Personal Data Processing Policy (GDPR)
1. Data Controller
The data controller is:
Lezecká stěna Praha, s.r.o.
Generála Mejstříka 1553/5, 156 00 Prague 5
Company ID: 24246697
E-mail: info@big-wall.cz
Phone: +420 730 510 129
The controller has not appointed a data protection officer.
2. Why and How We Process Personal Data
We process personal data primarily for the following purposes:
- enabling access to and use of the climbing gym
- maintaining records of visitors and payments
- ensuring personal safety and property protection
- compliance with legal obligations (especially accounting)
- organizing courses and operating the sports facility
- potential promotion of BigWall activities (photography, video)
3. Scope of Processed Personal Data
Visitor Registration
Online registration is required to use the climbing gym.
We process the following data:
- first and last name
- email address
- phone number
- visit history and service usage
One-time Visit
For a one-time entry, we may process:
- first and last name
- date of birth
- confirmation of agreement with operating rules
- confirmation of climbing at own risk
Identity or age verification may be required by presenting an ID document upon request.
Minors
For persons under 18 years of age, we also process:
- identification data of the legal guardian
- written consent for the child's participation
- statement of assumption of responsibility, if applicable
We process this data to ensure safety and comply with legal obligations.
4. CCTV System
The climbing gym premises are monitored by a CCTV system for the following purposes:
- property protection
- personal safety
- monitoring compliance with operating rules
Cameras are not installed in changing rooms or other sensitive areas.
Recordings are stored for a maximum of 4 weeks.
The legal basis for processing is the legitimate interest of the controller.
5. Photography and Video Recordings from Events
During events organized by BigWall, photographs or video recordings may be taken for the following purposes:
- presentation and promotion of the climbing gym
- informing about organized activities
This processing is based on visitor consent,
which can be withdrawn at any time by contacting the controller's email.
6. Website, Cookies, and Online Services
On our website, we use:
- technical cookies necessary for website functionality
- analytical cookies (Google Analytics)
- ClimbLife system
- ComGate payment gateway for online payments
These entities act as personal data processors.
7. Legal Bases for Processing
We process personal data based on:
- performance of a contract – gym access, courses, services
- compliance with legal obligations – accounting, records
- legitimate interest – safety, protection of rights, CCTV system
- consent – marketing and photography
8. Recipients of Personal Data
Personal data may be shared with:
- accounting companies
- IT administrators and technology providers
- booking system operators
- ClimbLife service
- ComGate payment gateway
We do not transfer data outside the EU unless required by a specific GDPR-compliant service.
9. Data Retention Period
- customer account: up to 10 years
- visit records: 2 years
- accounting documents: according to legal requirements
- marketing consent: 3 years
- CCTV recordings: 4 weeks
10. Your Rights
You have the right to:
- request access to your data
- request correction or completion
- request deletion
- request restriction of processing
- obtain data in a machine-readable format
- object to processing
- lodge a complaint with the Office for Personal Data Protection (www.uoou.cz)
11. Security of Personal Data
We use appropriate technical and organizational measures
to prevent unauthorized access, misuse, or loss of personal data.
12. Changes to This Policy
This policy may be updated periodically.
The current version is always published on the BigWall website.