Privacy Policy

Applies to the centrumsvaloveterapie.cz website and to the Centrum svalové terapie mobile application. Effective 12 September 2026.

Who processes your data

The service is provided, and your data processed, jointly by two providers, as stated in our terms:

• Centrum svalové terapie — Miroslav Dvořák, company ID 86900722, registered at A. Roškotové 1351, 258 01 Vlašim.
• Centrum svalové terapie — Tomáš Drašnar, company ID 19243073, registered at Nad Bertramkou 2416/1, Prague 5 — Smíchov.

Premises: Ostrovského 253/3, Praha 5, 150 00. Contact: 732 233 046.

The mobile application

The application is a wrapper around our booking portal. It does not ask for access to your contacts, location, camera or files, and collects nothing on its own. It does, however, process the same data as the website, because you register, book and pay through it.

What we process

• Account: first and last name, e-mail, phone number, language, password in hashed form.
• Bookings and visits: appointments, length, therapist, branch, any note you add.
• Payments: amount, method, status and the payment identifier held by the gateway. Your card number never reaches us — you enter it at the gateway.
• Prepaid minutes: purchases, usage, gift vouchers, company codes.
• Ratings and stories: the stars you give after a visit and any text you send us.
• Consents: when you agreed and to which version of the terms, and whether you want marketing messages.
• Technical records: last sign-in time, IP address when a code is redeemed, error logs.

Why we process it

• Performance of a contract — without a name, e-mail and phone number we cannot book you in or confirm the appointment.
• Legal obligation — payment records have to be kept under accounting law.
• Legitimate interest — the reminder before a visit, and protecting our forms from abuse.
• Consent — for marketing messages only. You can withdraw it at any time from the e-mail or in your account.

Who else sees your data

We do not sell it. We pass it only to those who need it to deliver the service:

• Payment gateways — Benefit Plus, GoPay, ComGate, PayU. They receive the amount and a payment identifier.
• Google — if you sign in with a Google account, it verifies your identity and passes us your e-mail and name.
• Cloudflare — protects our forms from bots.
• Slevomat — only when you redeem a voucher bought there.
• Our hosting and e-mail provider — runs the servers the portal sits on.

How long we keep it

We keep your account and its history for as long as you have the account. Accounts with no visit and no prepaid minutes are removed automatically after six months. Payment records are kept for the period accounting law requires.

Deleting your account

You can delete the account yourself under My account, or ask us at the desk. Deleting it cancels your future appointments, replaces your e-mail and phone number with a non-identifying value, and you can no longer sign in. Records of completed payments remain, because we are required to keep them.

Your rights

You have the right of access to your data, to have it corrected or erased, to have processing restricted, to object, and to data portability. Write to us and we will sort it out. If you are not satisfied with how we handled it, you can complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

Cookies

We use only what the portal needs to work — keeping you signed in and remembering your choice in the cookie bar. We do not measure visitor behaviour and use no advertising cookies.