Information on the processing of personal data
IN THE GOLFERIS MARKET APP
Your personal data is processed as an administrator by the company:
name: Volcano Health Club s.r.o.
ID: 28434714
with registered office: K Sopce 839/30; Prague 5 – Jinonice; 158 00
sp. stamp C 141246 held at the Municipal Court in Prague (hereinafter referred to as the "Administrator"),
which hereby informs you about the processing of your personal data.
This document contains detailed information on the processing of your personal data by the Controller in the sense of Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on free movement of this data and on the repeal of Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "GDPR"), in particular:
what personal data of yours is processed by the Administrator;
for what purpose and for how long the Administrator processes your personal data;
what rights you have and how you can exercise them.
Overview of basic concepts
Below, for better clarity, we present a short overview of the basic terms that relate to the processing of personal data, in accordance with their definition according to the GDPR:
Personal data – any information about a natural person (data subject, in this case members of the Administrator) from which the data subject is identified or identifiable, either directly (from the data itself) or indirectly (in connection with other data available to the administrator) for example, name, identification number, location data, network identifier or to one or more special elements of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
Processing of personal data - any operation or set of operations that is performed on personal data or sets of personal data with or without the aid of automated procedures, such as collection, recording, arrangement, structuring, storage, adaptation or alteration, retrieval, inspection, use, disclosure transmission, dissemination or any other disclosure, arrangement or combination, restriction, erasure or destruction.
Administrator – the administrator is a person (natural or legal entity), public authority, agency or other entity that alone or jointly with others determines the purposes and means of personal data processing.
Processor – a processor is a person (natural or legal entity), public authority, agency or other entity that processes personal data for the controller.
Recipient – the recipient is a person (natural or legal entity), public authority, agency or other entity to whom personal data is provided.
Profiling - any form of automated processing of personal data consisting of their use to evaluate some personal aspects related to the data subject, in particular to analyze or estimate aspects related to his work performance, economic situation, state of health, personal preferences, interests, reliability, behavior, location or movement.
Principles, policies and procedures in the processing of personal data
When processing your personal data, the Administrator adheres to the following principles and procedures:
▪ processes your personal data in a correct, legal and transparent manner;
▪ It processes your personal data only for the purposes described in this document and only to the extent necessary to fulfill such purposes;
▪ It considers your personal data to be always true, accurate and up-to-date, in the event of any change to your personal data, it hereby asks you to update them;
▪ It processes your personal data only for the time necessary to fulfill the processing purposes, as specified below in this document;
▪ Protect your personal data in such a way as to prevent their unauthorized use or disclosure to persons who are not authorized to process them, or to prevent any other breach of the security of your personal data;
▪ when processing your personal data, there is no decision-making based solely on automated processing, including profiling, which would have legal effects for you or similar effects that would significantly affect you in a similar way;
▪ The administrator has properly selected its processor, as further specified in these terms and conditions, in order to prevent the misuse of your personal data.
Categories of processed personal data
1.1. To register for the Application, you must provide your personal data to the Administrator, namely first name, last name, e-mail address and residential address. You will provide your data to the Administrator by filling out the membership application, which is available online on the Administrator's website / in the Administrator's premises upon request from an authorized person of the Administrator (manager, secretary, etc.). On the basis of these personal data, the authorized person of the Administrator registers you in the Application.
1.2. After the registration of your person by the Administrator, the authorized person of the Administrator must fill in your additional personal data in order to fulfill the processing purposes. These are the following personal data:
1.2.1. Title;
1.2.2. Personal identification number;
1.2.3. Handicap – a unique number representing the quality of golf players;
1.2.4. Telephone number;
1.2.5. Email address;
1.2.6. Membership number;
1.2.7. Period and membership;
1.2.8. Information about payments you have made;
1.2.9. Data on sms messages and emails sent to you from the Application;
1.3. We obtain your personal data directly from you when you provide this data for the purpose of registration to the Administrators Application, by filling out the membership application available online on the Administrator's website / on the Administrator's premises.
1.4. The Administrator also obtains data from other sources, namely from the Czech Golf Federation, which publishes data about the course of your tournaments on its website.
