.
3.2 The legal bases are in particular: performance of a contract, compliance with a legal obligation, the Controller’s legitimate interest and the data subject’s consent (in particular for certain forms of marketing and for health data).
4. How long we keep the data
4.1 We keep personal data for the duration of the contractual relationship and further for the period:
- required by law (e.g. 10 years for tax documents),
- needed to protect our rights (usually the length of the limitation period),
- for the duration of the consent for data processed on the basis of consent, but at most until it is withdrawn;
CCTV recordings are usually kept for 7 to 30 days, unless longer retention is necessary to investigate an incident.
5. Who we share the data with
5.1 Personal data may be passed on to:
- providers of IT services, booking systems and accountants,
- external Trainers who lead the Classes and need to know who attends the Class,
- public authorities, where the law requires us to do so.
5.2 All processors are bound by a contract and a duty of confidentiality.
6. Transfers to third countries
6.1 As a rule, we do not transfer personal data outside the EU/EEA. Should this happen (e.g. by using a foreign cloud provider), we will ensure an adequate level of protection under the GDPR.
7. Your rights
7.1 You have in particular the right:
- of access to personal data,
- to rectification of inaccurate data,
- to erasure (“right to be forgotten”) in the cases set out in the GDPR,
- to restriction of processing,
- to data portability,
- to object to processing based on legitimate interest,
- to withdraw consent at any time, where the processing is based on consent.
7.2 You can exercise your requests through the Controller’s contact details. You also have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).
8. Cookies and online tools
8.1 When using the Online booking system we may use cookies and similar technologies to ensure its functionality and basic traffic analytics.
8.2 Details of the cookies used and the options for setting them are given in a separate cookie banner or in the information on the Operator’s website.
9. Final provisions
9.1 This policy may be updated, in particular if legislation or our processes change. The updated version will always be published in the Gym, in the Online booking system and/or in another suitable way.
This policy is effective from 24 November 2025.
On behalf of SLUGGER s.r.o. — Maksym Mahlov, managing director