Personal data protection
I. PERSONAL DATA CONTROLLER
Prime Balanace s.r.o. with registered office at Poděbradova 2842/1, 301 00 – Plzeň, ID No.: 094 35 221, registered in the Commercial Register kept at the Regional Court in Plzeň under file No. C 336302 (hereinafter referred to as the “Company”).
II. WHAT PERSONAL DATA DO WE PROCESS AND HOW DO WE OBTAIN IT?
We only process data that you provide to us. In specific cases, this may include providing data by filling in a client card at the reception of Avalon Fitness or by filling in one of the forms on the website, entering data into a user account set up on our website, providing data when setting up a membership contract and related documents and in connection with the implementation of contracts (i.e. in connection with the delivery of goods, provision of services), in personal contact, by telephone, in writing, by e-mail or by other means of communication: SMS, messages in applications such as Facebook, Messenger, Instagram, Whatsapp.
We also process data that you yourself publish on the internet and in particular on social networks (e.g. Facebook, Instagram).
If we need your consent to process certain personal data for specific processing purposes, we will only process such data for that purpose with your consent.
You provide us with your data voluntarily, only in some cases we would not be able to provide you with the service without your data, e.g.: fitness memberships and season tickets (here some personal data is required), access to the online system for purchasing season tickets, membership and booking of group classes or for delivery of ordered goods. You are only obliged to provide us with data where the law directly requires it.
The personal data may fall under the category of “general personal data” or it may be special categories of data, i.e. sensitive personal data, where the law provides for stricter conditions for processing.
A. General personal data we process:
First name, last name, title, date of birth, address, photograph, telephone number, email, IP address, cookies, information about the goods and services you have ordered, information about what goods you have bought from us, information about what services we have provided to you, gender, photographs, photographs of our events / videos of events.
B. Sensitive personal data we process:
We do not process any sensitive personal data.
III. FOR WHAT PURPOSES DO WE PROCESS PERSONAL DATA, FOR HOW LONG AND WHAT MAKES US DO IT?
A. Processing of personal data for the purpose of concluding a contract and fulfilling contractual obligations
In order to register you in the Avalon Fitness system, create an online account, enable you to use the reservation system, and conduct related communication with you, we process the following general personal data: name, surname, title, address, date of birth, telephone number, e-mail.
The legal title (authorisation) for the processing of this data is directly for the performance of contractual obligations under the contract concluded between us. Such an obligation may be the supply of services or goods. This does not have to be a contract concluded in a traditional printed form, signed in manuscript. It may also be a registration form. For this purpose, we process personal data for the duration of the contractual relationship between us. After the end of the contractual relationship, some data is then retained for the purpose of fulfilling legal obligations or for legitimate interest purposes, as you will read in the following sections of this document.
B. Processing of personal data for compliance with accounting, tax and other legal obligations
In order to comply with obligations under applicable law, in particular in the areas of accounting, tax law and archiving, we process the following data: we do not process such data.
The period of time for which the data is processed is determined directly by the relevant legal regulations that oblige us to process it.
C. Processing of personal data for the purposes of our or a third party’s legitimate interests
A legitimate interest can cover a wide range of situations. We therefore inform you about the legitimate interests for which we process personal data:
The legitimate interest is the protection and proof of our rights and legal claims, in particular those arising from contracts concluded or damage caused. For these purposes, we process personal data for a period of 4 years after the end of the contractual cooperation or our last contact if no contract has been concluded. This period is set in relation to the limitation periods for claims, taking into account that we may not become aware of any claim brought before a court immediately when it is brought by the other party. For this purpose, data from contracts and our communications with each other are stored.
Furthermore, direct marketing is a legitimate interest. For sending commercial communications we will process the following personal data of our clients: name, surname, e-mail. You can always simply terminate the sending of commercial communications to your e-mail in the manner indicated in the e-mail. If we use the classic printed form or a telephone call to send you our offer or information about our news, we will respect this as well, if you let us know that you do not wish to be contacted further.
D. Processing of personal data on the basis of your consent
If you give us your consent, we will process your personal data to send you offers of our services/products. We will need your consent for this processing if you are not our client. In addition, if you provide us with further consent, we will also process your personal data to send you offers of services/products from our business partners. Before you give us your consent, we will inform you of what data and for which specific purpose of processing the consent will apply. You can withdraw your consent at any time. However, if we also process some of your personal data on the basis of another legal basis (see A to C above), we will continue to process your personal data for these purposes even after your consent has been withdrawn, as consent is not required for such specific purposes.
IV. DISCLOSURE OF PERSONAL DATA TO OTHER PERSONS
We are assisted by other persons who act as processors to ensure that we meet some of our contractual or legal obligations. In particular, these are providers of data storage and software applications. We have written contracts with processors agreeing to data protection obligations to keep your data safe.
Current list of processors INSPIRE CZ s.r.o.
Possibly other providers of processing software, services and applications, but not currently used by the Company.
Personal data will also be disclosed to the relevant administrative authorities if we are obliged to do so by law (i.e. in particular in the case of an inspection in which the relevant authority is entitled to require the submission of personal data).
V. INFORMATION ABOUT YOUR OTHER RIGHTS IN THE AREA OF PERSONAL DATA
A. Right of access to personal data
This is the right to confirm whether we are processing your personal data and, if so, to access that data and information about its processing.
B. Right to rectification of personal data
This is the right to have inaccurate personal data concerning you corrected without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by providing an additional declaration (in which you provide complete data).
C. Right to erasure of personal data (right to be forgotten)
In the cases provided for by law or the GDPR, you have the right to request that we delete your personal data without undue delay (the GDPR lists the grounds in Article 17, including exceptions where deletion is not carried out).
D. Right to restriction of processing
In the cases set out in Article 18 of the GDPR, you have the right to request that we restrict the processing of your personal data.
E. Right to data portability
Under the conditions set out in Article 20 of the GDPR, you have the right to obtain your personal data and transfer it to another controller. Where technically feasible, you have the right to request the transfer directly to another controller.
F. Right to object
Where we process personal data for legitimate interest purposes, you have the right to object to such processing and we will then no longer process the data unless our legitimate interest overrides your interests or rights and freedoms. If the legitimate interest is direct marketing, then objecting will always result in the cessation of further processing for direct marketing purposes.
G. Right to lodge a complaint with the supervisory authority
If you believe that your data protection rights are being violated, you have the right to file a complaint with the Office for Personal Data Protection. For more information about the Office and data protection, please visit the Office’s website directly at www.uoou.cz.
VI. OTHER IMPORTANT INFORMATION FOR EXERCISING YOUR RIGHTS
If you have any further questions about the processing of your personal data by us, you can contact us at info@210gym.cz. By sending a message to this email or by sending a written request to our address listed at the beginning of this document, you can also directly exercise your rights, which we describe in Article VI. Please note that we may contact you afterwards to verify that the request is indeed made directly by you and to reasonably verify your identity and request. The same applies to any telephone or similar communications.
We are asking for the following consents:
consent to the processing of personal data in accordance with the GDPR
consent to sending advertising messages
Consents are granted for a period of 6 years.
The latest version of this document can always be found at www.210gym.cz
This text is effective from 25. 5. 2018.
