VIVA SPORTS

Privacy & Cookie Policy

 

Effective date: 28 April 2026 | Version 1.1

 

This Privacy & Cookie Policy explains how Viva Sports collects, uses, and protects your personal data. It applies to all visitors and participants who use our website (vivasports.cz), register for leagues or events through our player portal (powered by SquadFusion), or interact with us through any digital channel. Please read it carefully.

​

 

1. DATA CONTROLLER

 

The entity responsible for your personal data under this Policy is:

 

Legal name: Viva Play Prague s.r.o.

Trading as: Viva Sports

IČO (Company reg. no.): 21972133

Registered address: Varšavská 715/36, Vinohrady (Praha 2), 120 00 Praha, Czech Republic

Website: vivasports.cz

Email: info@vivasports.cz

 

For all privacy-related enquiries or to exercise your rights, contact us at info@vivasports.cz. We aim to respond within 30 days as required by Article 12 GDPR.

​

 

2. LEGAL FRAMEWORK

 

This Policy is governed by and designed to be compliant with:

 

- EU General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679

- Czech Act No. 110/2019 Coll. on Personal Data Processing (Zákon o zpracování osobních údajů)

- Czech Act No. 127/2005 Coll. on Electronic Communications, Section 89 (cookie consent rules)

- EU ePrivacy Directive 2002/58/EC and its amendments

- Czech Act No. 480/2004 Coll. on Certain Information Society Services

- Czech Act No. 563/1991 Coll. on Accounting (data retention obligations)

​

 

3. PERSONAL DATA WE COLLECT

 

3.1 Data you provide directly

 

- Full name and contact details (email address, phone number)

- Date of birth (required to verify you are 18 or over for league eligibility)

- T-shirt size and colour preference (for league kit allocation)

- Sport preferences and skill level indicated during registration

- Payment and billing details — processed entirely by Stripe; we do not store card data

- Communications you send us including enquiries, feedback, and support requests

- Photos and videos taken or submitted at events (only with your explicit consent — see Section 12)

 

3.2 Data collected automatically

 

- IP address and device identifiers when visiting vivasports.cz

- Browser type, operating system, and screen resolution

- Pages visited, session duration, referral source, and clickstream data via Google Analytics

- Cookie identifiers and tracking pixels (see Section 7 for full detail)

- Location data at city or region level, derived from IP address

 

3.3 Data collected via SquadFusion player portal

 

When you register through our player portal at playerportal-vivasports.squadfusion.com, your registration, payment, schedule, and league activity data is collected and processed by SquadFusion, Inc. on our behalf. This includes name, email, phone number, date of birth, mailing address, and payment confirmation. See Section 5 for full details on SquadFusion's role as a data processor.

 

3.4 Data from third parties

 

- Social media interaction data if you engage with our Facebook, Instagram, TikTok, or LinkedIn pages

- Advertising engagement data from Meta Pixel and Meta Conversions API (CAPI)

- Analytics data from Google Analytics

​

 

4. LEGAL BASES AND PURPOSES OF PROCESSING

 

Performance of a Contract (Art. 6(1)(b) GDPR)

 

- Processing your registration and placing you in a league, open play session, tournament, or event

- Managing payments and issuing booking confirmations via SquadFusion and Stripe

- Communicating essential information about your participation, schedule changes, and forfeits

- Allocating league kits and managing substitute player requests

 

Legitimate Interests (Art. 6(1)(f) GDPR)

 

- Improving the quality and performance of our website, portal, and services

- Fraud prevention, account security, and protection of other participants

- Internal analytics and reporting to optimise scheduling, pricing, and event structure

 

You have the right to object to processing based on legitimate interests at any time. See Section 9.

 

Consent (Art. 6(1)(a) GDPR)

 

- Sending marketing emails, newsletters, and promotional communications

- Placing non-essential cookies and tracking technologies on your device (see Section 7)

- Targeted advertising via Meta and Google platforms

- Capturing and publishing your image or video from events on social media

 

Consent is freely given, specific, informed, and unambiguous. You may withdraw it at any time without affecting the lawfulness of prior processing.

