Privacy Policy

1. Who is the data controller

The website bodyease.cz and the services described on it are operated by Lucie Linková, BodyEase (the "Controller").

• Business ID (IČO): 05640610
• Studio address: MotherGood studio, Sudoměřská 1243/25, 130 00 Prague 3 – Vinohrady, Czech Republic
• Email: lucielinkova@bodyease.cz
• Phone: +420 792 314 472

2. What personal data we process

• Identification and contact details — full name, phone number, email address
• Content of messages sent via the contact/booking form, email or phone
• Booking details — the service booked (class, workshop, course), date, attendance history
• Payment details to the extent needed to identify a payment (variable symbol, amount); we do not store card numbers
• Health data — only where you tell us yourself, or where you provide a medical certificate in support of a request to interrupt a course or package (see section 5)

3. Purposes of processing

• handling your booking and providing the requested service
• communication about your booking — confirmations, reminders, schedule changes
• marketing communication — only with your separate, freely revocable consent
• handling complaints and keeping a record of them — including the date of receipt, the description and how the complaint was settled, for as long as is necessary to demonstrate that the statutory deadline was met
• assessing a request to interrupt a package of sessions or a course on serious health grounds
• bookkeeping and compliance with legal obligations

4. Who we share data with

• Supabase, Inc. (registration database; servers in Ireland) — when you submit a registration form on the website
• Resend, Inc. (sending confirmation e-mails and session reminders)
• BunnyWay d.o.o. (Bunny.net) — video playback for the online course
• bookkeeping and IT/hosting service providers, including Vercel Inc.
• Google Ireland Limited (Google Fonts) — solely to display the website’s typefaces

We do not sell personal data to third parties and do not use it for any purpose beyond those listed above.

5. Health data

Data about your health is a special category of personal data under Article 9 GDPR, and we treat it with particular care.

What we don't collect. The online course includes a questionnaire and some rough self-tests. They exist purely for your own reflection: you fill them in for yourself, and the Controller neither collects nor stores them. The same goes for your starting and progress photos — they stay on your own device.

What you tell us voluntarily. If you choose to share your results, the questionnaire, photos or a description of your health concerns with the Controller (by email, in a note on the registration form, or in class), we process it:

• on the basis of your explicit consent under Article 9(2)(a) GDPR, which you give by sending us the information yourself, and which you can withdraw at any time
• for one purpose only — to adapt the exercise to you and answer your question
• for the duration of our work together, and at most 1 year from our last contact; after that we delete it
• without passing it on to anyone else

Sharing this information is entirely voluntary and is not a condition of taking part in classes, a course or a workshop. You can withdraw your consent by writing to lucielinkova@bodyease.cz; we then delete the data without delay.

Medical certificates. If you ask to interrupt a package of sessions or a course on serious health grounds (sections 3.8 and 4.5 of the Terms of Service), we will ask for a medical certificate. We don't need a diagnosis — a confirmation that you're unable to undertake physical activity, with the expected duration, is enough. We process the certificate under Article 9(2)(f) GDPR (establishment and exercise of legal claims) solely to assess your request, and delete it once the request has been handled.

6. Retention period

We keep personal data for the duration of the contractual relationship and afterwards for as long as required by law (e.g. accounting records for 5–10 years). For health data the shorter period in section 5 applies.

7. Your rights

Under the GDPR, you have the right to:

• access your personal data
• correct inaccurate data
• request erasure ("right to be forgotten")
• restrict processing
• data portability
• object to processing
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
• lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ)

You can exercise your rights by emailing lucielinkova@bodyease.cz.

8. Cookies

bodyease.cz may use basic technical cookies necessary for the site to function. [To be updated if analytics or marketing cookies, e.g. Google Analytics or Meta Pixel, are added.]

9. Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss or misuse.

10. Changes to this policy

We may update this policy from time to time. The current version is always available on this page.