Privacy Policy

Last updated: 21 May 2025

1. Introduction

This Privacy Policy describes how the website https://leplaysports.com (hereinafter “the website”) handles information about its visitors and users. We take your privacy seriously and process personal data in accordance with applicable data protection laws, particularly the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

Data Controller

2. Legal Framework

Our data processing activities comply with:

  • GDPR (Regulation EU 2016/679)
  • Act No. 110/2019 Coll., on Personal Data Processing (Czech Republic)
  • Act No. 127/2005 Coll., on Electronic Communications (Czech Republic)
  • Act No. 480/2004 Coll., on Certain Information Society Services (Czech Republic)

3. Categories of Personal Data Processed

3.1. Data Collected Automatically

When you visit our website, we may automatically collect certain information:

  • IP address (anonymized immediately upon collection, typically by truncating the last octet, meaning it cannot be directly linked to an individual)
  • Device type and browser details
  • Website usage data (e.g., pages visited, session duration, referral sources)
  • Approximate geographical location (derived from anonymized IP address)

3.2. Data Provided Voluntarily

This includes any data you choose to provide to us:

  • Contact details (e.g., email address, phone number, name – if provided via contact form)
  • Any additional data you voluntarily share (e.g., when sending an email or filling out a form)

4. Purposes and Legal Bases for Processing

We process your personal data based on specific legal grounds:

4.1. Processing Required by Law

We process your data to comply with our legal obligations, such as:

  • Compliance with accounting and tax obligations
  • Compliance with data protection regulations

4.2. Legitimate Interests

We process certain data based on our legitimate interests, provided your fundamental rights and freedoms do not override these interests:

  • Improving website content and functionality
  • Ensuring website security (e.g., preventing fraud or unauthorized access)
  • Establishing, exercising, or defending legal claims

4.3. Consent-Based Processing

We will obtain your explicit consent before processing data for these purposes:

  • Sending marketing communications (e.g., newsletters, promotional offers)
  • Website analytics using Google Analytics and similar tools (as detailed in our Cookie Policy)

You have the right to withdraw your consent at any time. This withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.

5. Data Retention

We retain personal data only for the period necessary to fulfill the purposes for which it was collected, or as required by law:

  • Google Analytics data: 26 months
  • Accounting and tax documentation: 10 years (due to legal obligations)
  • Data based on consent: Until consent is withdrawn, unless a longer retention period is required by law.

6. Data Recipients

Your personal data may be shared with trusted third parties who help us operate our website and services. These may include:

  • Analytics providers (e.g., Google Analytics)
  • IT and web hosting service providers
  • Legal and tax advisors (when necessary)
  • Government authorities, where legally required (e.g., in response to a court order)

All recipients are contractually bound to comply with GDPR data protection standards and are only permitted to process data for specified purposes.

7. International Data Transfers

When your data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards are in place to protect your privacy:

  • Google Analytics (USA): Data transfers to the USA are based on Standard Contractual Clauses (SCCs) approved by the European Commission, and/or Google’s participation in the EU-U.S. Data Privacy Framework.
  • We implement additional technical and organisational safeguards where appropriate, based on current guidance and best practices.

8. Automated Decision-Making and Profiling

We do not carry out any automated decision-making or profiling of website visitors that would produce legal effects concerning you or similarly significantly affect you.

9. Cookies

Our website uses cookies and similar technologies. For a detailed explanation of what cookies are, the types of cookies we use, their specific purposes, and how you can manage your cookie preferences, please refer to our dedicated Cookie Policy.

10. Your Rights under GDPR

As a data subject under the GDPR, you have the following important rights:

  • Right of access (Art. 15): To obtain confirmation about whether your personal data is being processed and to access that data.
  • Right to rectification (Art. 16): To have inaccurate or incomplete personal data corrected.
  • Right to erasure (“right to be forgotten”, Art. 17): To request the deletion of your personal data under certain conditions.
  • Right to restriction of processing (Art. 18): To request that we limit the way we use your data in certain circumstances.
  • Right to data portability (Art. 20): To receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
  • Right to object (Art. 21): To object to the processing of your personal data in certain situations (e.g., for direct marketing).
  • Right not to be subject to automated decision-making (Art. 22): To not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
  • Right to withdraw consent at any time: If processing is based on your consent.

10.1. How to Exercise Your Rights

To exercise any of these rights, please send your request to: leplaysports@gmail.com. We will respond to your request within 30 days.

10.2. Right to Lodge a Complaint

If you believe your personal data is not being handled properly or that your data protection rights have been violated, you may lodge a complaint with the relevant data protection authority. For visitors from the Czech Republic, this is:

Czech Data Protection Authority Úřad pro ochranu osobních údajů Pplk. Sochora 27, 170 00 Praha 7 Email: posta@uoou.cz Website: www.uoou.cz

11. Data Security

We implement appropriate technical and organisational measures to safeguard your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

  • Data encryption (e.g., SSL/TLS for data in transit)
  • Regular security updates and patches for systems
  • Access control and strong authentication mechanisms
  • Scheduled backups of data
  • Antivirus and firewall protection
  • Security protocols for data transmission
  • Regular staff awareness and training on data protection and security best practices

12. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. Any significant changes will be announced on our website. The most current version will always be available at:

https://leplaysports.com/privacy-policy