 

Legal Obligation (Art. 6(1)(c) GDPR)

 

- Compliance with Czech tax, accounting, and regulatory requirements including Act No. 563/1991 Coll.

- Responding to lawful requests from authorities or courts

​

 

5. DATA SHARING AND PROCESSORS

 

We do not sell your personal data. We share it only where necessary with the following service providers.

 

5.1 Service Providers (Data Processors)

 

SquadFusion Inc.

Location: USA (San Ramon, CA)

Purpose: Player portal, league registration, scheduling, roster management, confirmation emails, and payment processing coordination.

Privacy policy: squadfusion.com/privacy

 

Stripe Inc.

Location: USA / EU infrastructure

Purpose: Secure payment processing. Neither Viva Sports nor SquadFusion stores your card data. Stripe handles all card transactions.

Privacy policy: stripe.com/privacy

 

Google LLC (Workspace)

Location: USA / EU SCCs

Purpose: Internal email communications and operational coordination.

Privacy policy: policies.google.com

 

Wix.com Ltd.

Location: Israel / EU SCCs

Purpose: Public website hosting at vivasports.cz, embedded forms, and landing pages.

Privacy policy: wix.com/about/privacy

 

Usercentrics GmbH

Location: Germany (EU)

Purpose: Cookie consent management. Records and stores your consent preferences.

Privacy policy: usercentrics.com/privacy

 

Meta Platforms Inc.

Location: USA / EU SCCs

Purpose: Meta Pixel and Conversions API for ad performance tracking and retargeting on Facebook and Instagram.

Privacy policy: facebook.com/privacy

 

Google LLC (Analytics & Maps)

Location: USA / EU SCCs

Purpose: Google Analytics for website usage analytics. Google Maps for embedded venue maps.

Privacy policy: policies.google.com

 

YouTube (Google LLC)

Location: USA / EU SCCs

Purpose: Embedded video content on the website.

Privacy policy: policies.google.com

 

Note on SquadFusion: The player portal at playerportal-vivasports.squadfusion.com is powered by SquadFusion Inc. software and is owned and subject to the Viva Sports privacy policy and terms of use. SquadFusion acts as a data processor on behalf of Viva Sports (the data controller). When you create an account on the portal, SquadFusion's own Privacy Policy (squadfusion.com/privacy) and Terms of Use (squadfusion.com/tou) also apply to their platform. You are encouraged to read both.

 

5.2 Other Disclosures

 

- Competent authorities, courts, or regulators: where required by Czech or EU law, or to protect our legal rights

- Potential acquirers or investors: in connection with a business sale or merger, subject to confidentiality obligations and GDPR requirements

 

We require all data processors to implement appropriate technical and organisational security measures and to process personal data only on our documented instructions, in accordance with Art. 28 GDPR.

​

 

6. INTERNATIONAL TRANSFERS

 

Several of our service providers, including SquadFusion Inc. and Stripe Inc., are based in the United States. When personal data is transferred outside the European Economic Area (EEA), we ensure an adequate level of protection through one or more of the following safeguards:

 

- EU Standard Contractual Clauses (SCCs) approved by the European Commission (Decision 2021/914)

- An adequacy decision by the European Commission (where applicable)

- Supplementary technical measures where required

 

Note on SquadFusion: SquadFusion Inc. is a US-based processor that stores data on US servers. We have engaged with SquadFusion to ensure that an appropriate Data Processing Agreement (DPA) and transfer mechanism is in place. If you wish to obtain a copy of the applicable transfer safeguards, please contact us at info@vivasports.cz.

​

 

7. COOKIES AND TRACKING TECHNOLOGIES

 

7.1 What are cookies?

 

Cookies are small text files stored on your device when you visit a website. They allow the site to recognise your browser and store preferences and usage data. We also use related technologies such as pixels, server-side event matching, and tracking scripts.

