Skip to content
RIO TOP GYM
+48 733 733 403 biuro@riotopgym.pl PL - PolskiEN - EnglishUA - Українська
Client portal, opens in a new tab Buy membership, opens in a new tab

Privacy policy
for riotopgym.pl

Contents
  1. § 1. Personal data controller
  2. § 2. Definitions
  3. § 3. Purposes and legal bases of processing
  4. § 4. Categories of data recipients
  5. § 5. Data processing period
  6. § 6. Rights of data subjects
  7. § 7. Voluntary provision of data
  8. § 8. Profiling of personal data
  9. § 9. Cookies
  10. § 10. Server logs
  11. § 11. Personal data security
  12. § 12. Final provisions
Data protection contact

This translation is provided for information only. The Polish version is legally binding.

The company MLV95 sp. z o.o., with its registered office in Wrocław (50‑033), at ul. Piłsudskiego 18c, takes care to protect the personal data of its customers. It therefore always strives to comply with all applicable and currently binding laws and rules on the protection of personal data. To give users of the website www.riotopgym.pl (hereinafter: “Website”) who provide their personal data to MLV95 sp. z o.o., with its registered office in Wrocław (50‑033), at ul. Piłsudskiego 18c, a sense of security, we have developed a special procedure for processing such data. This document sets out the basic policy on the protection of personal data provided to MLV95 sp. z o.o., with its registered office in Wrocław (50‑033), at ul. Piłsudskiego 18c, by users of the Website in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (OJ L 119, p. 1) (hereinafter “GDPR”).

§ 1. Personal data controller

  • The Personal Data Controller is MLV95 sp. z o.o., with its registered office in Wrocław (50‑033), at ul. Piłsudskiego 18c.
  • You can contact us:

    - by e‑mail at: biuro@riotopgym.pl

    - in writing, by sending correspondence to: MLV95 sp. z o.o., with its registered office in Wrocław (50‑033), at ul. Piłsudskiego 18c.

§ 2. Definitions

Personal data
information comprising: first name and surname, telephone number, e‑mail address and other data, including contact and address details, entered by the User, relating to an identified or identifiable natural person as a result of entering such information while using the services provided by the Service Provider.
Data processing
any operations performed on personal data, such as collection, recording, storage, organisation, alteration, making available and erasure, and in particular those performed in IT systems.
Personal data breach
means the unlawful disclosure, acquisition, unauthorised access, unjustified modification or destruction of personal data.
Service Provider
means the Personal Data Controller in connection with the provision of services by electronic means via the website www.riotopgym.pl.
User
a natural person using the services offered by the Service Provider in connection with the provision of services by electronic means via the website www.riotopgym.pl

§ 3. Purposes and legal bases of personal data processing

Your personal data will be processed to the extent provided by you via (application forms/order forms/the online shop) and other forms of contact with MLV95 sp. z o.o., with its registered office in Wrocław (50‑033), at ul. Piłsudskiego 18c, for the purpose of:
  • providing services related to the fulfilment of an order/delivery of training under Article 6(1)(b) GDPR (actions necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract),
  • pursuing possible claims under Article 6(1)(f) GDPR (the purposes of the legitimate interests pursued by the controller) and,
  • where additional consents have been given - under Article 6(1)(a) GDPR - to the extent and for the purposes indicated in those consents.

§ 4. Categories of recipients of personal data

  • Your personal data may be disclosed:

    to public entities authorised under separate provisions, for the purposes of proceedings conducted by them,

    to other external entities supporting MLV95 Sp. z o.o. with IT, transport or accounting services, or cooperating with MLV95 Sp. z o.o. in marketing campaigns, whereby such entities will process the data on the basis of an agreement with MLV95 Sp. z o.o. and solely in accordance with its instructions.

  • Your personal data will not be transferred to third countries or international organisations.

§ 5. Personal data processing period

Your personal data will be processed until the contract has been performed, and also after its termination for purposes related to:
  • the performance of obligations arising from legal provisions, in particular tax and accounting obligations,
  • the pursuit of claims in connection with the performance of the contract (i.e. as a rule for a maximum period of 10 years from the date on which performance of the contract ended),
  • marketing purposes:

    where data are processed on the basis of consent - until the end of the marketing campaigns or until consent is withdrawn;

    where data are processed on the basis of the legitimate purpose of MLV95 sp. z o.o., with its registered office in Wrocław (50‑033), at ul. Piłsudskiego 18c - for the duration of the marketing campaigns or until an objection is raised;

  • if you consent to the processing of personal data for other purposes, your personal data will be processed until that consent is withdrawn.

§ 6. Rights of data subjects

  • You have the right of access to your Personal Data, the right to have it rectified or erased, and the right to request restriction of processing.
  • You have the right to object to the processing of Personal Data and to withdraw consent to the processing of Personal Data for one or more of the purposes for which it was given, at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
  • You have the right to data portability, i.e. to receive the personal data in a structured, commonly used and machine-readable format, and the right to transmit that personal data to another Controller. Where technically feasible, you have the right to request that the personal data be transmitted by us directly to another Controller.
  • To exercise the above rights, you may contact us or the Data Protection Officer. The contact details are given above.
  • You have the right to lodge a complaint with the supervisory authority overseeing the processing of Personal Data.

§ 7. Voluntary provision of personal data

Providing Personal Data on the Website is voluntary but necessary to achieve one or more of the personal data processing purposes defined in § 3 above. The Service Provider will not be able to achieve one or more of the purposes defined in § 3 above if personal data are not provided on the Website.

