top of page

Privacy & Cookie Policy

Effective date: 11 August 2026 | Version 2.0
 

This Privacy & Cookie Policy explains how Viva Sports collects, uses, and protects your personal data. It applies to all visitors and participants who use our website (vivasports.cz), register for leagues or events through our player portal (powered by SquadFusion), purchase products through our E-Shop, or interact with us through any digital channel. Please read it carefully.
 

1. Data Controller

The entity responsible for your personal data under this Policy is:

  • Legal name: Viva Play Prague s.r.o.

  • Trading as: Viva Sports

  • Company ID (IČO): 21972133

  • Tax ID (DIČ): CZ21972133

  • Registered in the Commercial Register maintained by the Municipal Court in Prague (Městský soud v Praze), Section C, Insert 409217

  • Registered address: Varšavská 715/36, Vinohrady (Praha 2), 120 00 Praha, Czech Republic

  • Email: info@vivasports.cz
     

For all privacy-related enquiries or to exercise your rights, contact us at info@vivasports.cz. We aim to respond within 30 days as required by Article 12 GDPR.
 

2. Legal Framework

This Policy is governed by and designed to be compliant with:

  • EU General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679

  • Czech Act No. 110/2019 Coll. on Personal Data Processing (Zákon o zpracování osobních údajů)

  • Czech Act No. 127/2005 Coll. on Electronic Communications, Section 89 (cookie consent rules)

  • EU ePrivacy Directive 2002/58/EC, as amended by Directive 2009/136/EC

  • Czech Act No. 480/2004 Coll. on Certain Information Society Services

  • Czech Act No. 563/1991 Coll. on Accounting (data retention obligations)
     

3. Personal Data We Collect

3.1 Data you provide directly

  • Full name and contact details (email address, phone number)

  • Date of birth (required to verify you are 18 or over for league eligibility)

  • T-shirt size and colour preference (for league kit allocation)

  • Sport preferences and skill level indicated during registration

  • Payment and billing details — processed entirely by Stripe; we do not store card data

  • Delivery address, for orders placed through our E-Shop

  • Communications you send us including enquiries, feedback, and support requests

  • Photos and videos taken or submitted at events (only with your explicit consent — see Section 12)
     

3.2 Data collected automatically

  • IP address and device identifiers when visiting vivasports.cz

  • Browser type, operating system, and screen resolution

  • Pages visited, session duration, referral source, and clickstream data via Google Analytics

  • Cookie identifiers and tracking pixels (see Section 7 for full detail)

  • Location data at city or region level, derived from IP address
     

3.3 Data collected via SquadFusion player portal

When you register through our player portal at playerportal-vivasports.squadfusion.com, your registration, payment, schedule, and league activity data is collected and processed by SquadFusion, Inc. on our behalf. This includes name, email, phone number, date of birth, mailing address, and payment confirmation. See Section 5.1 for full details on SquadFusion’s role as a data processor.
 

3.4 Data from third parties

  • Social media interaction data if you engage with our Facebook, Instagram, TikTok, or LinkedIn pages

  • Advertising engagement data from Meta Pixel and Meta Conversions API (CAPI)

  • Analytics data from Google Analytics
     

4. Legal Bases and Purposes of Processing

Under Article 6 GDPR, we process your personal data on the following legal bases:


Performance of a Contract (Art. 6(1)(b) GDPR)

  • Processing your registration and placing you in a league, open play session, tournament, or event

  • Processing and fulfilling orders placed through our E-Shop, including delivery

  • Managing payments and issuing booking confirmations via SquadFusion and Stripe

  • Communicating essential information about your participation, schedule changes, and forfeits

  • Allocating league kits and managing substitute player requests


Legitimate Interests (Art. 6(1)(f) GDPR)

  • Improving the quality and performance of our website, portal, and services

  • Fraud prevention, account security, and protection of other participants

  • Internal analytics and reporting to optimise scheduling, pricing, and event structure


You have the right to object to processing based on legitimate interests at any time. See Section 9.