 

7.2 Cookie inventory

 

Strictly necessary cookies

Provider: Viva Sports / Wix

Category: Essential

Purpose: Core website functionality, security, and navigation. Cannot be declined.

Retention: Session

 

Usercentrics (UC_*)

Provider: Usercentrics GmbH

Category: Essential

Purpose: Stores your cookie consent choices so we do not re-ask on every visit.

Retention: Up to 12 months

 

Wix (_wix_* / fedops)

Provider: Wix.com

Category: Functional

Purpose: Supports website performance, embedded forms, and Wix infrastructure.

Retention: Session to 12 months

 

Google Analytics (_ga, _gid, _gat)

Provider: Google LLC

Category: Analytics

Purpose: Measures traffic, page views, and user behaviour to improve the site.

Retention: Up to 26 months

 

Google Maps embed

Provider: Google LLC

Category: Functional

Purpose: Loads interactive venue maps. Google may set additional cookies.

Retention: Session / varies

 

YouTube embed

Provider: Google LLC

Category: Functional / Marketing

Purpose: Enables embedded video content. May set cookies to track views.

Retention: Session / varies

 

Meta Pixel (_fbp, _fbc)

Provider: Meta Platforms

Category: Marketing

Purpose: Tracks page views and events for ad conversion measurement.

Retention: Up to 90 days

 

Meta Conversions API (CAPI)

Provider: Meta Platforms

Category: Marketing

Purpose: Server-side event matching for ad attribution. No browser cookie is set. Improves accuracy while reducing reliance on browser tracking.

Retention: N/A (server-side)

 

SquadFusion player portal

Provider: SquadFusion Inc.

Category: Functional / Essential

Purpose: Session management and authentication on the player portal. Required for portal functionality.

Retention: Session / varies

 

7.3 Managing your consent

 

When you first visit vivasports.cz, our Usercentrics consent banner will ask for your preferences. You can accept all, reject non-essential, or customise by category. You may change or withdraw your consent at any time via the cookie settings link in our website footer.

 

Withdrawing consent does not affect the lawfulness of any processing that occurred before withdrawal. You can also manage or delete cookies through your browser settings, though this may affect site functionality.

​

 

8. DATA RETENTION

 

Registration and event records: 3 years after last active participation

Payment records and invoices: 10 years (Czech Accounting Act No. 563/1991 Coll.)

Marketing consent and communication records: Duration of consent + 1 year after withdrawal

Website analytics data (Google Analytics): Up to 26 months

Cookie consent logs (Usercentrics): Up to 12 months

Support and enquiry correspondence: 2 years from last communication

Event photos and videos (with consent): Until you withdraw consent or request removal

SquadFusion player account data: As per SquadFusion's retention policy; account closure requests to info@vivasports.cz

​

 

9. YOUR RIGHTS UNDER GDPR

 

As a data subject, you have the following rights under EU and Czech data protection law. Contact us at info@vivasports.cz to exercise any of them. We will respond within 30 days.

 

Right of Access (Art. 15)

Request a copy of all personal data we hold about you, plus information on how it is being processed.

 

Right to Rectification (Art. 16)

Request correction of inaccurate or incomplete data without undue delay.

 

Right to Erasure (Art. 17)

Request deletion of your data where it is no longer needed, where you withdraw consent, or where processing was unlawful. This right is limited where we have a legal retention obligation.

 

Right to Restriction of Processing (Art. 18)

Request that we limit processing of your data — for example while a rectification request is being resolved.

 

Right to Data Portability (Art. 20)

Where processing is based on consent or contract, request your data in a structured, commonly used, machine-readable format.

 

Right to Object (Art. 21)

Object at any time to processing based on legitimate interests or to direct marketing. We will cease processing unless we demonstrate compelling legitimate grounds.

 

Right to Withdraw Consent (Art. 7(3))

Where processing is consent-based, withdraw at any time. This does not affect prior lawful processing.

