Personal data controller:
RODO Legendary s.r.o.,
CIN: 220 55 711,
with its registered office at Erbenova 1117/2, 742 21 Kopřivnice,
registered with the Regional Court in Ostrava, file reference C 97210
In accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council, hereinafter referred to as the “GDPR”), we provide information on the processing of personal data.
1. Our contact details for data protection matters
1.1. Our company, RODO Legendary s.r.o., CIN: 220 55 711, with its registered office at Erbenova 1117/2, 742 21 Kopřivnice, acts as the so-called personal data controller. If you have any questions, requests or objections related to the processing of personal data, please contact us at our contact details below:
written correspondence:
RODO Legendary s.r.o.,
Erbenova 1117/2,
742 21 Kopřivnice
electronic contact:
info@rodolegendary.cz
1.2. Our company does not have a Data Protection Officer (DPO).
2. When is your personal data processed?
2.1. Your personal data may be processed in the following cases:
2.1.1 you have entered into a contract with us;
2.1.2 you have set up a customer account;
2.1.3 you have subscribed to our newsletter.
3. Legal basis for processing personal data, method and purpose of processing, Storage period
We may process your personal data even without your consent:
- to the extent necessary to discharge our obligations under the contract and to administer your customer account,
- to the extent necessary to comply with a legal obligation imposed on us by a law, such as an act,
- to the extent necessary to protect our legitimate interests – direct marketing
- to the extent necessary to protect the controller’s assets
Please find more detailed information on the particular legal bases relied on for the processing of personal data below:
3.1. Data processing for the purpose of performing the contract you have entered into with us
3.1.1 Your personal data is processed for the purposes of the performance of the contract under which we have set up and administer your customer account (Article 6(1)(b) of the GDPR) and ensure remote access to your customer account and personal data or to make changes and rectifications to it (Article 6(1)(c) of the GDPR). We also process your personal data so that you can top up your customer account credit or purchase money orders.
3.1.2 In connection with the processing under Article 3.1.1, we process your identification data (first name, surname), date of birth, address data (residential address, or the delivery address, email address, telephone number).
3.1.3 The purpose of the processing of the personal data is the conclusion of the contract and the subsequent performance of our obligations under the contract concluded, including showing the current amount of credits or making entries in the customer account and providing direct access to personal data.
3.1.4 Storage period: The storage period is equal to the duration of the customer account, i.e., until you cancel your customer account, but not more than 5 years from its cancellation. However, in the case of inactive customers, we may cancel the respective customer accounts and delete their personal data with prior notice.
3.2. Processing for the purpose of meeting a legal obligation imposed on us by law
3.2.1 We also process your personal data because it is necessary for us to comply with our legal obligations (Article 6(1)(c) of the GDPR).
3.2.2 We issue fiscal receipts which we are obliged to keep and retain for the period prescribed by law, in particular the Accountancy Act (Act No. 563/1991 Coll.) and the Value Added Tax Act (Act No. 235/2004 Coll.). We are also subject to other obligations arising from the Civil Code, in particular the rules regulating so-called consumer contracts.
3.2.3 The purpose of processing your personal data is to fulfil our legal obligations, in particular in the field of accounting and tax laws, as well as to deal with any complaints against defects in goods or services, and to receive goods in the event of withdrawal from the purchase contract.
3.2.4 Storage period: We only keep the personal data for the necessary period of time and archive it for as long as is specified by the applicable law.
3.3. Our legitimate interests in conducting direct marketing
3.3.1 We further process your personal data because it is necessary for the purposes of pursuing our legitimate interests (Article 6(1)(f) of the GDPR), in the manner set out below.
3.3.2 We may send an email newsletter (commercial communication) to the email address you have provided to us in connection with the conclusion of the contract, but only in connection with an offer of services or goods offered on the premises of our fitness centre or via our website. You have the option to opt-out of receiving the newsletter.
3.3.3 The purpose of processing your personal data is to inform you about new content, product range, lessons, events and services. We consider this necessary for the purposes of our legitimate interests. For this purpose, we only process the email address. You can object to this processing of your personal data (see Article 6.5) and simply unsubscribe from the newsletter to stop the processing of your personal data for direct marketing purposes.
3.3.4 Storage period: We will keep your email address for as long as you have a customer account with us.
3.4. Our legitimate interests in protecting the controller’s assets
3.4.1 We further process your personal data because it is necessary for the purposes of our legitimate interests (Article 6(1)(f) of the GDPR), in the manner set out below.
3.4.2 The purpose of processing your personal data is necessary to safeguard the controller’s assets. In the event of intentional damage to the assets or failure to meet the obligations under the contract, the personal data will be used for identification purposes to recover any damage to the assets of the controller.
3.4.3 Storage period: For the duration of the customer’s account or for as long as we need the personal data to pursue our legal claims.
