Some of the company data has not yet been completed by the administrator - it is marked in square brackets in the document.
1. Data controller
The controller of personal data processed in connection with this website, contact forms and facility operator accounts is [full company name — complete in the admin panel: Company details], [registered office address — complete in the admin panel: Company details], [NIP / REGON / KRS — complete in the admin panel: Company details]. Data protection contact: [email address — complete in the admin panel: Company details].
If the controller appoints a data protection officer, his/her contact details will be provided here.
The relevant facility operator is primarily the controller of its customer data, including bookings, tickets and registrations. The service provider processes this data on the operator’s behalf under a data processing agreement.
2. What data we process
Contact forms: name and surname, email, telephone number (optional), organisation, selected product, subject and message content.
Account: name and surname, email, role, organisation, login history, security settings.
Sports services: reservations, registration for classes, tickets and passes, entry history, payments and sales documents, child's details provided by the guardian (name and consent), requests for help.
Technical data: IP address, session ID, security event log.
3. Objectives and legal basis
Response to inquiry and actions before concluding a contract - Art. 6 section 1 letter b GDPR.
Account maintenance and provision of services - Art. 6 section 1 letter b GDPR.
Settlements, invoices and tax obligations - Art. 6 section 1 letter c GDPR.
Security, audit log, investigation and defense of claims - legitimate interest of the administrator, Art. 6 section 1 letter f GDPR.
Activities requiring consent (e.g. marketing information) - Art. 6 section 1 letter a GDPR; consent can be withdrawn at any time without affecting previous processing. The website does not send marketing without separate consent.
4. Data recipients
Authorized Administrator and Facility Operator employees within their roles; hosting provider (server in the European Union); Przelewy24 and Stripe payment operators and the Fakturownia system - only after they have been configured and to the extent necessary for payment or document issuance; email provider.
Stripe may transfer data outside the European Economic Area based on standard contractual clauses; details in Stripe's privacy policy.
5. Storage period
Inquiries from forms - until the case is concluded and then until the limitation period for claims expires. Account - for the duration of your use of the Services and thereafter for the period required by law or to defend claims. Accounting documents - 5 years from the end of the tax year. Security and Audit Log - For the period necessary for security and accountability purposes, in accordance with a retention schedule established by the administrator.
6. Your rights
You have the right to access data, rectify it, delete it, limit processing, transfer data and facility to processing based on legitimate interest. You have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).
Send requests to [email address - complete in the admin panel: Company details] or via the contact form (subject "Data protection (GDPR)"). We may ask you to confirm your identity.
7. Voluntariness and profiling
Providing data is voluntary, but necessary to answer an inquiry, create an account or provide a service. We do not make decisions based solely on automated processing, including profiling, that produce legal effects for you.
8. Security
We use encrypted connections, isolation of organisation data in the database, roles and permissions, multi-factor authentication for administrators, encryption of integration keys, audit log and daily backups.
9. Cookies
The rules for using cookies and browser memory are described in the Cookie Policy.
10. Policy Changes
The current version takes effect on 2026-10-16. We announce material changes on the website and within the service.