Privacy policy

Controller

The controller of personal data is Zdravá Sedmnáctka s.r.o., company ID 08082316, with its registered office at Na Chobotě 1420/16, 163 00 Praha 6 – Řepy, the operator of Sportovní centrum Řepy. The same company owns and runs the website, the domain and the online services.

Data protection contact

For questions about personal data and to exercise your rights, contact [email protected], write to our registered office or ask at the reception of the centre.

What data we process and why

For each purpose we state what data we process, on what basis and how long we keep it.

Purpose	Data	Legal basis	Retention period
Running and securing the website	IP address, time and address of the request (technical server logs)	legitimate interest (Article 6(1)(f) GDPR): running and security of the website	for as long as needed to keep the website running and secure
Measuring visits and advertising (cookies)	cookie identifiers, data about how the website is used	consent (Article 6(1)(a) GDPR, Section 89(3) of Act No. 127/2005 Coll.)	according to the table of cookies in the section Cookies; your choice in the banner lasts 6 months
Satisfaction survey	answers; name, email and phone number only if you give them	consent for contact details (Article 6(1)(a) GDPR); improving our services	answers for as long as needed to evaluate them and improve our services; contact details until you withdraw consent
Questions, comments and enquiries	name, email, phone number, content of the message, for an enquiry details of the event (venue, date, number of people)	handling your question or steps before entering into a contract (Article 6(1)(b) and (f) GDPR)	for as long as needed to deal with the question or enquiry, and then for as long as claims under a possible contract can be made
Booking of sports facilities (iSport)	name, contact details, date and subject of the booking	performance of a contract (Article 6(1)(b) GDPR)	for the duration of the booking, and then for the period required by law (for example accounting rules)
Booking of accommodation (Previo)	name, contact details, dates of stay and data needed for accommodation (guest book, local fee)	performance of a contract and legal obligation (Article 6(1)(b) and (c) GDPR)	for the period required by law (guest book, local fee, accounting records)
Sign-ups for classes and courses (EOS)	data of the child and the legal guardian, contact details, payments	performance of a contract (Article 6(1)(b) GDPR)	for the duration of the membership or course, and then for the period required by law (for example accounting rules)
Newsletter (once launched)	email, record of consent	consent (Article 6(1)(a) GDPR, Act No. 480/2004 Coll.)	until you withdraw consent
Job opportunities	name, contact details, CV	steps before entering into a contract; consent for longer retention (Article 6(1)(b) and (a) GDPR)	for the duration of the selection process; longer with your consent
Entry to the centre, chips and tills	data on the use of a chip or card (identifier, time and place of passage), admission or season ticket bought and payments	performance of a contract (Article 6(1)(b) GDPR)	for the duration of the contract, and then for the period required by law (for example accounting rules)
Camera system	video recording of people in the monitored areas of the centre	legitimate interest (Article 6(1)(f) GDPR): protection of property and safety of people	only for as long as needed to protect property and the safety of people
Accounting and tax records	identification and contact details of customers and suppliers, invoicing details, payments	legal obligation (Article 6(1)(c) GDPR): the Accounting Act and tax regulations	for the period required by law

Visiting the website

Like every web server, the server on which the website runs briefly stores technical records of requests (IP address, time, page address). They serve only to keep the website running and secure.

The website loads the occupancy of the pool and wellness from our service. We send no data about you to it.

Satisfaction survey

The survey is anonymous. You give your name, email and phone number only if you want us to get back to you, and only with your consent. The answers are not stored on the website: they are sent by email to the address of the centre and are used only to improve our services and to reply to you.

Email and telephone

When you write to us or call us, we use your data only to deal with your question, enquiry or comment.

Where we keep data

We keep the data processed outside the website on devices, local disks and servers of the company at the registered office of the centre and in the cloud service Google Workspace (email, shared drives and documents). The camera footage and the data from the access system and tills (entries, chips, payments) are stored on our own equipment at the registered office. We keep the accounts in the accounting system Pohoda.

Bookings, sign-ups and accommodation

• Bookings of sports facilities run in the iSport booking system. A link from our website takes you there, and you enter your data directly in that system.
• Sign-ups for classes and courses run in the EOS club system, which is operated for us by its supplier. We use the data you enter in the sign-up (child, legal guardian, contact details, payments) to run the class, for billing and to contact you.
• Hotel accommodation can be booked in the booking form of the Previo system embedded in the page Accommodation booking, or by email or phone at the reception. The form is loaded from the domain booking.previo.app, and the data you enter in it (name, contact details, dates of stay) is processed by Previo s.r.o., Kolbenova 882/3a, Praha, as a processor for Zdravá Sedmnáctka under a contract concluded on 9 October 2026. We also process the data needed for accommodation as required by law (guest book, local fee). On the domain booking.previo.app the form stores a technical session cookie PHPSESSID, which is necessary for the booking and does not require consent.

Who we share data with

Our suppliers and systems that we need for this process the data. They are processors who process the data only on our instructions.

Processor	What it is used for	Note
iSport (operator of the sports facility booking system)	booking of halls, courts and swimming lanes	data processing agreement concluded
Supplier of the EOS club system	sign-ups for classes and courses, records of athletes	data processing agreement concluded
Previo s.r.o., Kolbenova 882/3a, Praha	booking of accommodation in the embedded form	terms of use of 9 October 2026; data processing agreement concluded
Resend	sending emails from forms (satisfaction survey)	based in the USA; the transfer is governed by the EU-US Data Privacy Framework or standard contractual clauses; data processing agreement concluded
Vercel	website hosting	based in the USA; the entry will be updated when the live website moves to a server in the EU (Hetzner); data processing agreement concluded
Google (Google Analytics)	measuring visits, only with your consent	based in the USA; the transfer is governed by the EU-US Data Privacy Framework
Pipedrive	records of contacts and enquiries	data processing agreement concluded
Ecomail	sending the newsletter once it is launched	data is stored in the EU; data processing agreement concluded
Hetzner Online GmbH, Germany	server for running the website and related services of the company	server in the EU
Google Workspace	email, shared drives and documents of the company	based in the USA; the transfer is governed by the EU-US Data Privacy Framework

We may also pass data to public authorities where the law requires it.

Your rights

You have the right of access to your data, to rectification and erasure, to restriction of processing, to data portability and the right to object. You can withdraw any consent you have given at any time, for example by unsubscribing from the newsletter. Write to us at [email protected], send a request by post to our registered office or submit it at the reception of the centre. We will reply without undue delay and in any case within one month of receiving the request.

If you believe that we handle your data in breach of the rules, you can submit a complaint to the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Praha 7.

Cookies

Cookies are small files that the website stores in your browser. We use the necessary cookie only to remember your choice in the cookie banner. We use analytics and marketing cookies only with your consent: until then the measurement and advertising codes are not loaded at all.

Analytics cookies show us how people use the website so that we can improve it. Marketing cookies make it possible to show our offers on other websites and social networks and to measure how advertisements perform. We process them on the basis of your consent (Article 6(1)(a) GDPR, Section 89(3) of Act No. 127/2005 Coll.). You can withdraw or change your consent at any time with the button below the table or with the link Cookie settings in the footer of the website; your choice lasts 6 months.

The accommodation booking form (Previo) stores a technical session cookie PHPSESSID on the domain booking.previo.app. It is necessary for the booking, does not require consent and is not in the table below, because our website does not set it.

Some providers (Google, Meta) may transfer data to the USA. The transfer is governed by the EU-US Data Privacy Framework, to which these providers are certified.