Data controller
The data controller is Olha Chobotova, Company ID 56255268, place of business Obchodná 559/37, 811 06 Bratislava-Staré Mesto, Slovak Republic.
For privacy matters, contact info@taichibratislava.sk. Full identification details are available in the Legal information.
Website visits
When a page is loaded, the server may record the IP address, date and time of the request, requested URL, response status and basic browser or device information. These technical logs are used to keep the website secure and stable, prevent abuse and diagnose errors.
The legal basis is the legitimate interest under Article 6(1)(f) GDPR. Logs are retained only for the period necessary for security and technical diagnosis and are then deleted or overwritten, unless longer retention is necessary to document a security incident or establish, exercise or defend a legal claim.
Email and WhatsApp
When you contact us, we process the information you provide, which may include your name, telephone number or email address, profile details visible in WhatsApp and the content of the communication.
The purposes are to answer your enquiry, provide current information about exercise sessions and take steps at your request before providing a service. The legal basis is Article 6(1)(b) GDPR or, for general enquiries, the legitimate interest in handling communication under Article 6(1)(f) GDPR.
The domain mailbox uses email forwarding. Message metadata and content are therefore technically processed, to the extent necessary for delivery, by both the domain email and forwarding provider and the destination mailbox provider.
Messages are retained while the enquiry is being handled and afterwards only for as long as necessary to organise sessions, comply with a legal obligation or protect legal claims.
Attendance and payments
For participation, we may process a name, contact detail, dates or number of attended sessions, the agreed price, payment information and related communication.
The data is processed to provide and settle the service under Article 6(1)(b) GDPR and to comply with accounting, tax and other legal obligations under Article 6(1)(c) GDPR.
Accounting and payment records are retained for the statutory period, generally ten years following the year to which they relate. Other data is retained only for the duration of its purpose and any applicable statutory limitation periods.
Health information
We do not request or retain medical reports, disability certificates or other medical records. Please do not send such documents by email or WhatsApp.
Promotional messages
We do not send promotional messages to current or former participants without separate voluntary consent. If such consent is given in the future, it may be withdrawn at any time without affecting processing that took place lawfully before withdrawal.
Recipients of personal data
Personal data is not sold or disclosed to data brokers.
- Hetzner Online GmbH as the server hosting provider, to the extent necessary to operate and secure the website
- providers of the domain email service, email forwarding and destination mailbox
- the bank and, where applicable, an accountant or accounting service provider where necessary for payments and accounting
- WhatsApp Ireland Limited if the user voluntarily chooses WhatsApp
- public authorities or legal advisers where required by law or necessary to protect legal claims
WhatsApp as an external service
The WhatsApp button is an ordinary link to an external service, not an embedded tracking widget. The operator does not receive the content of a message until the user sends it.
After WhatsApp is opened, technical, account and communication data is processed by WhatsApp Ireland Limited under its own terms. As part of its global operations, WhatsApp may transfer information outside the European Economic Area using the safeguards described in its privacy policy. Email is available as an alternative.
Cookies and audience measurement
The website currently does not use Google Analytics, advertising, marketing or profiling tools and does not store cookies requiring prior consent. This is why no cookie consent banner is displayed.
Ownership in Google Search Console is verified only through a DNS record. No Google tag or analytics code is added to the pages for that purpose, and DNS verification itself does not place cookies on visitors’ devices.
External websites such as WhatsApp may use their own cookies after a link is opened. If analytics, advertising or other optional cookies are added to this website in the future, this information will first be updated and a prior consent mechanism will be enabled.
Your rights
Subject to the conditions of the GDPR, you may request access, rectification, erasure or restriction of processing, data portability and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time.
To exercise your rights, contact info@taichibratislava.sk. You may also lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Galvaniho 7/B, 821 04 Bratislava.
Providing data and automated decisions
Providing information during an initial enquiry is voluntary, but without contact details we cannot reply or confirm participation. Data required for settlement is necessary to provide the service and comply with legal obligations.
We do not use automated decision-making or profiling. Exercise sessions are for adults and we do not knowingly collect minors’ data for enrolment.
Updates and language
This information was last updated on 6 August 2026. This English version is an informative translation. In the event of a discrepancy, the Slovak version prevails to the extent permitted by applicable law.