PRIVACY POLICY OF THE www.heavengym.cz WEBSITE

Article I. Introductory provisions

Sports4Fun s.r.o.
ID: 02968363
C 22639 registered at the Regional Court in České Budějovice
us. Přemysl Otakar II. 123/36,
České Budějovice 1,
370 01 České Budějovice

(hereinafter also referred to as "We" or "I"), as the data controller, informs you as a user of the www.heavengym.cz website and as its business partners about the collection of personal data and the privacy policy described below.

In the following you will find out in particular:

1. What personal data we will process about you;
2. For what purposes and how we will process your personal data;
3. To whom your personal data may be transferred;
4. For how long will we process your personal data and
5. What rights you have in relation to the protection of your personal data.

If you need any part of the text explained, advised or to discuss further processing of your personal data, you can contact us at any time at simecek@heavengym.cz.

This privacy policy applies mutatis mutandis to our other customers and suppliers who are not users of our website but are our business partners on the basis of contracts concluded in non-electronic form or on the basis of partial orders made in writing or orally.

Article II. Processing of children's personal data

Our website is not intended for children under the age of 16. We do not process personal data of children under 16 years of age.

Article III. Scope of processing of personal data

When you contact us through the website, you may be asked to fill in certain information about yourself or your company. This information may include, but is not limited to:

1. a) Your name and surname,
2. (b) the business name,
3. (c) the residential address or registered office of the company,
4. (d) the person's identification number and tax identification number,
5. (e) a telephone number; or
6. (f) email address.

Article IV Purpose of processing

We primarily use the data you provide to us to fulfil our contracts with you or to contact you back and provide you with the information you have requested. All personal data is processed in a lawful and transparent manner and only adequate, relevant and necessary data is requested in relation to the above processing purpose.

In addition, we may use your name, surname, business name, residential or business address, telephone number or email address to send you commercial communications, but only on the basis of your express consent, i.e. to inform you about events, publications, goods or services we provide that may be of interest to you. Our company prides itself on the fact that you will not receive marketing commercial communications from us without your free consent.

The provision of personal data for the purposes of performance of the contract and the provision of personal data for the purposes of responding to your enquiries or information requested by you is a contractual requirement of ours, and failure to provide such data may result in failure to conclude the contract or to respond to your enquiries.

In addition, you can refuse the processing of your personal data for the purpose of sending commercial communications at any time and this will not affect our other relationships. Simply send us an email with the relevant request to simecek@heavengym.czz or to the other address from which you received commercial communications from us.

Article V. Who has access to your personal data

Your personal data will be processed by us as the controller. We may transfer your personal data to our subcontractors for the above purposes to carry out the processing for us. Personal data may be transferred to:

1.1.1. our external accounting and tax firm,

1.1.2. our external IT company that provides us with server, web, cloud and other IT services,

Article VI. Period of processing of personal data

We will process your personal data for as long as we provide you with our goods and services or perform a mutual contract, or for as long as necessary to fulfill archiving obligations under applicable laws, such as Act No. 563/1991 Coll., on Accounting, Act No. 499/2004 Coll., on Archiving and File Service, Act No. 133/2000 Coll., on Population Registration and Birth Numbers, or Act No. 235/2004 Coll., on Value Added Tax.

We will securely and thoroughly dispose of your personal data, both paper and electronic, at the end of the performance of our mutual contract and after the expiry of the statutory archiving periods.

Article VII. Use of cookies

In accordance with the law, our website places files, commonly referred to as cookies, on your device. Cookies are small data files that help the websites you visit remember the actions and settings you have made on them, so that you do not have to enter this information repeatedly. Cookies are not dangerous, but they are important for privacy protection. Cookies cannot be used to identify visitors to the site or to misuse login credentials. We also use third party cookies for traffic analysis (e.g. Google Analytics), Google adwords, Google search console. These cookies are controlled by third parties and we do not have access to read or write this data. Most browsers automatically accept cookies unless the browser is set otherwise. By using our website you agree to the storage of cookies. You can restrict or block the use of cookies at any time in your web browser settings.

Article VIII. Your rights arising from the processing of personal data

You have the following rights in relation to our processing of your personal data:

1. (a) the right of access to personal data;
2. (b) the right to rectification of personal data;
3. (c) the right to erasure of personal data ("right to be forgotten");
4. (d) the right to restrict the processing of personal data;
5. (e) the right to data portability;
6. (f) the right to object to the processing of personal data;
7. (g) the right to lodge a complaint about the processing of personal data.

Your rights are explained below to give you a clearer idea of their content. You can exercise all your rights by contacting us at simecek@heavengym.cz

You can lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection (www.uoou.cz).

The right of access to personal data means that you can ask us at any time to confirm whether or not the personal data concerning you are being processed and, if so, for what purposes, to what extent, to whom they are disclosed, how long we will process them, whether you have the right to rectification, erasure, restriction of processing or to object, where we obtained the personal data and whether the processing of your personal data results in automated decision-making, including possible profiling. You also have the right to obtain a copy of your personal data, the first provision of which is free of charge, and we may charge reasonable administrative costs for further provision.

The right to rectification of personal data means that you can ask us to correct or complete your personal data at any time if it is inaccurate or incomplete.

The right to erasure of personal data, which means that we must erase your personal data if (i) it is no longer necessary for the purposes for which it was collected or otherwise processed, (ii) you withdraw consent and there is no further reason for the processing, (iii) you object to the processing and there are no overriding legitimate grounds for the processing, (iv) the processing is unlawful, or (v) a legal obligation to do so exists.

The right to restrict the processing of personal data, which means that until the disputed issues regarding the processing of your personal data are resolved, specifically if (i) you contest the accuracy of the personal data, (ii) the processing is unlawful but instead of erasing the personal data you only want to restrict the processing, (iii) we no longer need your personal data for the purposes of the processing but you do, (iv) or if you have objected to the processing, see below. In this case, we may only store the Personal Data and further processing is subject to your consent or that the data is needed for the establishment, exercise or defence of legal claims.

The right to data portability, which means that you have the right to obtain your personal data that you have provided to us with your consent for processing or for the purposes of performance of a contract in a structured, commonly used and machine-readable format and, where technically feasible, you have the right to have us transfer that data to another controller.

The right to object to the processing of your personal data, which means that you can object to us processing your personal data in writing or electronically, which will cause us to no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests or rights and freedoms.

This Privacy Policy is effective as of May 25, 2018.