Effective from 23 July 2026

We respect your privacy. This policy explains how Pixxla Sauna, s.r.o. processes data of visitors to www.secretsauna.cz, Secret Sauna customers, programme members and people communicating with us, including cookies and similar technologies.

I. Controller

Pixxla Sauna, s.r.o., Company ID 245 64 869, VAT ID CZ24564869, Nademlejnská 1069/20, Hloubětín, 198 00 Prague 9; pixxla.sauna@gmail.com; www.secretsauna.cz (“Controller”).

II. Data we process

We process only data needed to operate the website, manage bookings, provide services, secure the Premises, communicate and comply with law. Booking data may include name, e-mail, phone, date/time, group size, payment status, notes, booking history, changes and cancellations. The legal basis is mainly performance of a contract or pre-contractual steps.

III. Reenio booking system

Bookings use Reenio, which may display “Pixxla sauna cz”. This is only an account label; the controller and contractual party remains Pixxla Sauna, s.r.o. Reenio is technically operated by GARVIS Solutions s.r.o., Company ID 28659058, 28. října 3346/91, 702 00 Ostrava. It may act as our processor and in some cases an independent controller. Its own privacy and cookie rules may apply when you enter its environment.

IV. Payments and accounting

We may process booking identification, amount, payment status/date and invoice data. Card data is normally handled directly by an external payment provider. Accounting and tax records are retained as required by law, potentially up to 10 years.

V. Access and security

We may process access-code assignment, access logs, timestamps and incident records to provide access, protect property, prevent unauthorised entry, handle incidents, complaints and legal claims. The basis is contract performance or legitimate interests in safety and property protection.

VI. Cameras and security systems

Entrances and strictly necessary exterior areas may be monitored for property and personal safety, prevention of vandalism/theft/unauthorised access and legal claims. Changing, shower, rest and private indoor areas are not monitored. Systems may connect to a security service. Recordings are kept only as necessary; incident footage may be retained longer to resolve the incident or protect claims.

VII. Customer communication

When you contact us, we may process contact details, message content, booking information and attachments to answer questions, manage bookings, complaints or requests. The basis is contract, requested pre-contractual steps or legitimate interests in communication and legal protection.

Invitation requests for private testing

When you request an invitation to the Secret Sauna testing phase, we process your name and email address to review the request, reply and, where appropriate, send an individual access code. Codes may also be shared with predefined groups.

The form is technically provided by Brevo and protected against automated abuse by Google reCAPTCHA. These providers may therefore process information necessary to deliver and protect the request, including technical device and connection data. We use invitation requests to administer testing access; marketing messages are sent only where a separate legal basis applies.

After manually approving a tester, we may use their name to create a personalised Trusted Sauna Tester card containing their initials and access code, and send it with the invitation to the supplied email address through Brevo’s transactional email service. The card identifies participation in the testing programme; we do not use the data for marketing without a separate legal basis.

The access cookie created after a valid code is entered is essential to secure the closed website. It is technical, unavailable to browser JavaScript and normally valid for no more than 30 days; it stops working earlier if the relevant code is revoked.

If you consent to analytics, we may associate the number of unlocks, visits and viewed pages, and approximate active time on the site, with the individual or group code used. Active time is counted only while the page is visible and the visitor is not idle; we do not store keystrokes or form content. We use these statistics to evaluate the testing phase and the reach of invitations. Because an individual code may be linked to an approved tester, this information may constitute personal data. Measurement does not start without analytics consent and stops after consent is withdrawn.

VIII. Inner Circle

For Inner Circle or another customer programme we may process identification/contact details, membership, benefit usage, related bookings and communication to administer membership and agreed benefits, based mainly on the membership contract.

With voluntary consent we may use your e-mail and name for Secret Sauna news, dates, locations, events and offers. Consent can be withdrawn at any time through the unsubscribe link or pixxla.sauna@gmail.com, without affecting prior lawful processing.

X. Website visits

Technical data may include IP address, device, browser, operating system, date/time, pages, logs/errors and approximate traffic source. Data necessary for secure operation is processed as required; analytics follows the cookie rules below. We use Sentry on the server to detect technical errors; browser monitoring and Sentry Session Replay are disabled, and the integration is configured not to send default personal identifiers.

XI. Google Analytics, Tag Manager, Vercel Web Analytics and Microsoft Clarity

We may use Google Analytics 4 to understand visitor numbers, pages, visit flow, source, devices, interactions and conversions, and Google Tag Manager to manage tags. The EEA provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Analytics is activated only with analytics-cookie consent unless law permits otherwise. When the landing page opens, the site may request the current rating, review count, selected reviews and author attribution from Google Places API. Author profile images are loaded from Google when the dedicated reviews section approaches the visible area; Google may then receive technical connection data. This content is not used by us to create an advertising profile.