 

Right to Lodge a Complaint

If you believe we are in breach of GDPR, you have the right to complain to the Czech supervisory authority:

 

Authority: Úřad pro ochranu osobních údajů (ÚOOÚ)

English name: Office for Personal Data Protection

Address: Pplk. Sochora 27, 170 00 Praha 7, Czech Republic

Website: uoou.cz

Email: posta@uoou.cz

Phone: +420 234 665 111

 

We encourage you to contact us first so we can try to resolve your concern directly.

​

10. DATA SECURITY

 

We implement appropriate technical and organisational measures to protect your personal data. These include:

 

- HTTPS encryption across vivasports.cz

- Stripe-managed PCI-DSS compliant payment processing — no card data is stored by Viva Sports or SquadFusion

- Access controls limiting data access to authorised Viva Sports personnel only

- Regular review of data processor security standards

- Server-side event matching via Meta CAPI as a privacy-enhanced alternative to browser-only ad tracking

 

In the event of a personal data breach posing a risk to your rights and freedoms, we will notify the ÚOOÚ within 72 hours and, where required, affected individuals without undue delay, in accordance with Art. 33 and 34 GDPR.

​

 

11. CHILDREN'S DATA

 

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly. If you believe a minor has submitted personal data to us, please contact info@vivasports.cz immediately.

​

 

12. PHOTOGRAPHY, VIDEO, AND SOCIAL MEDIA

 

We may photograph or film events for use on our social media channels, website, and promotional materials. At events, our staff will ask for your explicit consent before capturing or publishing any content featuring you.

 

- If you consent, content may be shared on Instagram, TikTok, Facebook, LinkedIn, and vivasports.cz

- If you decline, we will not photograph, film, or publish any content in which you are identifiable

- You may withdraw consent for previously published content at any time by contacting info@vivasports.cz and we will remove it as soon as reasonably practicable

 

Consent for event photography is separate from consent for marketing emails and cookie tracking.

​

 

13. MARKETING COMMUNICATIONS

 

We will only send you promotional emails, event announcements, or newsletters if you have given us explicit consent. Every marketing communication includes a clear unsubscribe link. You may also opt out at any time by emailing info@vivasports.cz.

 

We use Google Workspace (Gmail) for direct communications and operational emails. We do not sell or rent your contact details to third parties for any marketing purposes.

​

 

14. REFUND POLICY REFERENCE

 

Our full refund and cancellation terms are set out in our Terms & Conditions and Rules & Policies page at vivasports.cz/faqs. Key principles:

 

- Sport leagues: full refund if withdrawal is more than one week before the league start date; credit only if withdrawal is within one week

- Open play, training sessions, and one-day events: credit issued for cancellations made at least 24 hours in advance

- No refunds for personal circumstances, injury, or relocation once registration is confirmed

- If a league is cancelled by Viva Sports, you may transfer to another league or receive credit

 

To initiate a cancellation, contact info@vivasports.cz.

​

15. THIRD-PARTY LINKS

 

Our website and player portal may contain links to third-party websites, including social media platforms, event partners, and SquadFusion's own pages. We are not responsible for the privacy practices of those sites. We encourage you to read their policies before submitting any personal data.

​

 

16. CHANGES TO THIS POLICY

 

We may update this Policy to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting the updated policy on vivasports.cz with a revised effective date and by notifying registered users where the change significantly affects how we process your data.

 

Your continued use of our website or services after the effective date constitutes acceptance of the updated policy.

​

 

17. CONTACT US

 

For any questions, requests, or concerns regarding this policy or your personal data:

 

Legal entity: Viva Play Prague s.r.o.

IČO: 21972133

Address: Varšavská 715/36, Vinohrady (Praha 2), 120 00 Praha, Czech Republic

Email: info@vivasports.cz

Website: vivasports.cz

​

Viva Play Prague s.r.o. (trading as Viva Sports) | IČO 21972133

Privacy & Cookie Policy v1.1 | Effective 28 April 2026

vivasports.cz | info@vivasports.cz