Purpose, legal basis and time of processing
Purpose of processing
2.1. The administrator processes your personal data for the following purposes:
2.1.1. provision of performance on the basis of a membership contract with the Administrator, the content of which is defined by the terms of membership;
2.1.2. sending commercial messages;
2.1.3. settlement of any claims between you and the Administrator;
2.1.4. fulfillment of legal obligations arising from legal regulations for the Administrator;
2.1.5. handling your possible requests, suggestions or complaints.
The administrator cannot process your personal data for purposes other than those mentioned above.
Legal basis of processing
2.2. The Administrator processes your personal data so that you can register as a member of the Administrator in the Application and the Administrator can manage the agenda of its members. It thus processes your data on the basis of your acceptance of the terms of membership, which therefore represent the legal basis for processing.
2.3. The processing of your personal data for the purpose of sending commercial messages is based on the Administrator's legitimate interest in promoting its activities and informing members about planned events.
2.4. The administrator further processes your personal data for the settlement of any claims between you and him based on his legitimate interest in protecting his rights.
2.5. Processing for the purpose of fulfilling obligations arising from legal regulations for the Administrator is necessary for the fulfillment of legal obligations that apply to the Administrator.
2.6. The administrator processes your personal data in order to process your requests, suggestions or other complaints, based on his legitimate interest in processing your request in accordance with legal regulations.
Processing time
2.7. The Administrator processes your personal data for the time necessary to fulfill the purposes of their processing, which we described above. If the Administrator loses the purpose and legal basis, then he is no longer authorized to process your personal data.
2.8. In case of provision of performance based on the conditions of membership, your registration in the Application and enabling the Administrator to manage the agenda of its members, the Administrator processes your personal data for the duration of your membership.
2.9. It processes your personal data for the purpose of sending commercial messages for the duration of your membership. If you have given your consent to the processing of your personal data for the purpose of sending business communications for the period after the termination of your membership when filling out the membership application available online on the Administrator's website / in the Administrator's premises, your data will be processed for this purpose even after the termination of your membership until , before withdrawing your consent. By withdrawing your consent, the Administrator can no longer process such data.
2.10. Subsequently, the Administrator processes your personal data for a period of 10 years from the end of your membership. This period is used to fulfill the Administrator's legal obligations and to settle any claims between you and the Administrator, and is also related to the operation and technical maintenance of the Administrator's systems and the Application. The above does not apply to data on handicaps or sports results of a member from the ČGF system, these data are only processed after termination of your membership if you have given your consent to such processing when filling out the membership application available online on the Administrator's website / on the Administrator's premises and they will only be processed until you withdraw your consent.
2.11. You consent to the processing of personal data according to paragraph 2.10 of this document as a member of the Administrator on the condition that you have reached the age of 15. If you are under 15 years of age, consent to processing is granted by your legal representative (parent) and you, on the condition that you are mentally and freely mature enough to understand the content of this document and give consent, otherwise only your legal representative. In the event that consent is given by a member under the age of 15 who is unable to understand the content of this document, the Administrator will delete such data and will require that in such a case the legal representative gives consent to the processing. If you believe that a member under the age of 15 gave consent to the Administrator without sufficiently understanding the content of the document, please contact the Administrator at recepce@volcanocomplex.cz so that he can correct this situation.
2.12. For the purposes of processing your requests, suggestions or complaints, the Administrator processes your personal data for the time necessary to process them, including the time needed to prove that they were processed in accordance with legal regulations.
Recipients of your personal data
3.1. Your personal data is processed by the Administrator or a processor or processors authorized by the Administrator to process personal data. For this purpose, the Administrator of your personal data or him
some of them are provided to processors as one of the categories of recipients of personal data. The processors are:
3.1.1. our company GolferIS.cz s.r.o.
3.1.2. Volcano Health Club s.r.o.
3.2. All obligations of the Administrator in relation to the processing of your personal data always apply to the processor authorized by the Administrator.