With analytics consent, we may also use Vercel Web Analytics to obtain aggregated information about page views, routes and basic traffic context. The service is designed without visitor-identification cookies. We nevertheless load it only after analytics consent and exclude the invitation-management area from measurement.

After marketing-cookie consent, the site may also load recent posts from the professional Instagram @secretsauna.cz account. Post data is obtained server-side through the Meta API; Meta may receive technical connection data when images are displayed. Without this consent, a local photographic fallback remains visible.

With analytics-cookie consent, we may also use Microsoft Clarity to create aggregated click and scroll heatmaps and visual reconstructions of website sessions. Clarity processes technical information and interactions such as clicks, scrolling and page layout. Form inputs and other sensitive content are masked; the invitation-management area is excluded from tracking. Microsoft provides the service through Microsoft Corporation and its affiliates. Recordings are normally retained for 30 days and heatmap data for up to 9 months.

XII. Recipients

Necessary data may be shared with GARVIS/Reenio, hosting/cloud/website providers including Vercel, Sentry, Google, Microsoft, Meta Platforms Ireland Limited, payment, e-mail, communication, access and security providers, security services, accountants, tax/legal advisers and authorities where legally required. We do not provide data for third-party marketing without a legal basis.

XIII. Transfers outside the EEA

Where providers process data outside the EEA, transfers use an appropriate GDPR mechanism, such as an adequacy decision or contractual safeguards.

XIV. Retention

We retain data only as long as needed. Booking/contract data is kept for service delivery and protection of claims; tax records as legally required (potentially 10 years); consent data until withdrawal or purpose expiry; technical/security and camera records proportionately, with incident records retained as necessary.

XV. Your rights

Subject to GDPR, you may request information, access, correction, deletion, restriction, portability, object to legitimate-interest processing, withdraw consent, and complain to a supervisory authority. Contact pixxla.sauna@gmail.com. The authority is Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7.

XVI. Cookies

Cookies are small files or similar information used for site operation, preferences and analysis.

Essential cookies

Used for technical operation, security, privacy preferences, consent storage, forms and basic functions. Where strictly necessary, they do not require prior consent.

Analytics cookies

Used only with consent to understand website use. Google Analytics may use _ga to distinguish visitors and _ga_<ID> for session state, normally up to 2 years, potentially shorter due to settings or deletion. Microsoft Clarity may use _clck to maintain a pseudonymous visitor identifier and preferences and _clsk to connect page views into one session recording.

Marketing cookies

We use Meta Pixel and browser-side Conversions API events only after prior marketing consent to measure campaigns and actions such as viewing an offer, starting a booking, contacting us or requesting an invitation. Meta may use cookies including _fbp and, where a visitor arrives through a Meta advertisement, _fbc, and may receive technical browser, device, page, campaign, event-type and event-time information. To measure a confirmed and paid purchase, a server-side Conversions API event may also contain normalised and one-way hashed e-mail, telephone number, first and last name, country and internal customer identifier, together with the reservation number, currency and purchase value. This server-side event may be sent independently of marketing cookies in the browser. We do not send ordinary form-field values through the Pixel. You can withdraw browser-side consent at any time in Cookie settings.

If you consent to marketing cookies and subsequently submit an invitation request or create a reservation, we may temporarily retain the _fbc and _fbp identifiers and related technical information for no longer than 30 days. They are used solely to associate a later confirmed payment with the original visit and advertising campaign.

XVII. Reenio cookies

Opening Reenio enters an externally operated environment. Reenio may use its own essential, analytics or marketing cookies according to its settings, your choices and its policies.

On first visit you can Allow all, Reject optional, or open Settings. Essential cookies cannot be disabled in the banner. Rejecting optional cookies does not prevent normal website use or booking. Optional cookies remain disabled until active consent; continuing or closing the banner is not consent.

You can change or withdraw consent through Cookie settings permanently available in the footer. You may also delete/block cookies in your browser, although blocking essential storage can affect functionality.

XX. Automated decision-making

We do not use data from www.secretsauna.cz for automated decisions producing legal or similarly significant effects unless you are expressly informed beforehand.

XXI. Security

We use appropriate technical and organisational measures against unauthorised access, loss, misuse, alteration, disclosure or destruction. Access is limited to persons and providers who need it.

XXII. Changes

We may update this policy when processing, services, technologies, providers or legal requirements change. The current version and effective date will be published at www.secretsauna.cz.

XXIII. Contact

Pixxla Sauna, s.r.o., Nademlejnská 1069/20, Hloubětín, 198 00 Prague 9; pixxla.sauna@gmail.com; www.secretsauna.cz.

PRIVACY AND COOKIE POLICY