Privacy policy and information on personal data processing

​

I. Introductory provisions

1. For the purposes of this Policy:

   1. The Operator is David Rieger, business identification number 09140638, registered office: Chomutov, Kamenný Vrch 5279, Czech Republic; email: info@drgym.fitness.

   2. Personal Data means first and last name, residential address, email address, telephone number, and the business identification and tax identification numbers of a self-employed individual.

2. As controller of Personal Data, the Operator provides information on the manner and scope of processing and on the related rights of the User, as defined below.

3. The Operator is a personal trainer and nutrition coach and runs the information website www.drgym.fitness for that purpose. Within this service, the Operator processes Personal Data:

   • to the extent provided in connection with orders for the Operator’s products and/or services;

   • for the purposes listed below in point 4.

4. The Operator processes Personal Data for the following purposes:

   • compliance with legal obligations, particularly accounting, tax and archiving obligations;

   • marketing and commercial offers relating to the Operator’s services;

   • protection of the controller’s rights and legally protected interests (legitimate interest).

5. The Operator is the controller of Personal Data. No other entity processes the Personal Data. Only the controller has access to the Personal Data being processed.

II. Personal data protection and processing information

1. Individuals who complete and submit an order form to the Operator through www.drgym.fitness (the “User”) are subject to Act No. 101/2000 Coll., on Personal Data Protection, as amended, and other relevant legislation.

2. The User acknowledges that processing of Personal Data by the Operator begins upon submission of the completed order form.

3. If the User does not provide their Personal Data, it is not possible to conclude a contract with the Operator and/or provide the resulting services. The Personal Data is necessary for the specific product or service.

4. Personal Data is processed during negotiations to conclude a contract between the Operator and the User, for the purpose of concluding that contract, and throughout the contractual relationship.

5. If a contract is concluded under the Operator’s Terms and Conditions, Personal Data is processed and retained for the following 36 months in case a dispute arises concerning the relationship between the Operator and the User, to protect the Operator’s legitimate interests. These interests include proper and timely performance of contractual commitments and compliance with legal obligations arising from the contractual relationship.

6. To comply with the obligation to archive accounting records under Act No. 563/1991 Coll., on Accounting, as amended, Personal Data other than email address and telephone number is further processed and retained for five years, beginning with the year following the year in which the contract was concluded.

7. Telephone numbers and email addresses are processed for marketing and commercial communications during the User’s registration period under Article II, paragraph 5, and for a further 12 months, unless the User withdraws consent at any time.

8. After the periods specified in Article II, paragraphs 4, 5, 6 and 7 expire, the Operator destroys the Personal Data.

9. The User must provide only truthful and accurate Personal Data.

10. The Operator makes every effort to prevent unauthorised processing of Personal Data.

11. Users’ Personal Data will not be transferred to third parties, a third country or an international organisation.

12. Personal Data is and will be processed electronically by non-automated means.

13. The User acknowledges that their Personal Data is stored in Google LLC data centres. The Operator uses G Suite and Google Cloud Platform services, which operate in accordance with European personal data protection standards.

14. The User acknowledges that Google LLC cookies may be stored on their device.

III. User rights relating to processing

1. The User may withdraw consent to processing of Personal Data at any time where consent is the legal basis. Consent cannot be withdrawn for processing required to fulfil the Operator’s legal obligations. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. It also does not affect processing on another legal basis, particularly where necessary for performance of a contract, compliance with a legal obligation or other reasons provided for by applicable legislation.

2. The User also has the right:

   • to request access to their Personal Data from the Operator;

   • to rectification of the Personal Data provided;

   • to erasure of the Personal Data provided;

   • to restriction of processing; and

   • to lodge a complaint with the Czech Office for Personal Data Protection.

3. If the User believes that the Operator processes their Personal Data in a way that violates their privacy or applicable legislation, particularly if the data is inaccurate in relation to the processing purpose, they may:

   • request an explanation from the Operator by emailing info@drgym.fitness;

   • object to processing and request a remedy by emailing info@drgym.fitness, for example by blocking, correcting, supplementing or destroying Personal Data. The Operator decides on the objection without delay and informs the User. If the objection is rejected, the User may contact the Office for Personal Data Protection directly. This does not affect the User’s right to contact that Office directly at any time.

4. If the User requests information on the scope or manner of processing, the Operator must provide it without delay and no later than one month after receiving the request at info@drgym.fitness.

5. If the User exercises their right of access electronically, the Operator also provides the information electronically unless the User requests another method.

6. For repeated and unfounded requests for a physical copy of processed Personal Data, the Operator may charge a reasonable fee for the associated administrative costs.

IV. Final provisions

1. All legal relationships arising in connection with Personal Data processing are governed by the law of the Czech Republic, regardless of where access took place. Czech courts have jurisdiction over disputes concerning privacy between the User and the Operator.

2. Users who provide Personal Data through the order form to conclude a contract or consent to processing do so voluntarily and in their own name; the Operator does not direct their activity.

3. The Operator may amend or supplement this Policy. Users will be informed of each change by email at least 30 days before it takes effect.

4. This Policy takes effect on 16 April 2018.