Want to be the first to get FreshAura news?
Whether it's discounts, news, articles, tips or special offers. You'll be the first to know. Subscribe now.
This document is valid from 16 November 2025.
On this page you will find which data we process, the legal basis, purposes and retention periods.
Dear clients, please read this information on the processing of your personal data under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter the “Regulation”).
Your personal data are processed by TroubleMakers s.r.o., with its registered office at Jičínská 226/17, Žižkov (Prague 3), 130 00 Prague, Company ID No.: 23032901. This company is the controller and is referred to below as "we" or the "company". Our company operates the fitness centre FreshAura Gym Žižkov. If you have any questions regarding personal data, you can contact us by e-mail at info@freshaura.cz or by post at the address above.
By approving our general terms and conditions (hereinafter the “Terms”) via the registration and reservation system (“RSS”), or by entering the premises of FreshAura Gym Žižkov, or, in the case of clients under 16 years of age, by completing a registration form through a responsible representative, you have entered into a service agreement with us. The personal data you provided when registering in the RSS – in particular your first name, surname, e-mail address and telephone number – as well as data on booked and used services, subscriptions (credits) and payments for services and goods are processed for the purpose of providing services, keeping records of subscriptions (credits) and their use, and for billing payments. The legal basis for processing is the performance of a contract in accordance with Article 6(1)(b) of the Regulation (“Lawfulness of processing”). Where there is a framework agreement with your employer or use of another group benefit, the legal basis is our legitimate interest and the legitimate interest of our contractual partner in keeping records of services provided under such an agreement. After the end of the agreement, we continue to process this data for the purpose of our legitimate interest, which is the exercise, demonstration and defence of legal claims, usually for a period of 4 years from the first moment a claim could be raised.
Data on the content of services, service subscriptions (credits) and payments are also recorded for tax and accounting purposes, on the legal basis of statutory and tax obligations (in particular obligations under Act No. 563/1991 Coll., on Accounting), for the period laid down by the applicable legislation, usually 10 years.
There is one camera with audio and video recording installed on the premises of FreshAura Gym Žižkov. Camera recordings are made with the aim of preventing security incidents such as theft, endangerment of clients, visitors and employees, disturbances and other events that may constitute criminal offences or administrative offences. These recordings allow us to deal with such incidents in subsequent administrative or criminal proceedings, or in proceedings in which we assert our legal claims against offenders. The camera located at the entrance also serves to monitor compliance with the Terms and to assist in managing entry, especially to detect possible misuse or unauthorised use of access codes or breaches of booked time blocks. Personal data are processed for the purpose of protecting the security and property of the operator and visitors to the operator’s premises, and for the purpose of exercising, demonstrating and defending legal claims. The legal basis is our legitimate interest in protection against incidents and in exercising, demonstrating and defending legal claims under Article 6(1)(e) of the Regulation. Recordings are usually stored for 240 hours. If an incident is captured on the recording, we process the recordings until the incident proceedings are closed or all related claims have been resolved.
Without a specific separate legal basis, we may process data for archiving purposes, scientific or historical research purposes or statistical purposes, in accordance with Article 89 of the Regulation. Archiving is carried out for these purposes when we process data after the original purpose has ceased, for a period determined by the applicable legislation.
TroubleMakers does not process clients’ personal data relating to their health status, except in the following cases:
(a) Processing of data which the controller is required to process as a legal obligation under legislation or decisions of the relevant Czech authority (in particular for the protection of public health). In such cases, data are processed on the legal basis of a legal obligation pursuant to Article 6(1)(c) of the Regulation for the period laid down by the relevant legal act or order, and on the basis of the exceptions under Article 9(2)(g) or (i); or
(b) Where the client has given consent for their data to be processed by a member of the centre’s staff. In such cases, personal data are processed on the legal basis of consent under Article 9(2)(a) of the Regulation, for the period specified in such consent. You may withdraw your consent at any time. Please note that authorised trainers providing one-to-one training are not employees of the company, and the operator does not process personal data which clients provide to trainers, is not responsible for such processing and this information does not apply to such processing.
For marketing purposes, we use your personal data on the legal basis of your consent until such consent is withdrawn. Providing consent is voluntary and you may withdraw it at any time. If you are our client, we may also use your contact details for marketing on the legal basis of legitimate interest. For such purposes, we process data for no longer than 5 years from your last visit. This processing is subject to your right to object.
When you use our website or the portal of our registration and reservation system, small files (cookies) may be stored on your device, which can transmit and store data. Necessary cookies are processed on the legal basis of legitimate interest under Article 6(1)(f) of the Regulation, which is the proper functioning of the website and the registration and reservation system. In the current configuration of the website, only technical cookies are used to ensure the correct operation of the site. We store only cookies that are used to maintain the user’s login session, complete reservations, registration and login. We do not process any other types of cookies (other than technical ones).
External trainers whose names are published on the FreshAura website (www.freshaura.cz) may process clients’ contact and identification data, reservation details and payment information.
If you pay for your reservation via the payment gateway directly on the FreshAura website, or using credits from your user account, payment information is processed only by TroubleMakers, and trainers and external partners do not have access to such data.
The payment gateway provider (card data, payer identification and fee).
The provider of the reservation system software and client management software, the provider of access code software and credit management, and the provider of data storage and payment processing software – these are natural and legal persons based in the Czech Republic, in particular BRJ, operated by Jan Barášek, Company ID 05103118. They may process electronically collected and stored data from the website, storage systems and access system.
Companies engaged in debt collection, tax and financial advisors, and legal advisors (they may process identification data, data on rights and obligations, data on receivables and data necessary to demonstrate, assert or defend legal claims).
In addition, we provide or make your data available to public authorities where required by law.
Personal data are stored in the territory of the Member States of the European Union in a secure form with our contracted hosting partners.
If we process data on the basis of your consent, you have the right to withdraw such consent at any time. You can withdraw consent by e-mail to info@freshaura.cz or by a written notice sent by post to our company address. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Where data are processed on the basis of legitimate interest, you have the right to object to such processing at any time, on grounds relating to your particular situation. You can exercise your rights in person with the operator, by e-mail at info@freshaura.cz, or by a written notice sent by post to the company's address.
You can exercise your rights in person at our company, by e-mail at info@freshaura.cz, or by a written notice sent by post to the company's address. When you exercise your rights, we are entitled to verify your identity.
If you are not satisfied with how we responded to the exercise of your rights, or if you believe that we are processing your data in breach of the legal regulations, you have the right to lodge a complaint with the Office for Personal Data Protection of the Czech Republic (Úřad pro ochranu osobních údajů), see www.uoou.cz.
This person is responsible for processing and overseeing the processing of personal data for TroubleMakers. If you have any doubts about the processing of personal data or wish to lodge an objection, please contact this person.
TroubleMakers s.r.o.
E-mail: info@freshaura.cz
Registered office: Jičínská 226/17, Žižkov (Prague 3), 130 00 Prague
Company ID No.: 23032901
Whether it's discounts, news, articles, tips or special offers. You'll be the first to know. Subscribe now.
