Last updated: October 6, 2026
1. Who the controller is and what this notice covers
The controller is ARENA Centrum s.r.o., Company ID 06753051, registered office at Palackého 717/11, 110 00 Prague 1. We run measurements under the MojeInBody brand at ARENA GYM Centrum and ARENA GYM Jinonice. For anything about personal data, write to info@mojeinbody.cz or call reception at +420 228 225 751.
This notice explains how we handle data:
- when you visit the MojeInBody.cz website,
- when you write to us or send an inquiry,
- when you get measured at our location,
- when you buy measurements, packages and gift vouchers.
The online account with your measurement history is run by BodyData s.r.o. as a separate controller. How BodyData handles your account, results in the portal, sharing, the AI report, export and account deletion is described in the BodyData privacy policy.
2. Visiting the website
We use technical cookies the website needs to work: your language choice and your choice in the cookie bar (up to 12 months).
For analytics and marketing measurement we use Google Tag Manager in consent mode. In the EEA, United Kingdom and Switzerland, analytics and marketing cookies are set only after you allow them in the cookie bar. Elsewhere, basic analytics is enabled by default; choosing “Essential only” disables it. Advertising and personalisation cookies require consent. You can change your choice at any time via Cookie settings in the website footer.
We store your light or dark appearance choice in your browser’s local storage so it persists on your next visit; you can remove it by clearing website data in your browser.
We measure website traffic with our own tool running on our infrastructure. It sets no cookies and does not identify individual visitors.
3. Questions and inquiries
When you email us, call us or fill in an inquiry form (for example for companies, trainers or groups), we process the details you give us: name, email, phone, company, preferred location, group size and your message.
We use this data only to answer your inquiry and arrange follow-up. The legal basis is steps prior to a contract or our legitimate interest in replying to you. We keep the correspondence as long as needed to handle the inquiry and follow-up, or longer if it leads to a contract or is needed to protect legal claims.
4. Measurement at our location
For a measurement we need the details the device requires for its calculation: mainly sex, age or date of birth and height, and for some devices a measurement identifier. Measurement results, such as body composition, grip strength, blood pressure or heart-rate variability, are health data.
We use the data to carry out the measurement, give you the results and help you interpret them. We process the results with your explicit consent.
If you have a BodyData account or link the measurement to it, the result is transferred to your account. From then on BodyData handles it under its own policy. As the measurement location, we see measurements taken with us; we have no access to measurements from other locations.
We retain results for as long as needed to deliver and explain the measurement and keep its history within the scope of your consent. We determine that period by the processing purpose, duration of consent and your erasure request; history in a BodyData account follows the period stated in its policy. Raw device-transfer data has a 60-day retention period in the system. Withdrawing consent or erasing results does not remove the statutory obligation to retain accounting records.
5. Purchases, payments and gift vouchers
When you buy a measurement, package or gift voucher, we process the data needed to conclude and perform the contract: the buyer's email, ordered items, price, payment status, variable symbol, voucher code and tax receipt. If you enter an email address for delivering a voucher, we use it only for that delivery; you are responsible for its owner expecting it.
The legal basis is performance of a contract and, for accounting and tax records, a legal obligation. We keep these records for the period required by accounting and tax law.
We accept bank transfers and card payments at the location.
6. Who can access the data
- our staff handling measurements, purchases and inquiries,
- BodyData as the operator of our measurement, sales and voucher system,
- hosting and email providers that keep the website running and deliver messages,
- banks and payment service providers when processing payments,
- web analytics and marketing providers under the settings described in section 2; the Google Tag Manager script may load even without cookie consent,
- public authorities where the law requires it.
We do not sell data or pass it to anyone for their own marketing.
7. Transfers outside the EU
Our main data storage is in the EU. Some email and analytics services may also process data outside the EU. In that case, we use GDPR safeguards: an adequacy decision or standard contractual clauses. You can request details and a copy of these safeguards at info@mojeinbody.cz.
8. Your rights
You have the right to access your data, correct it, have it erased, restrict processing and data portability. You can object to processing based on legitimate interest. You can withdraw consent at any time; withdrawal does not affect processing carried out before it.
Exercise your rights by emailing info@mojeinbody.cz or in person at reception. We handle requests within one month. Rights concerning data in your BodyData account are exercised directly in the portal or with BodyData.
If you believe we handle your data wrongly, you can lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
9. Security
We use technical and organisational measures appropriate to the risks: role-based access control, encrypted communication, access logs, regular updates and backups.