This document contains information regarding the processing of personal data in relation to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “GDPR Regulations”) and the provisions of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts (hereinafter referred to as the “Personal Data Protection Act”).

Pilco. s. r. o. with registered office at Námestie Oslobod3/A, 040 01 Košice, Slovak Republic, Company ID: 6 839 677 (hereinafter referred to as the “Controller”) processes personal data of natural persons for the purpose of cooperation with clients, in particular in the provision of Services, as well as in fulfilling other purposes listed below. When processing personal data, it follows the provisions of the GDPR Regulation and the provisions of the Personal Data Protection Act. In order to ensure the protection of the rights of data subjects, the controller has taken appropriate technical and organizational measures that declare the lawful processing of personal data. Furthermore, the operator has put in place a transparent system for recording security incidents and any questions from the data subject as well as other persons.

Individual information can also be obtained by the person concerned:

• by phone at: +421 910 409 410
• by email: hello@formery.studio
• personally at the address: Strojárenská 9, 040 01 Košice, Slovak Republic
• on the website of the operator: www.formery.studio

1. Operator
   
   1. The operator is pilco. s. r. o., with registered office: Námestie Oslobod3/A, 040 01 Košice, Slovak Republic, ID: 56 839 677, TIN: 2122461550, VAT ID: SK2122461550 and managing directors: Denisa Petrová and Michaela Zubárová.
   2. The Operator processes, in the course of its business activities, the personal data of its clients, potential clients, job seekers, employees, trainers/lecturers, trainers, associates and business partners (hereinafter referred to as “Data Subjects”), taking into account their best interests.
2. List of our processors and recipients who process your personal data
   
   1. When processing personal data by the Operator via the website www.formery.studio, when using the option to fill in the contact form/application form, when registering a user account or when sending marketing materials, your data is also processed by another entity that is in the position of intermediary or recipient:
      
      1. Stripe, Inc. - Stripe payment gateway
      2. www.websupport.sk - domain
      3. www.webflow.com - webhosting
3. Purpose of processing personal data
   
   1. As the Operator, we only collect from you the data that we really need to provide the full services. The purposes of the processing of personal data in the individual procedural steps are:
      
      1. When communicating with clients by phone, in person, in the form of electronic/paper mail or via the online contact form, we process data within the meaning of Art. 6 (1) (f) GDPR - of legitimate interest in order to respond to your enquiry/suggestion or question regarding the services provided and the products supplied, when it is necessary to verify the relevance of the request, or to carry out Subsequent contact with you as a data subject.
      2. In case of expression of interest in our services, when placing an order for services by phone, in person, in the form of electronic/paper mail or by subscribing to a group exercise through www.formery.studio, we process data in accordance with Art. 6 (1) (b) GDPR - where the processing of data is necessary to carry out the necessary measures according to your requirements as an ordering party before concluding the creation and confirmation of the order, i.e. during the process of the pre-contractual relationship - e.g. identification of the client during the creation, definition or modification of the order, determination or change the address and time of delivery, or the addition of other data necessary for the conclusion of the order.
      3. After confirmation of the order, i.e. after the establishment of a contractual relationship between the Operator and you as a data subject ordering party, in the necessary cooperative communication with the client, when informing about changes in the status of the order or when preparing and issuing a tax document (invoice), we process data in accordance with Art. 6 (1) (b) of the GDPR Regulation - where data processing is necessary for the fulfillment of the contractual relationship to which you, as the data subject, are a party to the contract.
      4. Through the website www.formery.studio you have the opportunity to voluntarily create and register a user account, through which it is possible to register for all group exercises, or register an email address as a subscriber of current information (newsletter), where we process data within the meaning of Art. 6 (1) (a) GDPR - on the basis of the granted consent to the processing by sending your personal data for the purpose of creating and maintaining a user account, or for the purpose of sending current news in the form of a newsletter to the provided email address.
      5. Posting photos and videos from the provided Services on the website ww.formery.studio and on the Operator's social networks, in accordance with Art. 6 (1) (a) GDPR - based on the granted consent to the processing of your personal data for the purpose of promoting the Services provided by the Operator and for marketing purposes of the Operator.
4. List of processed personal data
   