Consent (Art. 6(1)(a) GDPR)

  • Sending marketing emails, newsletters, and promotional communications

  • Placing non-essential cookies and tracking technologies on your device (see Section 7)

  • Targeted advertising via Meta and Google platforms

  • Capturing and publishing your image or video from events on social media


Consent is freely given, specific, informed, and unambiguous. You may withdraw it at any time without affecting the lawfulness of prior processing.


Legal Obligation (Art. 6(1)(c) GDPR)

  • Compliance with Czech tax, accounting, and regulatory requirements including Act No. 563/1991 Coll.

  • Responding to lawful requests from authorities or courts
     

5. Data Sharing and Processors

We do not sell your personal data. We share it only where necessary with the following categories of recipients.

 

5.1 Service Providers (Data Processors)
 

SquadFusion Inc. Location: USA (San Ramon, CA) Purpose: Player portal, league registration, scheduling, roster management, confirmation emails, payment processing coordination Link: squadfusion.com/privacy


Stripe Inc. Location: USA / EU infrastructure Purpose: Secure payment processing for leagues, events, and E-Shop orders. Neither Viva Sports nor SquadFusion stores your card data. Stripe handles all card transactions. Link: stripe.com/privacy


Delivery couriers Location: Czech Republic / EU Purpose: Delivery of physical products ordered through our E-Shop. The specific courier depends on the delivery option selected at checkout. Link: Provided at checkout


Google LLC (Workspace) Location: USA / EU SCCs Purpose: Internal email communications and operational coordination. Not used for bulk marketing. Link: policies.google.com


Wix.com Ltd. Location: Israel / EU SCCs Purpose: Public website hosting at vivasports.cz, embedded forms, and landing pages Link: wix.com/about/privacy


Usercentrics GmbH Location: Germany (EU) Purpose: Cookie consent management. Records and stores your consent preferences. Link: usercentrics.com/privacy


Meta Platforms Inc. Location: USA / EU SCCs Purpose: Meta Pixel and Conversions API for ad performance tracking and retargeting on
Facebook and Instagram Link: facebook.com/privacy


Google LLC (Analytics & Maps) Location: USA / EU SCCs Purpose: Google Analytics for website usage analytics. Google Maps for embedded venue maps. Link: policies.google.com


YouTube (Google LLC) Location: USA / EU SCCs Purpose: Embedded video content on the website Link: policies.google.com


Note on SquadFusion: The player portal at playerportal-vivasports.squadfusion.com is powered by SquadFusion Inc. software and is owned and subject to the Viva Sports privacy policy and terms of use. SquadFusion acts as a data processor on behalf of Viva Sports (the data controller). When you create an account on the portal, SquadFusion’s own Privacy Policy (squadfusion.com/privacy) and Terms of Use (squadfusion.com/tou) also apply to their platform. You are encouraged to read both.
 

5.2 Other Disclosures

  • Competent authorities, courts, or regulators: where required by Czech or EU law, or to protect our legal rights

  • Potential acquirers or investors: in connection with a business sale or merger, subject to confidentiality obligations and GDPR requirements
     

We require all data processors to implement appropriate technical and organisational security measures and to process personal data only on our documented instructions, in accordance with Art. 28 GDPR.
 

6. International Transfers

Several of our service providers, including SquadFusion Inc. and Stripe Inc., are based in the United States. When personal data is transferred to a country outside the European Economic Area (EEA), we ensure an adequate level of protection through one or more of the following safeguards:

  • EU Standard Contractual Clauses (SCCs) approved by the European Commission (Decision 2021/914)

  • An adequacy decision by the European Commission (where applicable)

  • Supplementary technical measures where required
     

Important note on SquadFusion: SquadFusion Inc. is a US-based processor that stores data on US servers. We have engaged with SquadFusion to ensure that an appropriate Data Processing Agreement (DPA) and transfer mechanism is in place. If you wish to obtain a copy of the applicable transfer safeguards, please contact us at info@vivasports.cz.
 

You can request details of the transfer safeguards we rely on for any specific processor by contacting info@vivasports.cz.
 

