1. Who controls your personal data
The controller is Mirza Hadžič, Business ID No. 29517117, with registered address at Běhounkova 2302/1, Prague, Czech Republic (“we”, “us” or “FootballTrips.net”).
Privacy contact: mirza.hadzic@footballtrips.net, telephone +420 773 926 747.
2. Personal data we process
When you submit a contact or booking enquiry form, we may process your name, email address, telephone number, requested service or match, preferred date, number and age of participants, club or organisation details, and the contents of your message.
If a booking is subsequently confirmed or a contract is concluded, we may also process billing and payment details and any other information necessary to provide the agreed service. We request health information or other sensitive data only where it is necessary for the safe delivery of a specific sporting service and process it only where an appropriate legal basis applies.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Handling your enquiry and preparing an offer | Steps taken at your request before entering into a contract under Article 6(1)(b) GDPR. |
| Confirming a booking and providing the service | Performance of a contract under Article 6(1)(b) GDPR. |
| Billing, accounting and compliance with legal duties | Compliance with a legal obligation under Article 6(1)(c) GDPR. |
| Protecting legal claims, preventing misuse and securing communications | Our legitimate interests under Article 6(1)(f) GDPR. |
4. Is providing personal data mandatory?
Providing information through the contact or booking enquiry form is voluntary. However, without the fields marked as required, we may be unable to respond, prepare an offer or subsequently arrange the service. Submitting an enquiry does not by itself create a booking or an obligation to pay.
5. Retention periods
Information relating to an enquiry that does not result in a contract is normally retained for no longer than 12 months after the last communication. Contract-related data is retained for the duration of the service and normally for a further 3 years to protect legal claims. Accounting and tax records are kept for the period required by law, where applicable for up to 10 years. If a dispute or proceeding is ongoing, necessary information may be retained until it is finally resolved.
6. Recipients of personal data
Where necessary, personal data may be disclosed to our web-hosting, email and IT providers, accountant or tax adviser, and to suppliers, clubs, event organisers or partner organisations involved in arranging the service you requested. We may also disclose information to public authorities where required by law.
Each recipient receives only the information necessary for the relevant purpose. If a partner outside the European Economic Area is involved, we will ensure that an appropriate transfer mechanism is in place and provide the required information.
7. Cookies and website measurement
The website in its current configuration does not use analytics or marketing cookies. It may use technical cookies or similar technologies that are strictly necessary for security and the basic operation of the website and enquiry form. If analytics or marketing tools are introduced later, they will be activated only in accordance with applicable legal requirements and this notice will be updated.
8. Automated decision-making
We do not use automated decision-making or profiling in connection with enquiries where this would produce legal or similarly significant effects for you.
9. Your rights
You may request access to, correction or deletion of your personal data, restriction of processing and, where the GDPR conditions are met, data portability. You may object to processing based on legitimate interests. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.
You can exercise your rights by emailing mirza.hadzic@footballtrips.net. We may reasonably verify your identity before responding.
10. Security and updates
We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access or disclosure. We may update this notice when our services, forms or technologies change. The current version and its effective date will always be published on this website.