Privacy Policy

GymRoom Nusle ·

Preklad dokumentu do vášho jazyka nie je k dispozícii; zobrazujeme jazykový variant „en".
Effective from 18 October 2026

Effective from 18 October 2026

This is a translation. The original is the Czech version, which prevails in case of any discrepancy.

1. Who Processes Your Data

The controller of your personal data is GymRoom CZ s.r.o., Company ID (IČO): 21136947, with its registered office at Kurzova 2222/16, Stodůlky, 155 00 Prague 5, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 397263 (hereinafter referred to as "GymRoom").

GymRoom operates the GymRoom Nusle branch at V Horkách 1412/8, 140 00 Prague 4, as well as the website gymroom.cz, the reservation system, user accounts, credits, and vouchers for the entire GymRoom network. Other branches are operated by independent companies. For reservations at their branches, the policies published at the respective branch apply.

Contact: info@gymroom.cz or by mail to the registered office of GymRoom. We have not appointed a Data Protection Officer, as it is not mandatory for us.

2. What Data, Why, and for How Long

User Account

  • Data: first name, last name, email, phone number, login credentials
  • Controller: GymRoom
  • Legal basis: performance of a contract, Art. 6(1)(b) GDPR
  • Retention period: for the duration of the account; an account inactive for 24 months may be closed

Reservations and Branch Access

  • Data: date and time, number of persons, access code, and time of its use
  • Controller: GymRoom
  • Legal basis: performance of a contract
  • Retention period: 4 years from the date of the reservation

Payments for Branch Reservations

  • Data: amount, date, payment method; card details are only accessible to the payment gateway Comgate
  • Controller: GymRoom
  • Legal basis: legal obligation, Art. 6(1)(c) GDPR (accounting and tax regulations)
  • Retention period: 10 years

Credits and Vouchers

  • Data: credit balance and transactions, voucher code, purchaser and recipient, related payments
  • Controller: GymRoom
  • Legal basis: performance of a contract; accounting documents: legal obligation
  • Retention period: for the period of validity (12 months) and thereafter 4 years; accounting documents for 10 years

Training Sessions with a Trainer and Lessons

  • Data: name, contact details, date and time
  • Controller: GymRoom
  • Legal basis: performance of a contract
  • Retention period: 4 years from the session date

Clients Aged 15 to 17

  • Data: minor's name, name and contact details of the legal guardian, their consent
  • Controller: GymRoom
  • Legal basis: performance of a contract and legitimate interest in proving consent, Art. 6(1)(f) GDPR
  • Retention period: 4 years from the last entry

CCTV System at the Branch

  • Data: video and audio recording
  • Controller: GymRoom
  • Legal basis: legitimate interest in protecting persons and property and proving rule violations, Art. 6(1)(f) GDPR
  • Retention period: 14 days; in the event of an incident, until its resolution

Rule Violations and Damages

  • Data: record of the incident, damage, and any potential ban
  • Controller: GymRoom
  • Legal basis: legitimate interest in protecting property and enforcing claims
  • Retention period: until resolution; record of a ban for the duration of the ban

Communication with Us

  • Data: name, contact details, message content (email, phone, contact form)
  • Controller: GymRoom
  • Legal basis: legitimate interest in handling the inquiry, or performance of a contract
  • Retention period: 4 years from resolution

Commercial Communications to Clients

  • Data: email
  • Controller: GymRoom
  • Legal basis: legitimate interest, Art. 6(1)(f) GDPR and Section 7(3) of Act No. 480/2004 Coll.
  • Retention period: 5 years from the last reservation or until unsubscribed

Newsletter for Others

  • Data: email
  • Controller: GymRoom
  • Legal basis: consent, Art. 6(1)(a) GDPR
  • Retention period: until consent is withdrawn

Analytics and Marketing Cookies

  • Data: device identifiers, website visit data
  • Controller: GymRoom
  • Legal basis: consent
  • Retention period: according to cookie settings, maximum 2 years

Defense of Legal Claims

  • Data: data from the purposes listed above
  • Controller: GymRoom
  • Legal basis: legitimate interest
  • Retention period: until the conclusion of the dispute

Reservation data is necessary to enter into a contract; without it, a reservation cannot be completed. We do not process health data. We do not engage in automated decision-making with legal effects.

We do not process any data about a client's guests other than the CCTV recording. The client is responsible for informing them of this.

3. Who We Share Data With

  • BRJ – Jan Barášek, Company ID (IČO): 05103118 (BizKitHub system): operation of the reservation system, access codes, and credits; processor.
  • Amazon Web Services: server hosting; processor.
  • Comgate a.s., Company ID (IČO): 27924505: payment gateway; independent controller of payment data.
  • Resend, Inc.: email distribution; processor.
  • Google Ireland Ltd. and Meta Platforms Ireland Ltd.: analytics and advertising, only with your cookie consent.
  • Trainers and instructors: name, contact details, and date and time of the training session or lesson. Data you disclose to them directly is processed by them as independent controllers.
  • Operators of other GymRoom branches: data regarding reservations at their branches, which we process with them as joint controllers.
  • External accounting and legal advisors, debt collection, and public authorities where required by law.

Resend, Amazon Web Services, Google, and Meta may also process data in the USA. Transfers take place based on the European Commission's adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.

4. Cookies

We always use necessary cookies for logging in and completing reservations. We only store analytical cookies (Google Analytics) and marketing cookies (Google Ads, Meta Pixel) with your consent. You can change your consent at any time via the "Cookie Settings" link in the website footer.

5. Your Rights

You have the right:

  • to access your data and obtain a copy of it,
  • to rectification or completion of your data,
  • to erasure if we no longer need the data or process it unlawfully,
  • to restriction of processing,
  • to data portability for data we process on the basis of a contract or consent,
  • to object to processing based on legitimate interest; against commercial communications at any time and without giving a reason,
  • to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Exercise your rights at info@gymroom.cz. We will respond within one month at the latest. We may verify your identity.

If you disagree with the way we handle your data, you can lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.