PRIVACY AND COOKIE POLICY

Effective from 21 July 2026

We respect your privacy. This policy explains how Pixxla Sauna, s.r.o. processes data of visitors to www.secretsauna.cz, Secret Sauna customers, programme members and people communicating with us, including cookies and similar technologies.

I. Controller

Pixxla Sauna, s.r.o., Company ID 245 64 869, VAT ID CZ24564869, Nademlejnská 1069/20, Hloubětín, 198 00 Prague 9; pixxla.sauna@gmail.com; www.secretsauna.cz (“Controller”).

II. Data we process

We process only data needed to operate the website, manage bookings, provide services, secure the Premises, communicate and comply with law. Booking data may include name, e-mail, phone, date/time, group size, payment status, notes, booking history, changes and cancellations. The legal basis is mainly performance of a contract or pre-contractual steps.

III. Reenio booking system

Bookings use Reenio, which may display “Pixxla sauna cz”. This is only an account label; the controller and contractual party remains Pixxla Sauna, s.r.o. Reenio is technically operated by GARVIS Solutions s.r.o., Company ID 28659058, 28. října 3346/91, 702 00 Ostrava. It may act as our processor and in some cases an independent controller. Its own privacy and cookie rules may apply when you enter its environment.

IV. Payments and accounting

We may process booking identification, amount, payment status/date and invoice data. Card data is normally handled directly by an external payment provider. Accounting and tax records are retained as required by law, potentially up to 10 years.

V. Access and security

We may process access-code assignment, access logs, timestamps and incident records to provide access, protect property, prevent unauthorised entry, handle incidents, complaints and legal claims. The basis is contract performance or legitimate interests in safety and property protection.

VI. Cameras and security systems

Entrances and strictly necessary exterior areas may be monitored for property and personal safety, prevention of vandalism/theft/unauthorised access and legal claims. Changing, shower, rest and private indoor areas are not monitored. Systems may connect to a security service. Recordings are kept only as necessary; incident footage may be retained longer to resolve the incident or protect claims.

VII. Customer communication

When you contact us, we may process contact details, message content, booking information and attachments to answer questions, manage bookings, complaints or requests. The basis is contract, requested pre-contractual steps or legitimate interests in communication and legal protection.

VIII. Inner Circle

For Inner Circle or another customer programme we may process identification/contact details, membership, benefit usage, related bookings and communication to administer membership and agreed benefits, based mainly on the membership contract.

IX. Newsletter and marketing

With voluntary consent we may use your e-mail and name for Secret Sauna news, dates, locations, events and offers. Consent can be withdrawn at any time through the unsubscribe link or pixxla.sauna@gmail.com, without affecting prior lawful processing.

X. Website visits

Technical data may include IP address, device, browser, operating system, date/time, pages, logs/errors and approximate traffic source. Data necessary for secure operation is processed as required; analytics follows the cookie rules below.

XI. Google Analytics and Tag Manager

We may use Google Analytics 4 to understand visitor numbers, pages, visit flow, source, devices, interactions and conversions, and Google Tag Manager to manage tags. The EEA provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Analytics is activated only with analytics-cookie consent unless law permits otherwise.

XII. Recipients

Necessary data may be shared with GARVIS/Reenio, hosting/cloud/website providers including Vercel, Google, payment, e-mail, communication, access and security providers, security services, accountants, tax/legal advisers and authorities where legally required. We do not provide data for third-party marketing without a legal basis.

XIII. Transfers outside the EEA

Where providers process data outside the EEA, transfers use an appropriate GDPR mechanism, such as an adequacy decision or contractual safeguards.

XIV. Retention

We retain data only as long as needed. Booking/contract data is kept for service delivery and protection of claims; tax records as legally required (potentially 10 years); consent data until withdrawal or purpose expiry; technical/security and camera records proportionately, with incident records retained as necessary.

XV. Your rights

Subject to GDPR, you may request information, access, correction, deletion, restriction, portability, object to legitimate-interest processing, withdraw consent, and complain to a supervisory authority. Contact pixxla.sauna@gmail.com. The authority is Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7.

XVI. Cookies

Cookies are small files or similar information used for site operation, preferences and analysis.

Essential cookies

Used for technical operation, security, privacy preferences, consent storage, forms and basic functions. Where strictly necessary, they do not require prior consent.

Analytics cookies

Used only with consent to understand website use. Google Analytics may use _ga to distinguish visitors and _ga_<ID> for session state, normally up to 2 years, potentially shorter due to settings or deletion.

Marketing cookies

May measure advertising, audiences, remarketing and personalisation. If used, they activate only after prior consent unless law provides otherwise. Current technologies appear in cookie settings.

XVII. Reenio cookies

Opening Reenio enters an externally operated environment. Reenio may use its own essential, analytics or marketing cookies according to its settings, your choices and its policies.

XVIII. Cookie choices

On first visit you can Allow all, Reject optional, or open Settings. Essential cookies cannot be disabled in the banner. Rejecting optional cookies does not prevent normal website use or booking. Optional cookies remain disabled until active consent; continuing or closing the banner is not consent.

XIX. Changing consent

You can change or withdraw consent through Cookie settings permanently available in the footer. You may also delete/block cookies in your browser, although blocking essential storage can affect functionality.

XX. Automated decision-making

We do not use data from www.secretsauna.cz for automated decisions producing legal or similarly significant effects unless you are expressly informed beforehand.

XXI. Security

We use appropriate technical and organisational measures against unauthorised access, loss, misuse, alteration, disclosure or destruction. Access is limited to persons and providers who need it.

XXII. Changes

We may update this policy when processing, services, technologies, providers or legal requirements change. The current version and effective date will be published at www.secretsauna.cz.

XXIII. Contact

Pixxla Sauna, s.r.o., Nademlejnská 1069/20, Hloubětín, 198 00 Prague 9; pixxla.sauna@gmail.com; www.secretsauna.cz.