3.3. The administrator does not transfer your personal data outside the European Union.
Security of your personal data
4.1. The administrator applies reasonable technical and organizational measures to ensure the protection of your processed personal data in such a way that there can be no unauthorized or accidental access to your personal data, their change, destruction or loss, unauthorized transfers, their other unauthorized processing, as well as other misuse of personal data. For this purpose, the Administrator has chosen, in particular, appropriate technical measures and predetermined procedures, the compliance of which is monitored.
Your rights arising from the processing of personal data and their application
Overview of rights
5.1. In connection with the processing of your personal data, you have the rights arising from Articles 15 to 22 and 77 of the GDPR, which you can exercise against the Administrator. These rights are:
5.1.1. the right to access your personal data;
5.1.2. the right to correct your personal data;
5.1.3. the right to erasure of your personal data;
5.1.4. the right to restrict the processing of your personal data;
5.1.5. the right to portability of your personal data;
5.1.6. the right to object;
5.1.7. the right not to be the subject of a decision based solely on automated processing, including profiling, which has legal effects for you or significantly affects you in a similar way;
5.1.8. the right to file a complaint with the supervisory authority.
Right of access to personal data
6.1. You have the right to receive information from the Administrator about whether your personal data is being processed. If your personal data is processed, you also have the right to receive from the Administrator information about:
6.1.1. the purposes for which it processes your personal data;
6.1.2. what categories of personal data are concerned;
6.1.3. the recipients of your personal data, i.e. whether it transfers your personal data to anyone, in particular about recipients from countries outside the European Union or in international organizations; in case of transfer to a third country or an international organization, you have the right to be informed about the appropriate safeguards according to Article 46 of the GDPR;
6.1.4. the planned period for which it will store personal data, possibly about the criteria for determining this period;
6.1.5. the right to correct, delete or limit the processing of your data, or the right to object to this processing;
6.1.6. the right to file a complaint with the supervisory authority, which is usually the Office for Personal Data Protection;
6.1.7. all available information about the source from which it obtained your personal data, if it did not obtain it directly from you;
6.1.8. whether automated decision-making takes place, including profiling and information regarding the procedure used, as well as the meaning and anticipated consequences of such processing for you.
6.2. You have the right to send you a copy of your processed personal data. He provides a copy free of charge. Please note that the Administrator is already entitled to charge a reasonable fee for additional copies that you repeatedly request. Its amount will correspond to the administrative costs incurred by it.
The right to correct personal data
7.1. It processes all personal data in good faith and makes every effort to ensure that the data is accurate and up-to-date. However, it may happen that your processed personal data will be inaccurate due to an error. In such a case, you have the right to request the Administrator to correct or supplement your inaccurate personal data.
The right to erasure of personal data
8.1. You have the right to request that the Administrator delete your personal data that it processes. He is obliged to comply with your request if:
8.1.1. Your personal data is no longer needed for the purposes for which it was collected or otherwise processed;
8.1.2. you withdraw your consent if your personal data was processed based on it, but only on the condition that there is no other legal basis for the processing;
8.1.3. you object to processing based on legitimate interest or public interest, but only if there are no overriding legitimate grounds for processing or if you only object to processing for direct marketing purposes;
8.1.4. Your personal data is processed illegally by the Administrator;
8.1.5. Your personal data must be deleted by the Administrator in order to fulfill the legal obligation established by the laws of the Czech Republic or the European Union as a personal data administrator;
8.1.6. you are 15 years of age or older and your personal data was collected in connection with the offer of information society services based on your consent, or on the basis of the consent of your legal representative, if you are younger than 15 years.
8.2. Please note that there are exceptions to the above obligations. The administrator is not obliged to delete your personal data, even though it would otherwise be obliged to do so, when the processing is necessary:
8.2.1. for the fulfillment of a legal obligation that requires processing under the law of the Czech Republic or the European Union
ie, which applies to him as administrator, or for the fulfillment of a task carried out in the public interest or in the exercise of public authority, with which he would be entrusted as an administrator;
8.2.2. for the establishment, exercise or defense of legal claims;
8.2.3. and for other reasons contained in Article 17, paragraph 3 of the GDPR.
