CZ ← Back to the site

Privacy policy

1. Data controller

The data controller is:

Tomáš Pospíšil, a sole trader registered in the Czech Republic
Company ID (IČO): 23589353
Registered in the Czech Trade Register, Šlapanice Municipal Office
Registered address: Palkovského 498/4, 664 49 Ostopovice
E-mail: [e-mail]
Phone: [phone]
[VAT payer / not a VAT payer]

2. What data we process

  • Contact details: name, e-mail, phone (WhatsApp), city and country.
  • Data needed for your plan and coaching: age, height, weight, occupation, sports background, skills, goals, training frequency, location and equipment.
  • Health data: injuries and limitations, if you provide them. This is a special category of personal data.
  • Payment and billing data: card details are processed directly by Stripe; the controller has no access to them.
  • Communication you exchange with the controller.

3. Purposes and legal bases

  • Handling enquiries – steps prior to entering a contract, Art. 6(1)(b) GDPR.
  • Providing services – performance of a contract, Art. 6(1)(b) GDPR.
  • Health data – your explicit consent given in the form, Art. 9(2)(a) GDPR. You can withdraw it at any time.
  • Accounting and tax – legal obligation, Art. 6(1)(c) GDPR.
  • Legal claims and website security – legitimate interest, Art. 6(1)(f) GDPR.

4. Retention

  • Enquiries that did not lead to cooperation: 12 months.
  • Client data: for the duration of cooperation and 3 years after.
  • Accounting records: as required by law (usually 10 years).
  • Health data: until consent is withdrawn, at most for the duration of cooperation.

5. Processors

  • Web3Forms – delivering form submissions;
  • Stripe – payments;
  • TrueCoach – the coaching app;
  • Vercel – website hosting;
  • e-mail provider and WhatsApp (Meta) if you choose to communicate that way;
  • accountant or tax advisor where required by law.

Some processors are based outside the EU (mainly the USA). Transfers rely on the EU–US Data Privacy Framework or standard contractual clauses.

6. Your rights

You have the right to access, rectify and erase your data, restrict processing, data portability and to object to processing based on legitimate interest. You can withdraw consent at any time by e-mail. You may lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz) or your local supervisory authority.

7. Security

We protect data with appropriate technical and organisational measures. No automated decision-making or profiling takes place. See also Cookies. This policy takes effect on 24. 10. 2026.