Privacy Policy

3. Data Subjects

The data subjects include in particular:

• website visitors,

• customers purchasing vouchers or memberships,

• registered users of the iSportSystem platform,

• participants in courses, training sessions, and children’s activities,

• persons communicating with the Controller.

4. What Personal Data We Process

We may process the following personal data:

• first name and surname,

• e-mail address,

• telephone number,

• billing information (address),

• information about orders and purchased services,

• registration data from iSportSystem,

• technical information (IP address, cookies, device information).

5. Methods of Collecting Personal Data

Personal data may be obtained through:

• purchases made via www.k2zilina.sk,

• registration in iSportSystem,

• booking courses and activities,

• use of the website (cookies and analytics),

• communication with customers.

6. Purposes of Processing Personal Data

6.1 Performance of a Contract

We process personal data for:

• processing orders for vouchers and memberships,

• delivering digital products (PDF vouchers),

• course and activity bookings,

• communication with customers.

6.2 User Registration (iSportSystem)

Personal data may be processed for:

• user account administration,

• sign-in via Google or Facebook,

• booking courses and activities,

• attendance records.

6.3 Legitimate Interest

We may process personal data for:

• handling complaints and claims,

• protecting the Controller’s legal rights,

• maintaining system security.

6.4 Marketing and Analytics (with Consent)

Subject to your consent, we may use:

• Google Analytics,

• Meta Pixel (Facebook / Instagram),

• advertising and marketing optimization tools.

7. Legal Bases for Processing

Personal data is processed on the following legal bases:

• Article 6(1)(b) GDPR – performance of a contract,

• Article 6(1)(c) GDPR – compliance with legal obligations,

• Article 6(1)(f) GDPR – legitimate interest,

• Article 6(1)(a) GDPR – consent.

8. Recipients of Personal Data

Personal data may be shared with:

• CardPay (Tatra banka) – payment processing,

• iSportSystem – registrations and reservations,

• Google (Analytics, Maps, Fonts),

• Meta Platforms (Facebook, Instagram),

• IT and hosting service providers,

• accounting and legal service providers (where applicable).

9. Cookies

The website uses:

• necessary cookies,

• analytical cookies,

• marketing cookies.

Cookie preferences are managed through the Complianz cookie management platform.

Detailed information is available in our Cookie Policy.

10. Registration via Google / Facebook

When registering through iSportSystem, we may receive:

• your name,

• e-mail address,

• account identifier provided by Google or Facebook.

11. Data Retention Period

Personal data is retained:

• for the duration of the contractual relationship,

• for up to 10 years where required by accounting or legal obligations,

• until consent is withdrawn where processing is based on consent.

12. Rights of Data Subjects

Under GDPR, you have the right to:

• access your personal data,

• rectify inaccurate data,

• erase your personal data,

• restrict processing,

• data portability,

• object to processing,

• withdraw consent at any time.

13. Data Security

The Controller has implemented appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction.

14. Transfers to Third Countries

When using Google and Meta services, personal data may be transferred outside the European Union, particularly to the United States.

Such transfers are safeguarded through Standard Contractual Clauses (SCCs) and other mechanisms required by GDPR.

15. Changes to This Policy

This Privacy Policy may be updated from time to time.

The current version is always available on the website.