Skip to content

Privacy policy

Valid and effective from: 5 October 2026

We take your privacy seriously. On this page we explain what personal data we process, why we process it, how long we keep it, who we may share it with and what rights you have. We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Czech Act No. 110/2019 Coll., on the processing of personal data, Act No. 480/2004 Coll., on certain information society services, and Section 89 of Act No. 127/2005 Coll., on electronic communications, which governs the storing of cookies.

This is a translation for your convenience; in the event of any discrepancy, the Czech version prevails.

1. Who is the controller of your personal data

The controller of your personal data is:

Controller: Wellness club Plzeň DZ s.r.o.
Registered office: Kaznějovská 2111/6a, Bolevec, 32300 Plzeň
Company ID (IČO): 17604681
VAT ID (DIČ): CZ17604681
Legal form: limited liability company (s.r.o.)
File number: C 42785, kept by the Regional Court in Plzeň
Email: info@wellnessclubplzen.cz

The controller has not appointed a data protection officer (DPO), as it is not legally required to do so.

2. What personal data we process

We only process data that you provide to us yourself (for example when you contact us by email or phone) and data generated when you use this website. This mainly includes:

  • identification and contact details (first name and surname, email, phone),
  • the content of your communication (the text of your enquiry),
  • technical data on the use of the website (cookies, IP address, device and browser type) — analytics and marketing data only with your consent given in the cookie bar.

We obtain personal data directly from you. From public sources (for example the commercial or trade register) we may only verify the billing details of business customers.

Bookings, gift voucher purchases and the e-shop do not take place on this website but in separate systems at objednavky.wellnessclubplzen.cz and eshop.wellnessclubplzen.cz. This policy applies to this website.

We do not process any special categories of personal data (sensitive data) through this website.

3. Why we process data and on what legal basis

We always process your data for a specific purpose and on the appropriate legal basis under Article 6 GDPR.

Handling your enquiry

We process your name, email, phone number (if you provide it) and the content of your message in order to handle an enquiry sent by email or made by phone. The legal basis is taking steps prior to entering into a contract or performance of a contract (Article 6(1)(b) GDPR), or our legitimate interest in communicating with people interested in our services and in protecting our legal claims (Article 6(1)(f) GDPR).

Compliance with legal obligations

We process billing details and tax documents in order to meet obligations imposed on us by law (accounting, taxes, archiving). The legal basis is compliance with a legal obligation (Article 6(1)(c) GDPR).

Cookies, analytics and marketing

The website uses cookies and similar technologies (including the browser’s local storage). Necessary (technical) cookies provide the basic functionality of the website and we use them on the basis of our legitimate interest in its proper operation. Analytics tools (Google Analytics and Microsoft Clarity) only store cookies and track how the website is used on the basis of your consent to the analytics category in the cookie bar (Article 6(1)(a) GDPR).

To measure conversions, for remarketing and to build advertising audiences, we use Google Ads and the Meta (Facebook) pixel. They only run on the basis of your consent to the marketing category in the cookie bar (Article 6(1)(a) GDPR). If you do not give your consent, the Meta pixel does not load and no marketing cookies are created.

We manage our measurement tools through Google Tag Manager and use Google’s consent mode (Consent Mode). Google Tag Manager and Google’s measurement code therefore load even without consent; until you give your consent, they do not store any cookies in your browser and only send Google limited technical signals without cookie identifiers (for example that a page was viewed), which are used for aggregated traffic estimates; Google technically receives your IP address and browser data in the process. The legal basis is our legitimate interest in basic measurement of website traffic (Article 6(1)(f) GDPR).

We store your choice (consent or refusal, including the date and scope) in your browser’s local storage so that the website respects your decision. You can change your settings or withdraw your consent at any time in the on this website.

Map on the website

The website contains an embedded Google map. It only loads after you click on it, or straight away if you have consented to marketing cookies. When it loads, your IP address and technical data about your browser are passed to Google, which may store its own cookies. The map only loads on the basis of your consent — by clicking on it or by consenting to the marketing category (Article 6(1)(a) GDPR).

Security and server logs

To ensure the security and stability of the website, we process server operation and security logs (in particular the IP address, time of access and browser type). The legal basis is our legitimate interest in protecting the website against misuse and attacks (Article 6(1)(f) GDPR).