We only process your personal data on the basis of your consent:
- in connection with the use of selected Cookies or network identifiers
for the purpose of sending the newsletter (unless you are our customer)
3.5. Cookies and data about your visits to the website
3.5.1 We use the following cookies on our website www.rodolegendary.cz:
(a) Technical cookies: These cookies are used to ensure the proper functioning of our website; they allow for better website navigation, faster loading on repeat visits or secure login to your user account without having to re-enter your password every time you load a page. We do not need your consent to deploy technical cookies.
(b) Analytical/statistical cookies: These cookies let us know about the number of visitors to our website and help us understand how visitors use it. The data we collect in this way is anonymised, but we only use it with your consent, which you grant to us via the cookie bar. In addition, you can set the blocking of analytical/statistical cookies or information about them in your internet browser.
3.6. Sending the newsletter
3.6.1 We need consent from visitors to our website who are not our customers to send the newsletter. You have the option to subscribe for the newsletter by entering your email address.
3.6.2 The purpose of processing your email address is to send commercial communications and offers to the email address you have entered in the registration field.
3.6.3 You have the right to withdraw your consent to the processing of your email address (personal data) at any time. However, this does not affect the lawfulness of the processing of your personal data prior to the withdrawal of your consent. You can withdraw your consent to the processing of your personal data directly in the newsletter in the manner specified in the footer of each issue.
3.6.4 Unless you withdraw your consent at an earlier point, we will process your email address for a period of five years.
4. Who do we transmit your personal data to?
4.1. We transmit your personal data to third parties, i.e., recipients of personal data, in particular for the purpose of operating our website and the services we offer via the website, to fulfil our obligations under the contract and for direct marketing purposes to the extent specified in Article 3 above.
4.2. Recipients of personal data may include, but are not limited to:
4.2.1 hosting provider;
4.2.2 emailing service provider;
4.2.3 payment service provider.
4.2.4 suppliers, insurance companies, external providers of legal representation services, other authorities in consumer proceedings, carriers in connection with the handling of complaints and insurance claims.
4.2.5 tax authorities, tax advisers and auditors, insofar as this is necessary to comply with our legal obligation.
5. Transfer of personal data to third countries
5.1. We process the personal data in the Czech Republic or another EU member state.
6. Your rights in relation to our processing of your personal data
6.1. We process your personal data in a fair and transparent manner, in accordance with the law. We also set out the rights you have in relation to the processing of your personal data below.
6.2. Right of access to personal data
6.2.1 You have the right to access personal data concerning you as a data subject under the conditions set out under Article 15 of the GDPR.
6.2.2 Your personal data is accessible to you from your customer account for the duration of its existence.
6.3. Right to rectification of personal data
6.3.1 If you believe that the personal data we process concerning you is inaccurate or incomplete, you have the right to ask us to rectify or complete it. However, you can rectify or change your personal data yourself as part of your customer account.
6.4. Right to erasure (“right to be forgotten”), right to restriction of processing
6.4.1 You have the right to request that we erase personal data concerning you without undue delay, but only if one of the grounds set out in Article 17 of the GDPR applies.
6.4.2 You have the right to restriction of processing in any of the cases set out in Article 18 of the GDPR.
6.5. Right to object to the processing of personal data concerning you
6.5.1 You have the right to object to the processing of personal data concerning you to the extent that we process personal data on the basis of Article 6(1)(a)(1) of the GDPR, i.e., for the purposes of our legitimate interests; in processing your personal data for direct marketing purposes we rely on legitimate interests (see Article 3.3).
6.5.2 Objection to processing for direct marketing purposes means in practice that you can object to receiving newsletters or other commercial communications, in which case we will stop sending you such newsletters or other commercial communications. However, you can easily unsubscribe directly via the newsletter you receive or in your customer account.
6.6. Right to data portability
6.6.1 You have the right to obtain the personal data concerning you in a structured, commonly used and machine-readable format and, where applicable, the right to transmit the data to another entity without us preventing you from doing so.
6.6.2 You also have the right to ask us to transfer your personal data to another entity acting as a so-called data controller, provided that this is technically feasible.
6.7. Right to withdraw consent to the processing of personal data
6.7.1 If you have granted us consent to the processing of your personal data for purposes that require such consent, you have the right to withdraw that consent at any time. Your withdrawal of the consent will not change anything about the lawfulness of the processing done on the basis of the consent you granted to us before withdrawing it.
6.8. Right to lodge a complaint with the supervisory authority
6.8.1 You have the right to lodge a complaint with the supervisory authority if you believe that your data is processed in contravention of the law. You can lodge the complaint with the supervisory authority, i.e.:
Office for Personal Data Protection (ÚOOÚ)
Pplk. Sochora 27
170 00 Prague
https://www.uoou.cz
6.9. How to exercise your rights?
6.9.1 You can exercise your data protection rights in writing or electronically at the addresses listed in Article 1 above. Please note that in case of doubt, we are entitled to check the identity of the person who has made the request or objection. The rights under Article 6 cannot be exercised over the phone.