Privacy policy (GDPR)

1. Data controller

The controller of personal data is the operator of the Marvel Gym fitness centre, company ID (IČO): 06025081, registered office Tovačovského 113/5, Mladá Boleslav IV (the "controller"). If you have any questions about the processing of personal data, contact us by phone at +420 739 148 837 or by e-mail at .

2. Introduction

Protecting your privacy is essential to us. We collect and process personal data only to the extent necessary to provide our services (gym access, group class bookings and credit purchases) in accordance with the GDPR.

3. What data we process

• Basic identification data: First name, last name, gender.
• Contact data: E-mail address.
• Service usage data: Visit history, group class bookings, credit balance.
• Biometric/photographic data: For verifying MultiSport card users (where required, the system may process photo verification tokens).
• Technical identifiers: Push notification tokens for sending alerts via the mobile app.

4. Purpose of processing

We process data solely to perform the contract for sports services, to identify clients at the entrance, to process payments and to send important notifications (e.g. being moved up from the substitute list to a class).

5. Data retention

We keep personal data for as long as your user account exists. After it is closed, personal data is deleted or anonymised, except for records we are required to keep by law (e.g. tax and accounting documents for the statutory retention period). Anonymised statistics (e.g. attendance) may be kept indefinitely.

6. Sharing with third parties

We do not share your personal data with third parties for marketing purposes. Our processors (e.g. payment gateway or booking system providers) may have access to certain data; they are bound by confidentiality and strict data protection rules.

7. Cookies and analytics

We use strictly necessary technical cookies to run the website (e.g. keeping you logged in and keeping your basket). These cookies do not require your consent because they are necessary for the service to work.

We use analytics cookies (Google Analytics 4) only with your explicit consent, which you give through the banner shown on your first visit. Without your consent no analytics cookies are set and no personal data is collected. Your IP address is anonymised and we do not use the data to identify individuals.

You can withdraw your consent to analytics cookies at any time by clearing the site data in your browser settings (Settings → Privacy → Clear site data for marvelgym.cz), or by clearing local storage (localStorage) in the developer tools. Once you withdraw consent, analytics stops immediately.

8. Your rights

You have the right to request access to your personal data, its correction, erasure or restriction of processing. If you have any questions or want to exercise your rights, contact us by phone at +420 739 148 837 or by e-mail at . You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ).