Protecting your personal data matters to us. This document explains what personal data we process, for what purpose, how long we keep it and what rights you have under Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on the protection of personal data.
1. Controller
The controller of your personal data is:
- Company name
- AKTIVITY PLUS, s.r.o.
- Registered office
- Textilná 30, 934 05 Levice
- Company ID (IČO)
- 53 332 636
- Registration
- Commercial Register of the District Court Nitra, section: Sro, insert no. 52563/N
- albina.masarykova@gmail.com
- Phone
- +421 908 376 297
For any questions about your personal data, please use the contact details above.
2. What data we process and why
We process personal data only to the extent necessary for each purpose.
2.1 Contact via WhatsApp and phone
- Data
- name, phone number, content of messages and calls
- Purpose
- arranging a personal meeting, answering questions
- Legal basis
- steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR)
- Retention
- 6 months after the last contact if you do not register
2.2 Registration and membership
- Data
- full name, e-mail
- Purpose
- concluding and performing the membership contract, verifying the member's identity
- Legal basis
- performance of a contract (Art. 6(1)(b) GDPR)
- Retention
- for the duration of the membership and 3 years after it ends
2.3 App and gym entry
- Data
- user account, personal QR code, entry records (date and time), membership validity
- Purpose
- enabling entry to the gym, managing and renewing membership
- Legal basis
- performance of a contract (Art. 6(1)(b) GDPR)
- Retention
- for the duration of the membership / entry records 12 months
2.4 Payments and accounting
- Data
- billing details, payment records
- Purpose
- bookkeeping and tax obligations
- Legal basis
- legal obligation (Art. 6(1)(c) GDPR), Slovak Accounting Act
- Retention
- 10 years from the end of the year the records relate to
2.5 CCTV
- Data
- video recordings of people on the gym premises
- Purpose
- protection of property, safety of members and prevention of entry misuse
- Legal basis
- legitimate interest of the controller (Art. 6(1)(f) GDPR)
- Retention
- 72 hours, longer only when dealing with a specific incident
2.6 Website operation
- Data
- IP address, browser type, time of visit (technical server logs)
- Purpose
- ensuring the operation and security of the website
- Legal basis
- legitimate interest of the controller (Art. 6(1)(f) GDPR)
- Retention
- for as long as necessary to ensure the security of the site, according to the policies of the hosting provider GitHub, Inc.
3. Legitimate interest
For CCTV and website operation we process data on the basis of legitimate interest. Our legitimate interest is protecting property and the safety of people in a self-service gym without permanent staff, and keeping the website secure and working. You may object to this processing at any time (see section 7).
4. Who we share data with
Your data may also be processed by the following parties who provide services to us (processors) or to whom we disclose it:
- Clubspire s.r.o. — provider of the app and entry system
- GitHub, Inc. — website hosting (GitHub Pages)
- Meta — if you contact us via WhatsApp
- Accounting office — bookkeeping
- GoPay Czech — processing card payments in the app
- Public authorities where required by law (e.g. the police during an investigation)
5. Transfers outside the EU
Some providers (GitHub, Meta/WhatsApp) may also process data in the USA. Transfers are based on the EU-U.S. Data Privacy Framework / standard contractual clauses approved by the European Commission.
6. How long we keep data
We keep data only for the periods stated for each purpose in section 2. After that, we delete or anonymise it unless the law requires us to keep it longer.
7. Your rights
In connection with the processing of your personal data, you have the right to:
- access your data and obtain a copy,
- have inaccurate or incomplete data corrected,
- have your data erased if it is no longer needed or processed unlawfully,
- restrict processing,
- data portability for data you have provided to us,
- object to processing based on legitimate interest,
- withdraw consent at any time where processing is based on consent.
You can exercise your rights by e-mail at albina.masarykova@gmail.com. We will reply without undue delay and within one month at the latest.
8. Right to lodge a complaint
If you believe the processing of your data breaches the law, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk.
9. Obligation to provide data
Providing the data needed for registration is a contractual requirement. Without it, we cannot conclude a membership or give you access to the gym.
10. Automated decision-making
We do not carry out automated decision-making or profiling with legal effects on you.
11. Cookies
This website does not use cookies or any analytics or advertising tools. Fonts are stored on our own website and the site does not load content from third parties.
12. Changes to this document
We may update this document, for example when laws or our services change. The current version is always published on this page together with its effective date.