Privacy Policy
Last updated: 7 July 2026
This Privacy Policy explains how Zoom Cycle s.r.o. (“Zoom Cycle”, “we”, “us”) collects and uses your personal data when you use the Zoom Cycle mobile app and related booking services (the “Service”). We are the data controller.
Rohanské nábřeží 693/10, 186 00 Prague 8, Czech Republic
Company No. (IČO): 25748238 · VAT No. (DIČ): CZ25748238
Email: info@zoomcycle.cz · Phone: +420 603 432 425
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Czech law.
1. What data we collect
You give us:
- Account details: first and last name, email address, phone number, and a password (stored only in hashed form).
- Optional profile details: date of birth, postal address, shoe size, student status, and your Multisport card number — only if you choose to provide them.
- Bookings and purchases: the classes you reserve, cancel or attend; class passes, gift cards and Multisport deposits you buy; and your booking history.
- Communications: messages you send us (e.g. support requests) and your notification/marketing preferences.
Created when you use the Service:
- Account identifier: a unique member ID used for your booking and QR check-in code (
ZC:USER:<id>) and, if you add it, your Apple Wallet pass. - Technical data: limited technical information generated by our servers when the app connects (such as IP address and request logs), used for security and to operate the Service.
We do NOT:
- Track you across other companies’ apps or websites, or use advertising identifiers.
- Include any third-party analytics, advertising, or tracking SDKs in the app.
- Collect your device location (the studio map is a fixed point of interest).
- Store your payment card number — see Payments below.
2. How we use your data, and our legal bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Create and manage your account; take bookings; check you in | Performance of a contract (Art. 6(1)(b)) |
| Process payments for classes, passes, gifts and deposits | Performance of a contract (Art. 6(1)(b)) |
| Keep accounting and tax records of purchases | Legal obligation (Art. 6(1)(c)) |
| Send essential service emails (booking confirmations, waitlist and class-change notices, receipts) | Contract / legitimate interests (Art. 6(1)(b)/(f)) |
| Secure the Service and prevent fraud/abuse | Legitimate interests (Art. 6(1)(f)) |
| Optional profile details (date of birth, address, shoe size, student status, Multisport card) | Consent — you choose to provide them (Art. 6(1)(a)) |
| Marketing emails (“news & offers”) | Consent, withdrawable at any time (Art. 6(1)(a)) |
You control notification and marketing preferences in the app under Settings, and can unsubscribe from marketing emails at any time.
3. Payments
Payments are processed by Stripe (Stripe Payments Europe, Ltd.). When you pay, your card details are entered into Stripe’s secure payment sheet or Apple Pay and are sent directly to Stripe — Zoom Cycle never receives or stores your full card number. Stripe processes payment data under its own terms and privacy policy (stripe.com/privacy). We keep a record of the transaction (amount, date, item, and payment status) for your history and for our legal accounting obligations.
4. Who we share data with
- Payment processing: Stripe (see above).
- Hosting and storage: Amazon Web Services (AWS) — the app’s backend, database and email delivery run on AWS infrastructure.
- Multisport partner: if you book using a Multisport card, we validate the card and register or cancel your visit with the operator of the MultiSport benefit programme, as required to honour that benefit.
- Apple: to deliver Apple Wallet passes, app notifications/badges, and via the App Store. Your use of Siri shortcuts is handled on-device by Apple.
- Authorities or advisors: where required by law, or to establish, exercise or defend legal claims.
We do not sell your personal data.
5. International transfers
Our infrastructure provider (AWS) may process data on servers located in the United States. Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and our providers’ certifications. You can request a copy of the relevant safeguards using the contact details above.
6. How long we keep your data
- Account and profile data: while your account is active, then deleted or anonymised within a reasonable period after you close it, unless we must keep it longer by law.
- Purchase, payment and tax records: for the period required by Czech accounting and tax law (generally up to 10 years).
- Marketing consent records: until you withdraw consent, plus a short period to evidence the withdrawal.
7. Your rights
Under the GDPR you have the right to: access your data; rectify inaccurate data; erase data (“right to be forgotten”); restrict or object to processing; data portability; and to withdraw consent at any time. You can exercise most of these directly in the app (edit your profile, change preferences, or delete your account) or by emailing info@zoomcycle.cz.
You also have the right to lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
8. Account deletion
You can request deletion of your account and associated personal data from within the app, or by emailing info@zoomcycle.cz. Some records (such as accounting records of past purchases) may be retained where the law requires.
9. Children
The Service is intended for adults and for teenagers using it with a parent’s or guardian’s involvement. You must be at least 15 years old (the age of digital consent in the Czech Republic) to create an account. We do not knowingly collect data from children below that age without appropriate consent.
10. Security
We use technical and organisational measures appropriate to the risk, including encryption in transit, hashed passwords, tokenised payments (via Stripe), and access controls, to protect your personal data.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here with a new “Last updated” date, and, where changes are significant, notify you in the app or by email.
12. Contact
Zoom Cycle s.r.o., info@zoomcycle.cz, +420 603 432 425, Rohanské nábřeží 693/10, 186 00 Prague 8, Czech Republic.