7. Cookies and Tracking Technologies

7.1 What are cookies?

Cookies are small text files stored on your device when you visit a website. They allow the site to recognise your browser and store preferences and usage data. We also use related technologies such as pixels, server-side event matching, and tracking scripts.


7.2 Cookie inventory

Strictly necessary (session) Provider: Viva Sports / Wix. Category: Essential. Purpose: Core website functionality, security, and navigation. Cannot be declined. Retention: Session


Usercentrics (UC_*) Provider: Usercentrics GmbH. Category: Essential. Purpose: Stores your cookie consent choices so we do not re-ask on every visit. Retention: Up to 12 months


_wix_* / fedops Provider: Wix.com. Category: Functional. Purpose: Supports website performance, embedded forms, and Wix infrastructure. Retention: Session to 12 months


_ga, _gid, _gat Provider: Google Analytics. Category: Analytics. Purpose: Measures traffic, page views, and user behaviour to improve the site. Retention: Up to 26 months


Google Maps embed Provider: Google LLC. Category: Functional. Purpose: Loads interactive venue maps. Google may set additional cookies. Retention: Session / varies


YouTube embed Provider: Google LLC. Category: Functional / Marketing. Purpose: Enables embedded video content. May set cookies to track views. Retention: Session / varies


Meta Pixel (_fbp, _fbc) Provider: Meta Platforms. Category: Marketing. Purpose: Tracks page views and events for ad conversion measurement. Retention: Up to 90 days


Meta Conversions API (CAPI) Provider: Meta Platforms. Category: Marketing. Purpose: Server-side event matching for ad attribution. No browser cookie is set. Retention: N/A (server-side)


SquadFusion player portal Provider: SquadFusion Inc. Category: Functional / Essential. Purpose: Session management and authentication on the player portal. Required for portal functionality. Retention: Session / varies


7.3 Managing your consent

When you first visit vivasports.cz, our Usercentrics consent banner will ask for your preferences. You can accept all, reject non-essential, or customise by category. You may change or withdraw your consent at any time via the cookie settings link in our website footer.

Withdrawing consent does not affect the lawfulness of any processing that occurred before withdrawal. You can also manage or delete cookies through your browser settings, though this may affect site functionality.
 

8. Data Retention

We retain personal data only as long as necessary for the stated purposes or as required by law.
 

  • League and event registration records: 3 years after last active participation

  • E-Shop order records: 3 years after order fulfilment

  • Payment records and invoices: 10 years (Czech Accounting Act No. 563/1991 Coll.)

  • Marketing consent and communication records: duration of consent plus 1 year for record keeping after withdrawal

  • Website analytics data (Google Analytics): up to 26 months (GA default)

  • Cookie consent logs (Usercentrics): up to 12 months

  • Support and enquiry correspondence: 2 years from last communication

  • Event photos and videos (with consent): until you withdraw consent or request removal

  • SquadFusion player account data: as per SquadFusion’s retention policy; account closure requests to info@vivasports.cz
     

9. Your Rights Under GDPR

As a data subject, you have the following rights under EU and Czech data protection law. Contact us at info@vivasports.cz to exercise any of them. We will respond within 30 days (extendable to 90 days for complex requests with prior notice).
 

Right of Access (Art. 15) — Request a copy of all personal data we hold about you, plus information on how it is being processed.


Right to Rectification (Art. 16) — Request correction of inaccurate or incomplete data without undue delay.


Right to Erasure (Art. 17) — Request deletion of your data where it is no longer needed, where you withdraw consent, or where processing was unlawful. This right is limited where we have a legal retention obligation.

 

Right to Restriction of Processing (Art. 18) — Request that we limit processing of your data, for example while a rectification request is being resolved.

 

Right to Data Portability (Art. 20) — Where processing is based on consent or contract, request your data in a structured, commonly used, machine-readable format.

 

Right to Object (Art. 21) — Object at any time to processing based on legitimate interests or to direct marketing. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

 

Right to Withdraw Consent (Art. 7(3)) — Where processing is consent-based, withdraw at any time. This does not affect prior lawful processing.