8.3. Please note that in other cases the Administrator is not obliged to delete your personal data processed by him.
The right to restrict the processing of personal data
9.1. You have the right to request that the Administrator limit the processing of your personal data. He is obliged to comply with your request if:
9.1.1. you deny the accuracy of the processed personal data for the time required for him to verify their accuracy;
9.1.2. the processing of your personal data is illegal and instead of deleting your personal data, you only request a restriction of their use;
9.1.3. it no longer needs your personal data for processing purposes, but you require it for the determination, exercise or defense of legal claims;
9.1.4. you have raised an objection to the processing based on a legitimate interest, so it will limit the processing of your personal data until it verifies whether its legitimate reasons outweigh those stated in your objection.
9.2. During the period during which the processing of your personal data will be limited, it will process your personal data only on the basis of your consent to such processing. Please note that even without consent, it is entitled to have your personal data stored, to process them for the determination, exercise or defense of legal claims due to the protection of the rights of another natural or legal person or due to the important public interest of the European Union or its member state.
The right to portability of personal data
10.1. You have the right to request that the Administrator transfer your personal data to you if all of the following conditions are met at the same time:
10.1.1. you have provided this personal data to him yourself on the basis of consent to the processing of personal data or in connection with the performance of a contract to which you are a party and
10.1.2. processes the said personal data automatically.
10.2. He will send you a structured file with your personal data in a format that is commonly used and at the same time machine-readable.
10.3. In the event that all the above-mentioned conditions are met at the same time, you have the right to transfer the file with your personal data provided in this way to another administrator or to request the Administrator to transfer the said file with personal data to another administrator directly. Your request to hand over a file with personal data will be fulfilled directly by him, if it is technically feasible for him.
The right to object
11.1. You have the right to object to the processing of your personal data if the Administrator processes this data on the basis of legitimate interest or public interest, including profiling.
11.2. The Administrator or a third party may have a legitimate interest in the processing. If the administrator receives the raised objection, it will not process your personal data further. However, this does not apply if the Administrator has serious legitimate reasons for such processing of your personal data that outweigh your interests, rights and/or freedoms, or if it is necessary to process said personal data for the determination, exercise or defense of legal claims. If the Administrator finds serious legitimate reasons, he will inform you immediately.
11.3. You have the right to object to the processing of your personal data if the Administrator processes this data for direct marketing purposes, including profiling. If the administrator receives the raised objection, it will not process your personal data further.
The right to lodge a complaint with the supervisory authority
12.1. You have the right to lodge a complaint directly with a supervisory authority in a member state of the European Union. For the Czech Republic, contact the Office for the Protection of Personal Data, located at Pplk. Sochora 27, 170 00 Prague 7. You can find more information about its activities and how to file a complaint on its website available at www.uoou.cz or at the Office's headquarters.
Information on exercising your rights
◦ You can exercise your rights at the Administrator's e-mail address recepce@volcanocomplex.cz or you can also send it to the Administrator's address: Volcano Health Club s.r.o., K Sopce 839/30, Prague 5 – Jinonice, 158 00.
◦ As soon as the Administrator receives your application, which will not reveal who the applicant is, he will have to verify your identity, i.e. the fact that the application was made by an authorized person. If he were not sure of your identity, it could happen that he provides your personal data to a third party. If you refuse to cooperate with the Administrator in verifying your identity, he will not be able to comply with the request.
◦ The Administrator will respond to your request without undue delay, but no later than within one month of receiving your request. If, for certain reasons, it will not be possible to process your request within the specified period, the Administrator will send you a notification in which the specified period will be extended by a maximum of another two months (i.e. a maximum of three months in total).
◦ The Administrator will send you a response to your request to the e-mail from which he received the request. If you insist that the Administrator inform you about the processing of the request in another way, for example by mail, please communicate this information
directly in the submitted application.
◦ The Administrator handles your requests free of charge. However, the administrator is entitled to demand from you the payment of the costs associated with providing the required information or communication or taking the required actions, if the submitted request is unreasonable or unreasonable (especially if it is repeated). In such a case, the Administrator is entitled to refuse to comply with the request outright.