§ 8. Profiling of personal data

Your personal data will be processed by automated means, including profiling, using information about orders and activities in the Service Provider’s sales channels (computer IP address, cookies, preferred purchasing methods) and socio-demographic data (e.g. gender, age, income, place of residence), in order to tailor marketing information to individual preferences.

§ 9. Cookies

  • When you use our Website, we collect information about your visit and how you navigate the Website. For this purpose we use cookies. A cookie contains data that are placed in the browser of your computer or mobile device. The cookies used on the Website serve, among other things, to remember your preferences, to secure the website and to optimise the Website on an ongoing basis. Some functions of the Website will not work if you do not consent to the installation of cookies.
  • Installing cookies or accessing them does not cause any changes to your device or to the software installed on that device. We use two types of cookies: session and persistent cookies. Session cookies expire at the end of the session, the duration and exact expiry parameters of which are determined by the browser you use and by our analytics systems. Persistent cookies are not deleted when the browser window is closed, mainly so that information about the user’s choices is not lost. Long-term cookies are used to help us identify new and returning users of the Website.
  • In addition, we also use other technologies similar to cookies, such as web beacons, known as pixels. These are small graphic files downloaded by your computer or mobile device when you open a given web page on the Website, via an advertisement, an e‑mail message or a mobile application. We use them to remember your preferences and for marketing purposes.
  • Some cookies are created by entities whose services we use. We use cookies for the purposes specified in brackets: Benhauer Sp. z o.o. sp. k. (Sales Manago), Google Inc. (Google Analytics, Double Click and Google Adwords), Facebook, Sare SA (newsletter and sending mailings), LiveChat Inc. (satisfaction surveys). The Privacy Policy does not govern how third parties use Cookies. More information about them may be available on the individual websites of the Service Provider’s partners.
  • We use cookies:

    for statistical purposes, to check how often individual pages of the Website are visited. We use these data to optimise the Website for the users who visit us;

    to remember how you use the Website and to make it easier to browse. This allows us to better tailor the content and functions presented to your needs;

    for marketing purposes, to tailor marketing messages to your preferences;

    to remember the settings you have chosen and to enable the username field to be filled in automatically on your device when this website is launched again.

  • The vast majority of browsers accept cookies by default in order to provide users with convenient use of websites and uninterrupted display of their content.
  • You may change your Cookies settings yourself and at any time, specifying the conditions for their storage and for access by Cookies to your device. You may change the settings referred to in the previous sentence using your web browser settings or the service configuration. These settings may be changed in particular so as to block the automatic handling of Cookies in the web browser settings or to notify you each time Cookies are placed on your device. Detailed information on the options and methods of handling Cookies is available in the settings of your software (web browser).
  • You may delete Cookies at any time using the functions available in the web browser you use.
  • Restricting the use of Cookies may affect some of the functions available on the Website.

§ 10. Server logs

  • Information about certain user behaviour is logged at the server layer. These data are used solely for the purpose of administering the website and to ensure the most efficient handling of the hosting services provided.
  • The resources viewed are identified by URL addresses. In addition, the following may be recorded:

    - the time the request arrived,

    - the time the response was sent,

    - the name of the user’s station - identification carried out via the HTTP protocol,

    - information about errors that occurred during HTTP transactions,

    - the URL of the page previously visited by the user (referer link) - where the Website was accessed via a link,

    - information about the user’s browser,

    - information about the IP address.

  • The above data are not associated with specific persons browsing the pages.
  • The above data are used solely for the purpose of administering the server.

§ 11. Personal data security

The Service Provider declares that it endeavours to ensure a high level of security for you when using the Website and, to this end:
  • applies the technical and organisational measures required by law, in particular as regards the security of personal data processing against disclosure to unauthorised persons, removal by an unauthorised person, alteration, damage or destruction,
  • applies measures ensuring: i) the ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services; ii) the ability to restore the availability of and access to Personal Data in a timely manner in the event of a physical or technical incident; iii) regular testing, measuring and evaluating of the effectiveness of technical and organisational measures intended to ensure the security of processing,
  • allows only persons holding an authorisation issued by the data Controller to process personal data,
  • ensures control over the correctness of personal data processing,
  • keeps a register of persons authorised to process personal data and exercises particular care to ensure that persons authorised to process such data keep them confidential, also after the provision of the Service has ended,
  • maintains the documentation required by law describing the manner of processing the entrusted personal data and the technical and organisational measures ensuring the protection of the processing of such data,
  • ensures that the IT and telecommunications devices and systems used to process personal data comply with the requirements of the Rozporządzenie Ministerstwa Spraw Wewnętrznych i Administracji z dnia 29 kwietnia 2004 r. w sprawie dokumentacji przetwarzanych danych osobowych oraz warunków technicznych i organizacyjnych, jakim powinny odpowiadać urządzenia i systemy (Regulation of the Ministry of the Interior and Administration of 29 April 2004 on the documentation of processed personal data and the technical and organisational conditions to be met by devices and systems).
Any events affecting the security of the transmission of information and data, including those concerning suspected sharing of files containing viruses, other files of a similar nature or other destructive mechanisms, should be reported to the Service Provider at the e‑mail address: biuro@riotopgym.pl

§ 12. Final provisions

In matters not regulated by the Privacy Policy, the legal provisions on the processing of Personal Data, including the GDPR, shall apply.