4. Who we may share personal data with

We do not sell your personal data or pass it on to third parties for their own marketing. To run the website and provide our services, we use trusted partners — processors under a data processing agreement and, for the measurement, advertising and map services of Google and Meta, also recipients who process the data as independent or joint controllers under their own terms. All of them access the data only to the extent necessary:

  • Platform operation and website hosting: Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden; the website is delivered to visitors via the network of Cloudflare, Inc. (USA)
  • Map data: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Maps)
  • Web analytics and ad measurement: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Tag Manager, Google Analytics, Google Ads)
  • Visitor behaviour analysis: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (Microsoft Clarity) — runs only after you consent to the analytics category
  • Social media advertising: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (Meta pixel) — runs only after you consent to the marketing category
  • Software provider: ANT studio s.r.o., Company ID: 29113229, registered office Slovanská alej 2182/30, 326 00 Plzeň, registered with the Regional Court in Plzeň, Section C, Insert 25698
  • Software provider: mravenci na online s.r.o., Company ID: 06094953, registered office Na Jíkalce 2906/19a, Jižní Předměstí, 301 00 Plzeň, registered with the Regional Court in Plzeň, Section C, Insert 34582
  • Email communication: the controller’s email service provider
  • Accounting and tax services: the controller’s external accountant and tax adviser

We only share data with the operators of analytics and marketing tools to the extent of your consent; the exception is the limited signals without cookie identifiers described in section 3. If we start using another tool, we will update this list before it goes live.

We may also disclose your personal data to public authorities where required to do so by law.

5. Transfers of personal data outside the EU/EEA

The website is delivered via the network of Cloudflare, Inc.; the map and measurement tools are provided by Google, visitor behaviour analysis by Microsoft and the advertising pixel by Meta. These providers may also process data (in particular your IP address and cookie identifiers) in the United States of America. Such transfers take place on the basis of the European Commission’s adequacy decision (EU–US Data Privacy Framework), to which Cloudflare, Inc., Google LLC, Microsoft Corporation and Meta Platforms, Inc. have signed up.

6. How long we keep personal data

  • Communication and enquiries: for as long as necessary to handle the enquiry and then only for as long as needed to establish or defend our legal claims.
  • Accounting and tax documents: for the period required by law, in particular the Accounting Act and the VAT Act (no longer than 10 years).
  • Your choice in the cookie bar: 12 months in your browser’s local storage; after that the website will ask you again.
  • Analytics and marketing data: for the period set in each tool under its operator’s terms. The cookies of these tools are valid in your browser for no more than 2 years, and the website deletes them when you withdraw your consent.
  • Server operation and security logs: for as long as the hosting provider keeps them to ensure the security and operation of the website.

When these periods expire, we delete or anonymise the data according to these rules.

7. Is providing personal data mandatory?

Providing data is voluntary. In some cases, however, it is necessary in order to provide a service — without your contact details we cannot reply to your enquiry, and without billing details we cannot issue an invoice. Consent to analytics and marketing cookies is entirely voluntary — the website works without it and refusing it has no consequences for you.

8. Automated decision-making and profiling

We do not carry out automated decision-making that would have legal or similarly significant effects on you.

With your consent to the marketing category, we use Google Ads and the Meta pixel, which involve profiling for marketing purposes (measuring conversions, remarketing, building advertising audiences and personalising ads). Such processing takes place solely on the basis of your consent given in the cookie bar, and you can end it at any time by withdrawing your consent.

9. How personal data is secured

We have taken appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse — in particular an encrypted connection (HTTPS) between your browser and the website. Only authorised persons bound by confidentiality have access to personal data.

10. Your rights

In connection with the processing of your personal data you have the following rights:

  • the right of access to your personal data,
  • the right to rectification of inaccurate or incomplete data,
  • the right to erasure (“right to be forgotten”) where the legal conditions are met,
  • the right to restriction of processing,
  • the right to data portability,
  • the right to object to processing based on legitimate interest; you may object to processing for direct marketing purposes at any time and we will always comply,
  • the right to withdraw consent at any time — withdrawal does not affect the lawfulness of processing carried out before it,
  • the right to lodge a complaint with a supervisory authority.

You can exercise your rights by email or in writing using the contact details below. We handle requests free of charge, no later than one month after receiving them; in complex cases we may extend this period by a further two months, in which case we will let you know. To protect your data, we may ask you to verify your identity.

The supervisory authority in the Czech Republic is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 727/27, 170 00 Praha 7, www.uoou.gov.cz.

11. How to contact us

To exercise your rights or with any question about data protection, please contact us:

Email: info@wellnessclubplzen.cz
Address: Wellness club Plzeň DZ s.r.o., Kaznějovská 2111/6a, Bolevec, 32300 Plzeň

12. Updates to this policy

We update this policy from time to time, in particular if the way we process personal data or the tools we use change. The current version is always available on this page; the date of the last update is shown at the top.