 

Right to Lodge a Complaint — If you believe we are in breach of GDPR, you have the right to complain to the Czech supervisory authority:
 

  • Authority: Úřad pro ochranu osobních údajů (ÚOOÚ), Office for Personal Data Protection

  • Address: Pplk. Sochora 27, 170 00 Praha 7, Czech Republic

  • Website: uoou.gov.cz

  • Email: posta@uoou.gov.cz

  • Phone: +420 234 665 111
     

We encourage you to contact us first so we can try to resolve your concern directly before escalating to the ÚOOÚ.
 

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data. These include:
 

  • HTTPS encryption across vivasports.cz

  • Stripe-managed PCI-DSS compliant payment processing — no card data is stored by Viva Sports or SquadFusion

  • Access controls limiting data access to authorised Viva Sports personnel only

  • Regular review of data processor security standards

  • Server-side event matching via Meta CAPI as a privacy-enhanced alternative to browser-only ad tracking
     

In the event of a personal data breach posing a risk to your rights and freedoms, we will notify the ÚOOÚ within 72 hours and, where required, affected individuals without undue delay, in accordance with Art. 33 and 34 GDPR.
 

11. Children’s Data

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly. If you believe a minor has submitted personal data to us, please contact info@vivasports.cz immediately.
 

12. Photography, Video, and Social Media

We may photograph or film events for use on our social media channels, website, and promotional materials. At events, our staff will ask for your explicit consent before capturing or publishing any content featuring you.
 

  • If you consent, content may be shared on Instagram, TikTok, Facebook, LinkedIn, and our website

  • If you decline, we will not photograph, film, or publish any content in which you are identifiable

  • You may withdraw consent for previously published content at any time by contacting info@vivasports.cz and we will remove it as soon as reasonably practicable
     

Consent for event photography is separate from consent for marketing emails and cookie tracking.
 

13. Marketing Communications

We will only send you promotional emails, event announcements, or newsletters if you have given us explicit consent. Every marketing communication includes a clear unsubscribe link. You may also opt out at any time by emailing info@vivasports.cz.

We use Google Workspace (Gmail) for direct communications and operational emails. We do not sell or rent your contact details to third parties for any marketing purposes.
 

14. Cancellation, Refund, and Returns Policy Reference

Personal data collected for registrations and E-Shop orders is also used to process cancellations, refunds, and returns. The applicable rules are set out in full elsewhere:
 

  • Leagues, open play, training sessions, tournaments, and events: see the Cancellation & Refund Policy in our Terms & Conditions, available at vivasports.cz.

  • Physical products and gift vouchers purchased through the E-Shop: see our E-Shop Terms & Conditions, available at vivasports.cz, which cover your right of withdrawal and your rights for faulty or incorrect items.
     

To initiate a cancellation, return, or complaint, contact info@vivasports.cz.

15. Third-Party Links

Our website and player portal may contain links to third-party websites, including social media platforms, event partners, and SquadFusion’s own pages. We are not responsible for the privacy practices of those sites. We encourage you to read their policies before submitting any personal data.
 

16. Changes to This Policy

We may update this Policy to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by:
 

  • Posting the updated policy on vivasports.cz with a revised effective date

  • Sending a notification to registered users where the change significantly affects how we process your data
     

Your continued use of our website or services after the effective date constitutes acceptance of the updated policy.

17. Contact Us

For any questions, requests, or concerns regarding this policy or your personal data:
 

  • Legal entity: Viva Play Prague s.r.o.

  • Company ID (IČO): 21972133

  • Tax ID (DIČ): CZ21972133

  • Commercial Register: Municipal Court in Prague, Section C, Insert 409217

  • Address: Varšavská 715/36, Vinohrady (Praha 2), 120 00 Praha, Czech Republic

  • Email: info@vivasports.cz

  • Website: vivasports.cz
     

Viva Play Prague s.r.o. (trading as Viva Sports) | IČO 21972133 |
Privacy & Cookie Policy v2.0 | Effective 11 August 2026

vivasports.cz | info@vivasports.cz

bottom of page