   1. These include, in particular, identification and contact details:
      
      1. necessary for registration of a user account - name and surname, email, phone number, personal access password,
      2. your experience with the lessons taken, lifestyle, health and other risks,
      3. personal and family history (if you start using our services),
      4. payment details (e.g. details of the amount paid or owed, account number, etc.),
      5. your likeness recorded in a photo or video or other audiovisual recording,
      6. your image temporarily recorded by the camera system in case you personally visit our Service,
      7. in the case of visiting our Website - IP address, web logs, cookies of the visitor to the Website.
5. Duration of processing and storage of your personal data
   
   1. Your personal data that we have processed or are processing within the meaning of Art. 6 (1) (b) GDPR - within the framework of the fulfillment of the obligations of the controller towards customers and clients, we further process in order to fulfill our legal obligations in the field of taxes and accounting, which we derive from generally binding legal regulations, we must keep for a specified period of time. by the relevant legislation. In any case, however, we are guided by the principle of minimizing the retention of personal data within the meaning of Art. 5 (1) (e) GDPR and therefore your personal data, which is not subject to archiving under special legislation, will be deleted or anonymized.
   2. Personal data processed in accordance with Art. 6 (1) (a) GDPR - based on your consent to the processing of personal data for the purpose of creating and maintaining a user account, or for the purpose of sending current marketing news, we process the data after 2 years or until the withdrawal of consent. As a user/client, you have the right to cancel your account at any time and delete the personal data entered. When you cancel an account, all personal information associated with the user account is permanently deleted from the information system. In the event of the end of the data processing period, we make contact by e-mail, when the consent to the processing of personal data for the defined purpose can be renewed and extended to the next processing period. If you do not give your consent for the renewal and extension of the purpose of processing, or if you do not respond to the contact made, we will no longer process your personal data - i.e. we will automatically delete the data from the register, we will technically delete the electronic data from the systems and physically shred.
   3. Personal data processed in accordance with Art. 6 (1) (f) GDPR - on the basis of a legitimate interest, which were obtained in response to your enquiry/suggestion or question regarding the services provided and the products supplied, when it was necessary to verify the relevance of the request, or to carry out possible subsequent contact of the client/data subject, were not subsequently transferred to the pre-contractual or contractual relationship shall be deleted without delay.
   4. As the Controller, we will ensure the erasure of personal data without undue delay after:
      
      1. all contractual relations between you and us as the controller have been terminated; and/or
      2. all your obligations to the controller have ceased; and/or
      3. all your claims and requests have been dealt with; and/or
      4. all other rights and obligations between you and us as the controller have been settled; and/or
      5. all the processing purposes provided for by law or the processing purposes for which you have given us consent have been fulfilled, if the processing was based on the consent of the data subject; and/or
      6. the period for which the consent was granted has expired or the person concerned has withdrawn his or her consent; and/or
      7. the data subject's request for the erasure of the personal data has been granted and any of the grounds justifying such request has been met; and/or
      8. a decisive legal fact has arisen for the termination of the purpose of the processing and at the same time the protective retention period defined with respect to the principle of minimizing the period of storage of personal data has expired and at the same time the legitimate interest of the controller does not last, all obligations established by generally binding legal regulations that require the storage of personal data of the data subject have ceased (in particular for archiving purposes), the exercise of tax audits, etc.), or which would not have been possible without their retention.
   5. In no case will we systematically process any personal data obtained accidentally for any purpose defined by us. If possible, we will inform the data subject whose personal data are incidentally collected about their accidental collection and, depending on the nature of the case, we will provide him with the necessary cooperation leading to the restoration of control over his or her personal data. Immediately after these necessary actions aimed at resolving the situation, all accidentally collected personal data will be disposed of without delay in a secure manner.
   6. If you would like further information about the specific period of storage of your personal data, please contact us using the contact details provided.
   7. Specifically for camera recordings:
   8. As a standard, we keep video recordings for 14 days from the time they are made. If an illegal act occurs in the monitored area, the Operator may contact the police authority and transfer the records in question to the competent authority (investigator, court, etc.) for the purpose of investigation. In this case, the deletion of the camera records does not occur after 14 days, but only after the legally terminated thing.
6. Disclosure of data
   
   1. The operator does not disclose the data obtained under any circumstances.
7. Transfer of personal data to third countries or international organisations
   
   1. The Operator carries out the transfer of personal data to third countries only if you have given your consent, for personal data published on social networks (Facebook, Instagram), on the YouTube Website or when sending a newsletter (news) by e-mail.
8. Rights and obligations of the data subject
   
