Privacy Policy
1. Data controller
The data controller is Martin Mašek, Company ID (IČO): 23095571, registered at V. Volfa 1337/37, 370 05 České Budějovice 2, venue at Krajinská 244/17, 370 01 České Budějovice. Contact: [email protected], +420 733 104 289.
2. What data we process
- name, email, phone number — from the booking and contact forms,
- booking details — station, date, time, duration, price,
- online payment details are processed exclusively by Stripe — card numbers never reach the operator.
3. Purpose and legal basis
We process data to fulfil bookings under contract (GDPR Art. 6(1)(b)) and based on the operator’s legitimate interest in running and securing the club (GDPR Art. 6(1)(f)).
4. Recipients
Data is shared with the following processors:
- Supabase — database infrastructure and admin authentication,
- Stripe — online payment processing,
- our email notification provider (Seznam.cz SMTP) — booking confirmations and alerts.
5. Retention
Booking data is kept for as long as needed to fulfil the booking, and afterwards for as long as required by law (e.g. accounting records for the statutory period). Contact-form messages are deleted once there is no longer a reason to keep them.
6. Your rights
You have the right to access, correct, delete, or restrict processing of your data, to data portability, and to object to processing. Exercise these rights at [email protected]. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (uoou.cz).
7. Cookies
The website only uses strictly necessary cookies — storing the language preference and the admin login session. We do not currently use any marketing or analytics tracking cookies, so cookie consent is not required.