Personal Data Processing Information

This page explains how Premium Physio s.r.o. processes personal data when you book our services or contact us through the fyzioostrava.cz website. Processing is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (the “GDPR”), and related legislation. The Czech version of this information is the binding one.

1. Who is the controller

The controller of your personal data is Premium Physio s.r.o., company ID 06563112, registered office Slavíkova 1744/22, Poruba, 708 00 Ostrava, Czech Republic (“we” or the “controller”).

For anything related to personal data you can e-mail us at fyzio@fyzioostrava.cz, write to our registered office or call +420 599 200 150.

2. What data we process and where we get it

We process the data you give us when you fill in a form, make a booking or keep in touch with us afterwards:

identification data: first name and surname;
contact data: e-mail address and phone number;
booking data: the chosen service, date and time of the appointment, the chosen therapist, whether the booking was confirmed, changed or cancelled, and whether you attended;
communication data: the content of your enquiry, your note to the booking and any follow-up communication you share with us;
technical data: IP address and browser details when a form is submitted (see section 9).

We get the data directly from you, either through the form and booking system on this website, or when you book by phone or in person at reception. Required fields are marked in the form. Without the data needed to identify the booking and reach you, we cannot handle your booking or request. You are not legally obliged to give us data for an enquiry or a booking, but the feature cannot be used without it. Optional data is up to you.

Please do not put diagnoses, birth numbers or details about your health into the contact form, and do not send medical records through it. Your physiotherapist will go through what is needed during your visit.

3. Why we process data and on what legal basis

Bookings and ordering services

We use the data to accept and handle your booking, agree on an appointment, confirm it, remind you of it, change or cancel it, and to communicate with you about the service you want. The same applies when you ask us to call you back to book. The legal basis is taking steps at your request before entering into a contract, or performing the contract, under Article 6(1)(b) GDPR.

Other enquiries

If you send us a general question that is not about ordering or providing a service, we process the data to answer it on the basis of our legitimate interest under Article 6(1)(f) GDPR. That interest is being able to communicate with people who contact us and to answer them.

News and tips by e-mail

We send tips on body care and information about offers only if you tick the consent box in the form or in the booking. The legal basis is your consent under Article 6(1)(a) GDPR. You can withdraw it at any time using the link in every e-mail or by writing to fyzio@fyzioostrava.cz.

Protecting the website and forms

We store the IP address and browser details to recognise automated form submissions and misuse of the website. The legal basis is our legitimate interest in running the website securely under Article 6(1)(f) GDPR.

Protecting legal claims

Where necessary, we keep a limited amount of data to document the course of a booking or communication and to establish, exercise or defend legal claims. The legal basis is our legitimate interest in protecting our rights under Article 6(1)(f) GDPR. This is not a reason to keep all messages indefinitely.

Data related to health care

Booking a specific health service, or what you write to us, can reveal something about your health. To the extent needed to book and organise health care, we therefore process this data, in addition to the legal basis above, under Article 9(2)(h) and Article 9(3) GDPR, that is for the provision or management of health care and subject to professional secrecy. Where processing such data is necessary to establish, exercise or defend legal claims, Article 9(2)(f) GDPR applies.

This information covers bookings and contact through the website. It does not fully describe processing during the provision of health services itself, keeping medical records or accounting. Those have their own purposes, legal obligations and retention periods.

We do not need your general consent to the processing of personal data to handle an enquiry or booking. Submitting a form does not mean you agree to receive marketing; that consent is a separate checkbox.

4. How long we keep data

We keep data from general enquiries while we handle them and for no longer than 12 months after the conversation ends. Then we delete it, unless there is a specific other legal reason to keep it.

We keep booking data while the booking is being handled and for 3 years after the service took place or the booking was cancelled. Then we delete it, except for data needed for a specific legal claim or legal obligation.

We keep data for sending news until you withdraw your consent.

We keep IP addresses and browser details for 90 days.

Data needed to protect specific legal claims is kept to the necessary extent for the limitation period that applies to the claim. If a claim is raised, we keep the necessary data while it is being dealt with and enforced. Data that must be part of documentation or records required by law is kept according to the rules for that document. This obligation does not automatically mean the whole form is kept for the same time.

5. Who has access to the data

Authorised staff who take care of bookings, communication and related services have access to the data. Our suppliers also process it to the necessary extent:

the web hosting provider, whose server runs the website and the booking system;
the e-mail service provider that delivers confirmations, reminders and replies;
Ecomail.cz s.r.o., which we use to send news to people who have agreed to it;
the website maintenance supplier, when solving a technical issue.

These suppliers act as our processors. They process data only on our instructions and under a data processing agreement.

Online bookings run in a booking system that is part of this website. We therefore do not pass booking data to any other booking system or marketplace.

We may also share data with legal advisers when needed to resolve a specific claim, and with public authorities where the law requires it.

6. Transfers outside the European Economic Area

We store data from forms and bookings with suppliers in the European Union and do not transfer it outside the European Economic Area (EEA).

The exception is analytics and marketing tools from Google and Microsoft, which load only if you allow them in the cookie bar (see section 9). These companies may transfer data about your visit to the USA. Such transfers rely on the European Commission's adequacy decision under the EU-US Data Privacy Framework, in which both companies participate.

7. Your rights

Under the conditions set out in the GDPR you have in particular these rights:

Right of access: you can get confirmation of whether we process your data, information about the processing and a copy of the data.
Right to rectification: you can ask us to correct inaccurate data and complete incomplete data.
Right to erasure: you can ask us to delete data if the GDPR conditions are met. This does not apply, for example, where processing is needed for a legal obligation or legal claims.
Right to restriction: you can ask us to restrict processing, for example while the accuracy of data is disputed or while we assess your objection, if the legal conditions are met.
Right to data portability: for data you gave us and that we process automatically on the basis of a contract or consent, you can ask us to hand it over in a structured, commonly used and machine-readable format, and where technically possible directly to another controller.
Right to object: on grounds relating to your particular situation, you can object at any time to processing based on legitimate interest. We will then stop, unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or grounds for establishing, exercising or defending legal claims.
Right to withdraw consent: where processing is based on your consent (such as sending news), you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing before it.
Right to lodge a complaint: you can contact the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz, e-mail posta@uoou.cz.

Send your request to fyzio@fyzioostrava.cz or to our registered office. We will tell you how we handled it without undue delay and within one month of receiving it at the latest. In justified cases we can extend this by up to two more months, and we will tell you about the extension and the reasons within the first month. If we have reasonable doubts about who is making the request, we may ask for additional information to confirm their identity.

8. Automated decision-making

In the processing described here we do not carry out solely automated decision-making, including profiling, that would have legal effects on you or similarly significantly affect you. An automatically sent booking confirmation or reminder is not such decision-making.

9. Technical data and cookies

When a form is submitted, we store the IP address and browser details to detect bots and misuse of the website. We record the same details for visits to addresses that do not exist on the website, so that we can fix broken links. We delete this technical data after 90 days. The web hosting provider also keeps standard server logs, solely to keep the service running and secure.

Essential cookies keep the website working and protect forms, so we do not need consent for them. Analytics and marketing tools (Google Tag Manager, Google Analytics, Microsoft Clarity) load only with your consent in the cookie bar. You can refuse them as easily as allow them, and change your choice at any time using the “Cookie settings” link in the website footer. More details are on the Cookies page.

This information applies from 15 October 2026.