Personal data protection

If you are our customer, a subscriber to our newsletter or a visitor to our website, you are entrusting us with your personal data. We are responsible for its protection and security. Please familiarise yourself with the personal data protection policies, principles and rights you have in connection with GDPR (General Data Protection Regulation).

Who is the controller?

We are the company Sport Academy Czech Republic, s.r.o., ID: 24254584, with its registered office at Nová kolonie 1450/2, Prague, website sportacademy.cz. The company directors are Mgr. Jan Hnilička and Markéta Hniličková. We process your personal data; as the controller, we determine how the personal data will be processed and for what purpose, for how long, and we select any other processors who will assist us with the processing.

Contact details

If you wish to contact us during the processing, you can reach us at tel. number +420 777 274 275 or by e-mail: ilovesport@sportacademy.cz.

Our declaration

We declare that, as the controller of your personal data, we comply with all legal obligations required by applicable legislation, in particular the Personal Data Protection Act and GDPR, and therefore that:

• we will process your personal data only on the basis of a valid legal ground, primarily legitimate interest, performance of a contract, legal obligation or granted consent,
• we fulfil the information obligation according to Article 13 of the GDPR before the processing of personal data begins,
• we will enable and support you in exercising and fulfilling your rights under the Personal Data Protection Act and GDPR.

Scope of personal data and purposes of processing

We process personal data that you entrust to us yourself, for the following reasons (to fulfil these purposes):

• provision of services – we strictly require your personal data in the scope of: responsible representative: e-mail, first name, surname, phone, address and for children: first name, surname, date of birth, in order to perform the service of providing services and delivering goods (products).
• accounting – if you are customers, we strictly require your personal data (billing details) to comply with the legal obligation for issuing and recording tax documents.
• marketing – sending newsletters: we use your personal data (e-mail and name), what you click on in the e-mail and when you open them most often, for the purpose of direct marketing – sending commercial communications. If you are our customer, we do so out of legitimate interest, as we reasonably assume you are interested in our news, for a period of 3 years from the last order. If you are not our customer, we send you newsletters only based on your consent, for a period of 3 years from granting it. In both cases, you can withdraw this consent by using the unsubscribe link in every e-mail sent.
• photo documentation – live events: your photos serve to document the event. We retain your personal data for the duration of the statutes of limitation, unless the law stipulates a longer period for their retention or we have stated otherwise in specific cases.

Cookies

When browsing our website, we record your IP address, how long you stay on the page and which page you come from. We perceive the use of cookies for measuring website traffic and personalising the website display as our legitimate interest as a controller, as we believe that thanks to this, we can offer you even better services. Cookies for advertising targeting will be processed only based on your consent. Our website can also be browsed in a mode that does not allow the collection of personal data. You can disable the use of cookies on your computer.

Security and protection of personal data

We protect personal data to the maximum extent possible using modern technologies that correspond to the level of technical development. We protect it as if it were our own. We have adopted and maintain all possible (currently known) technical and organisational measures to prevent the misuse, damage or destruction of your personal data.

Categories of personal data recipients

• data controller
• Sport Academy team (programmers, marketing consultants, instructors and coaches, tax advisor)

We retain your personal data for the duration of the statutes of limitation, unless the law stipulates a longer period for their retention or we have stated otherwise in specific cases.

Transfer of personal data to third parties

Our employees and collaborators have access to your personal data. To ensure specific processing operations that we cannot provide ourselves, we use the services and applications of processors who can protect data even better than we can and specialise in the given processing.

These are providers of the following platforms: Mailchimp, Facebook, Instagram, Google, Seznam, a.s. and an accounting firm. It is possible that in the future we will decide to use other applications or processors to facilitate and improve the quality of processing. However, we promise you that in such a case, we will place at least the same demands on the security and quality of processing on the processor as we do on ourselves.

Transfer of data outside the European Union

All processing of personal data will be carried out within the EU.

How long we process data

By law, Sport Academy subsequently retains certain data contained in accounting documents.

Commercial communications are sent to users for the entire duration that consent to their sending lasts. In the case of customers, commercial communications are sent until they are unsubscribed, or until an objection is raised against the processing of your data for this purpose. However, commercial communications are sent for a maximum period of 10 years. After that, Sport Academy will request new consent.

Data obtained for marketing purposes through cookies is processed by Sport Academy for the entire duration of consent to the use of cookies, i.e. for the period during which you allow the storage of cookies in your browser, or until an objection is raised against the processing of your data for this purpose.

Sport Academy only carries out further processing of personal data beyond the specified periods if it is necessary to fulfil obligations arising from legal regulations that apply to Sport Academy.

Your rights in connection with personal data protection

You have a number of rights in connection with personal data protection. If you wish to exercise any of these rights, please contact us via e-mail: ilovesport@sportacademy.cz. You have the right to information, which is already fulfilled by this information page with the principles of personal data processing. Thanks to the right of access, you can call upon us at any time and we will document within 3 days what personal data we process and why.

• If anything changes on your part or you find your personal data to be outdated or incomplete, you have the right to supplement and change your personal data.
• You can exercise the right to restriction of processing if you believe that we are processing inaccurate data, you believe that we are processing data unlawfully but do not want to delete all data, or if you have raised an objection to the processing. You can restrict the scope of personal data or the purposes of processing. (e.g. by unsubscribing from the newsletter, you restrict the purpose of processing for sending commercial communications.)
• Right to portability – if you would like to take your personal data and transfer it to someone else, we will proceed in the same way as when using the right of access – with the only difference being that we will provide the information to you in a machine-readable format. For this, we require at least 5 days.
• Right to erasure (to be forgotten) – your further right is the right to erasure (to be forgotten). We do not want to forget you, but if you wish so, you have the right to it. In such a case, we will delete all your personal data from our system as well as from the systems of all sub-processors and backups. We require 5 days to ensure the right to erasure. In some cases, we are bound by a legal obligation, and e.g., we must record issued tax documents for the period stipulated by law. In this case, we will therefore delete all such personal data that are not bound by another law. We will inform you about the completion of the erasure via email.
• Complaint with the Office for Personal Data Protection – if you feel that we are not handling your data in accordance with the law, you have the right to contact the Office for Personal Data Protection with your complaint at any time. We would be very pleased if you inform us of this suspicion first, so that we can do something about it and rectify any potential error.
• Unsubscribing from newsletters and commercial communications.

We send you emails with inspiration, articles, or products and services as our customer based on our legitimate interest. If you are not yet a customer, we send them to you only based on your consent. In both cases, you can end the subscription to our emails by clicking the unsubscribe link in every email sent.

Confidentiality

We would like to assure you that our employees and associates who will process your personal data are obliged to maintain confidentiality regarding personal data and security measures, the disclosure of which would jeopardize the security of your personal data. This confidentiality continues even after the termination of contractual relations with us. Without your consent, your personal data will not be released to any other third party.

These personal data processing policies are effective from 25.5.2018.