Physiotherapy, regeneration and reconditioning services

Privacy Policy

HomePrivacy Policy

This is an English translation of the Czech privacy policy. In case of any discrepancy, the Czech version prevails.

I. Basic provisions

  1. The controller of personal data within the meaning of Art. 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”) is Mgr. Zuzana Plas, Company ID (IČ) 05134676, registered office U Uranie 15, 170 00 Prague 7, operator of the private medical facility Fyziokom (the “controller” and the “clinic”).
    Controller’s contact details:
    address: U Průhonu 52, 170 00 Prague 7
    email: [email protected]
    phone: +420 728 050 043
  2. Personal data means any information relating to an identified or identifiable natural person, i.e. a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.
  3. The controller has appointed a data protection officer: Mgr. Zuzana Plas, [email protected].

II. Sources and categories of personal data

  1. The controller processes personal data you have provided, in particular when booking services at the clinic via the booking system, by phone or in person, and when submitting the contact form on fyziokom.cz.
  2. The controller processes in particular:
    • identification and contact details (first name, surname, email address, phone),
    • data necessary to provide services at the clinic, including medical records,
    • the content of messages sent via the contact form,
    • website usage data (anonymised traffic statistics) – only with your consent, see Art. VIII.

III. Legal basis and purpose of processing

  1. The legal basis for processing is
    • performance of the contract for services between you and the controller and steps taken at your request prior to entering into it, Art. 6(1)(b) GDPR,
    • compliance with the controller’s legal obligations, in particular keeping medical records, Art. 6(1)(c) GDPR,
    • the controller’s legitimate interest in answering your enquiry from the contact form and in direct marketing (in particular sending commercial communications and newsletters), Art. 6(1)(f) GDPR,
    • your consent to analytics cookies, Art. 6(1)(a) GDPR.
  2. The purpose of processing is
    • handling your booking request and exercising the rights and obligations arising from the contractual relationship; a booking requires the personal data necessary to complete it (first name, surname, email address); without them the booking cannot be confirmed and the services cannot be provided,
    • replying to your enquiry sent via the contact form; the form requires your name and an email address to which we reply and send an automatic confirmation of receipt,
    • sending commercial communications and other marketing activities,
    • measuring website traffic and improving the website (only with consent).
  3. The controller does not carry out automated individual decision-making within the meaning of Art. 22 GDPR.

IV. Retention period

  1. The controller retains personal data
    • for the period necessary to keep medical records and records of services provided and to exercise claims arising from the contractual relationship (15 years after it ends, unless the law requires a longer period),
    • messages from the contact form for the period necessary to handle the enquiry, no longer than 1 year after it is handled; if the enquiry leads to services being provided, they are kept as part of the records under the previous point,
    • data processed on the basis of consent until consent is withdrawn, analytics cookies for no longer than 2 years.

V. Recipients of personal data (processors)

  1. Recipients of personal data are persons
    • involved in providing services at the clinic and processing payments,
    • operating the booking system – Reservio, s.r.o.,
    • operating and hosting the website – Cloudflare, Inc.,
    • delivering emails from the contact form – the Lettr service,
    • providing the controller’s mailbox – Google Ireland Limited (Google Workspace),
    • measuring website traffic – Google Ireland Limited (Google Analytics), only with your consent,
    • providing marketing services.
  2. Some processors (in particular Google, Cloudflare and email service providers) may process personal data outside the European Union, in particular in the USA. Such transfers take place only on the basis of a European Commission adequacy decision (EU-U.S. Data Privacy Framework) or standard contractual clauses approved by the European Commission.

VI. Your rights

  1. Under the conditions set out in the GDPR you have
    • the right of access to your personal data (Art. 15 GDPR),
    • the right to rectification (Art. 16 GDPR) or restriction of processing (Art. 18 GDPR),
    • the right to erasure (Art. 17 GDPR),
    • the right to object to processing (Art. 21 GDPR),
    • the right to data portability (Art. 20 GDPR),
    • the right to withdraw your consent at any time in writing or electronically at the address or email given in Art. I; you can also change your cookie consent via the “Cookie settings” link in the website footer.
  2. You also have the right to lodge a complaint with the Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz) if you believe your right to personal data protection has been infringed.

VII. Security of personal data

  1. The controller declares that it has taken all appropriate technical and organisational measures to secure personal data. The website is served exclusively over a secure connection (HTTPS).
  2. The controller declares that only persons authorised by it have access to personal data.

VIII. Cookies and traffic measurement

  1. Cookies are small text files stored on your computer, tablet or phone. The fyziokom.cz website uses:
    • necessary storage – we only store your choice from the cookie banner in your browser’s storage (localStorage) so that we do not ask you on every visit; no consent is required for this,
    • analytics cookies – Google Analytics (cookies _ga and _ga_*, valid for up to 2 years) help us understand how visitors use the website. They are stored only with your consent given in the cookie banner. Without consent Google Analytics stores no cookies and only sends anonymous signals without identifiers (Consent Mode).
  2. You can change or withdraw your consent at any time via the “Cookie settings” link in the website footer. When you withdraw consent, we delete the analytics cookies. You can also delete or block cookies in your browser settings at any time.
  3. Detailed information on how Google processes data is available at https://policies.google.com/privacy.
  4. The website may embed YouTube videos in privacy-enhanced mode (youtube-nocookie.com) and a Google Maps map; these services may process your IP address when displayed.

IX. Client reviews

  1. The website displays ratings and reviews that clients themselves published in the Reservio booking system. For each review we show only the author’s first name, the rating, the text and the month of publication. If you wish to edit or remove your review, you can do so in Reservio or contact us at [email protected].

X. Terms of use of the website

  1. When using this website, users must not interfere with its security, use it to transfer harmful files or attempt to access its non-public sections. Users are further required to respect the operator’s copyright in this website.

XI. Final provisions

  1. By booking services or submitting the contact form you acknowledge that your personal data will be processed in accordance with this policy.
  2. The controller may amend this policy. The new version will be published on this website.

This policy has been effective since 25 May 2018 and was last updated on 10 October 2026.