Privacy Policy

1. Who is the controller

The controller of your personal data is OVERDOZE.gym s.r.o., Company ID 23075333, VAT ID CZ23075333, registered office Dlouhá 4309, 760 01 Zlín, Czech Republic; registered with the Regional Court in Brno, section C, file 144200 (18 March 2025). Contact e-mail hejhou@overdoze.pro.

We have not appointed a Data Protection Officer; please use the e-mail above for any data protection matter.

2. What data we process

We do not collect health data or other special categories. If you send them voluntarily (for example in an e-mail), we process them only to handle your request.

• Identification and contact data: name, e-mail, phone, preferred language.
• Booking data: slot date and length, number of people, location, visit history.
• Payment and document data: amount, payment method, order status, billing details, payment gateway reference.
• Door access codes and their validity window.
• Coaching enquiries: your message and preferred contact method.
• Communication: e-mails and messages you send us.
• Technical data: IP address, device and browser type, application logs.
• Cookie and analytics data — only if you consent.

3. Purposes and legal bases

4. Who receives your data

We share data only with processors who help us run the service, always under a data processing agreement.

5. Transfers outside the EU

Some processors may process data outside the European Economic Area. Such transfers are covered by the European Commission's Standard Contractual Clauses or another appropriate safeguard under Art. 46 GDPR. We will provide a copy of the safeguards on request.

6. How long we keep data

Retention periods are listed in section 3. Afterwards we delete or anonymise the data. Accounting documents are kept for the statutory period even after your account is closed.

7. Your rights

Send requests to hejhou@overdoze.pro. We respond within one month; for complex requests we may extend by two months and will tell you.

Supervisory authority: Czech Data Protection Authority (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.

• Right of access and to a copy of your data.
• Right to rectification of inaccurate data.
• Right to erasure when we no longer need the data.
• Right to restriction of processing.
• Right to data portability in a machine-readable format.
• Right to object to processing based on legitimate interest.
• Right to withdraw consent at any time — withdrawal does not affect processing before it.
• Right to lodge a complaint with the supervisory authority.

8. Cookies and measurement

Without your consent we use strictly necessary cookies only. Analytics and marketing scripts load after you consent. See the Cookie Policy for the full list. You can change your choice any time via Cookie settings in the footer.

We honour the Global Privacy Control signal. If your browser sends it, we treat it as a refusal of optional cookies and never show the banner.

9. Minors aged 15 to 18

The service is available from the age of 15. People under 18 need consent from a legal guardian, who also confirms they have read the house rules. We process minors' data to the minimum extent, never send them marketing and never profile them.

10. Automated decision-making

We do not carry out automated decision-making or profiling producing legal or similarly significant effects. Slot prices follow the published price list and fixed rules (number of people) — they are not set individually by an algorithm.

11. Security

• Encrypted transport (HTTPS/TLS).
• Database access restricted by row-level security and roles.
• Access codes issued per slot with limited validity.
• Administrator actions are logged.
• We never store card numbers — payments are handled by a certified gateway.

12. Changes to this policy

We may update this policy. A new version will appear on this page with a new effective date; for material changes we will notify you by e-mail or in the app.