   1. The customer is obliged to provide only complete and truthful data.
   2. The customer undertakes to update his data in the event of a change, at the latest before the execution of the first order following the change.
   3. The customer undertakes that if he provides personal data of a third party (name, surname, telephone number), he does so only with his consent and the person concerned is aware of the procedures, rights and obligations that are indicated on this page.
   4. As our client and data subject, you have the right to decide on the handling of your personal data to the extent specified. You can exercise the rights listed below in person at the operator's contact point: Strojárenská 9, 040 01 Košice, by phone on +421 910 410 410 or by e-mail: hello@formery.studio. We will try to respond to you as soon as possible, but we will always respond within 30 days of receiving your request.
   5. Applicable legislation and GDPR Regulation, respectively. In particular, the law provides you with:
      
      1. Right of access - You have the right to request confirmation from us as to whether your personal data is being processed and, if so, to obtain a copy of this data and additional information resulting from Art. 15 Regulations, respectively. § 21 of the Act. In the event that we collect a large amount of data about you, we may ask you to specify your request for the scope of the specific data we process about you.
      2. Right to rectification - In order to process only current personal data about you at all times, we need you to notify us of their change as soon as possible. In the event that we process incorrect data about you, you have the right to request their correction.
      3. Right to erasure - If the conditions of Article 14 of the Regulation are met, respectively. Section 23 of the Act, you may request deletion of your personal data. You can therefore request deletion, for example, if you have withdrawn your consent to the processing of personal data and there is no other legal basis for the processing, or if we process your personal data unlawfully, or the purpose for which we processed your personal data has disappeared and we do not process it for another compatible purpose. However, we will not delete your data if it is necessary for the establishment, exercise or defence of legal claims.
      4. Right to restriction of processing - If the conditions of Article 18 of the Regulation are met, respectively. § 24 of the Act, you may require us to restrict the processing of your personal data. You can therefore request a restriction, for example, if you object to the accuracy of the processed data or if the processing is unlawful and you do not want us to delete the data, but you need the processing to be restricted while you exercise your rights. We continue to process your data if there are grounds for establishing, exercising or defending legal claims.
      5. Right to portability - If the processing is based on your consent or is carried out for the purpose of performing a contract concluded with you and at the same time carried out by automated means, you have the right to receive from us your personal data that we have obtained from you in a commonly used machine-readable format. If you are interested in this and it is technically possible, we will transfer your personal data directly to another operator. This right cannot be applied to processing carried out for the performance of a task carried out in the public interest or in the exercise of public authority.
      6. Right to object to processing - If we process your personal data for the performance of a task carried out in the public interest or in the exercise of a public authority entrusted to us, or if the processing is carried out on the basis of our legitimate interests or the legitimate interests of a third party, you have the right to object to such processing. On the basis of your objection, we will restrict the processing of personal data and unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms or grounds for establishing, exercising or defending legal claims, we will no longer process the personal data and will delete your personal data. You have the right to object at any time to the processing of personal data for direct marketing purposes, including profiling to the extent that it is related to such direct marketing. If you object, we will no longer process your personal data for this purpose.
      7. Right to lodge a complaint - If you believe that the processing of your personal data is contrary to the Regulation, respectively. By law, you have the right to lodge a complaint with one of the competent supervisory authorities, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. For the territory of the Slovak Republic, the supervisory authority is the Office for Personal Data Protection, with registered office: Hraničná 4826/12, 820 07 Bratislava, Slovak Republic, web: www.dataprotection.gov.sk, tel.: +421 2 3231 3220.
      8. Right to withdraw consent - If the processing of your personal data is based on consent, you have the right to withdraw this consent at any time. The withdrawal of consent does not affect the processing already carried out. If at any time later you decide that you are interested in receiving commercial and marketing offers from us about our products and services, you can re-grant your revoked consent (or objection) at any time by any of the above forms of contact.
9. Expression of consent to the terms of personal data protection at the controller
   
   1. You agree to these terms by ticking consent by registering for a user account and confirming that you are familiar with the privacy terms and that you accept them in full.
   2. The operator is entitled to change these conditions. The new version of the Privacy Policy will be published on its Website and in the Service.

These Terms and Conditions shall take effect on 20.06.2025

‍