Privacy policy
This English translation is for information only. The Czech version is the binding one.
Effective from 12 October 2026.
1. Who the controller is
Ondřej Vít
Company ID (IČO): 29950040
Registered address: Na Stávku 329, 500 09 Hradec Králové, Czech Republic
Email for everything concerning personal data: ondrejvit (at) ondrejvit.com
I have not appointed a data protection officer.
2. What data I process, why and for how long
2.1 A message from the contact form or by email
- Data: full name, email, topic of the message (general question, partnership, media) and the text of the message.
- Purpose: to reply to the message.
- Legal basis: legitimate interest in handling the enquiry; for coaching requests, steps taken at the request of the person concerned before entering into a contract.
- Retention: 12 months from the last communication.
2.2 A coaching request
- Data: full name, email, phone (optional), sport, goal, selected package, hours of training per week (chosen from ranges), the text of the message.
- Purpose: to prepare an offer and arrange the intro consultation.
- Legal basis: steps taken at the request of the person concerned before entering into a contract.
- Retention: 12 months if no cooperation follows; otherwise see 2.3.
The forms on the website do not ask about your health or injuries, and I ask you not to include them in your message. Health and injuries are something we deal with in person, at the intro consultation.
2.3 Coaching clients
- Data: identification and contact details, billing details, payment data, communication, training plans and training records, sporting goals.
- Purpose: providing the service, invoicing, meeting legal obligations.
- Legal basis: performance of a contract; compliance with a legal obligation (accounting and tax documents).
- Retention: for the duration of the cooperation and 3 years after it ends; tax and accounting documents for the period laid down by tax and accounting regulations.
Health data. The website does not collect any health data. During the cooperation, a client may share information about their state of health (injury, illness, limitations). I process it only to the extent necessary for preparing the training plan and on the basis of the client’s explicit consent.
2.4 Photographs and testimonials
- Data: first name, age, sport, the text of the testimonial, and where applicable a photograph and a sporting result.
- Purpose: publication on the website and on social media.
- Legal basis: consent, which can be withdrawn at any time.
- Retention: until consent is withdrawn.
2.5 Protecting the forms against abuse
- Data: a hash of the IP address (the address itself is not stored) and the time the form was sent.
- Purpose: to limit the number of submissions from one address and to prevent spam.
- Legal basis: legitimate interest in securing the website.
- Retention: records are deleted automatically, usually within 24 hours.
2.6 Website traffic
The website uses Cloudflare Web Analytics, provided by Cloudflare, Inc., to measure traffic. The tool does not use cookies and does not store any data in your browser (not in localStorage either). It does not build profiles of individual visitors and does not track you across websites; it works with aggregate counts (pages viewed, where visitors came from, type of device, loading speed). The measurement script is loaded from a Cloudflare server, which, like any server, sees your IP address when it does so. Measurement runs on all pages of the website. The legal basis is the controller’s legitimate interest in measuring the traffic and performance of the website.
The hosting provider keeps ordinary server logs (IP address, time, requested address) for the period it sets in order to ensure operation and security.
3. Cookies
The website does not use cookies or similar storage in the browser. That is why it does not show a cookie banner.
4. Who else has access to the data
I do not pass data on to anyone for their own marketing purposes. In running the website and the service I use the following processors and services:
| Who | What for | Where |
|---|---|---|
| ACTIVE 24, s.r.o. | web hosting, email mailbox, sending messages from the forms | Czech Republic / EU |
| Cloudflare, Inc. | cookie-free traffic measurement | USA / EU |
| Peaksware, LLC (TrainingPeaks) | training plans and clients’ training data | USA |
| WhatsApp (Meta Platforms Ireland Ltd.) | communication, if the client chooses it | EU / USA |
| Fakturoid s. r. o., Na Perštýně 342/1, 110 00 Praha 1, Company ID 04656679 | issuing invoices | registered in the Czech Republic; processing under Fakturoid’s terms |
5. Your rights
You have the right:
- of access to your data and to a copy of it,
- to rectification of inaccurate data,
- to erasure, if the data is no longer needed or you have withdrawn consent,
- to restriction of processing,
- to portability of the data you have provided to me,
- to object to processing based on legitimate interest,
- to withdraw consent, where processing is based on consent.
Just write to ondrejvit (at) ondrejvit.com. I will reply within one month.
If you believe I am not handling your data correctly, you can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, uoou.gov.cz.
6. Do you have to provide the data?
I need the data marked as required in the forms in order to reply. A contract cannot be concluded without billing details. Other data is voluntary.
There is no automated decision-making or profiling.
7. Security
The website runs over an encrypted connection (HTTPS). Messages from the forms are not stored in a database; they are sent by email to the controller’s mailbox.
8. Changes to this document
The current version is always on this page, with its effective date.