Privacy policy

Meriton Spordiklubi / Meriton Hotels AS (hereinafter referred to as "us") highly appreciates the privacy of each of our customers ("you"). In this privacy statement, we'll explain what data we collect about you, why we do this and what we do with your data.

Who are we?

Meriton Spordiklubi is located at Toompuiestee 27/Paldiski Road 4, Tallinn
We implement the necessary technical, physical and organizational security measures to protect your personal information from loss, destruction, and unauthorized access.

If you have any questions regarding the information provided in the privacy statement, please contact us at info.meriton.tallinn@parkinn.com

What data do we collect about you and from whom do we receive it?

We collect the following data about you:

  • Personal data: such as your first and last name, date of birth, car number, photo
  • contact details: phone number, email address
  • security camera records - If you visit our premises for security reasons, video or other electronic or digital tracking systems or devices
  • exercise history
  • data about personal preferences: likes

As a general rule, we receive the data directly from you when you join our sports club, book a workout or request through our website or social media channels, phone or email, or you purchase services directly upon arrival.

Why do we need your data? What happens if you do not provide data?

We use your data to provide sports and/or other services ordered by you, as well as the obligations imposed on us by the laws regulating our activities, and for general business purposes, such as:

  • personal data - we need these data to identify you, which in turn is important to ensure that the service is provided to the person who actually ordered it
  • contact details - we need these details to contact you
  • data about personal preferences - if we ask for these data or if you choose to disclose such information to us, we will use them to provide you with a better service based on your wishes and interests

If you do not complete the registration card, we will not be able to issue you a loyalty card for the sports club and provide this service.

On what legal basis do we process your data?

The processing of your data can be based on the different legal basis:

  • the need to establish a contractual relationship with you or to comply with the agreement concluded with you
  • your consent - if we rely on your consent when processing the personal data, then you know that you have the right to withdraw your consent at any time
  • the need to exercise our legitimate interests, including corporate governance and the implementation of general business activities; detection of violations of law and fraud
  • the need to protect the vital interests of you or any other person (for example, by disclosing your data to an ambulance employee in the event of an accident)
  • another statutory basis

Who do we share your data with?

We will not share the data you entrusted to us, except in the limited cases described below, and if it is necessary for the purposes described in this privacy statement:

  • Our subsidiaries and related companies: we can share your personal data with our subsidiaries or related companies, all located in the European Union.
  • Service providers: like many other companies, we can order data processing services from trusted third-party service providers such as IT and consulting services;
  • Public authorities and government agencies: we can share data with authorities when we are legally required to share data or sharing of data is necessary to protect our rights;
  • Professional advisers etc.: we can share your information with professional advisers such as coaches, auditors, lawyers, accountants and other persons providing counseling services;
  • Third parties in relation to company transactions: From time to time, we may share your data with a third party in a framework of a corporate transaction, such as a sale of the company or part of it, to another company. Similarly, in the framework of the restructuring of a company, the creation of a joint venture, merger or otherwise transfer of assets or shares of the company.

In case we share your data with the above parties, we will ensure the protection of your data in our data-processing agreement between such persons and us.

We will not store or send your personal data outside the European Economic Area or countries for which there is no protection adequacy decision pursuant to Article 25 (6) of Directive 95/46 / EC or its successor document pursuant to Article 45 (1) of Regulation (EU) 2016/679.

How long will we store your data?

We will store your data for as long as it is needed to meet the various data processing objectives.

The company adheres to the following criteria for the storage of personal data:

  • as long as it is necessary to maintain personal data in order to provide services
  • if a person has a client account or a customer card at the company, we will store the personal data for the entire account/card activity period or for as long as they are necessary for the provision of the services to the person
  • if the company has a statutory, contractual or similar obligation to store the personal data of the person, then as long as it is necessary to fulfill such an obligation
  • after the termination of the contractual relationship, we retain certain data for as long as the person (data subject) or the company itself is entitled to submit claims against the other party under the agreement

For example, we will retain the registration card's data for 2 years from the filling in of the card. We will only store the credit card data until the proper fulfillment of our accommodation agreement.

If you have given us the consent to forwarding the direct marketing material, we will keep your contact information until you have withdrawn the consent.

What are your rights regarding your data?

You have the following rights as a data subject:

  • Right to access the data - You have the right to know what data is stored on you and how it is processed.
  • Right to correct the data - you have the right to request that your personal information is corrected if it is incorrect.
  • Right to data deletion ("right to be forgotten") - you have the right, in certain cases, to require that we erase your personal data (for example, if we no longer need it, if you withdraw the consent to the processing of the data given to us, etc.).
  • Right to restrict processing - You have the right, in certain cases, to prohibit or restrict the processing of your personal data for a specific period (for example, if you have filed an objection to the processing of data).
  • Right to object - in the light of a particular situation, you are entitled to object to the processing of your personal data when processing your data is based on our legitimate interest or in the public interest. Objections may be filed at any time for the processing of personal data for direct marketing purposes.
  • The right to transfer data - you have the right to require the transfer, in a machine-readable form, of the data provided by us to you. You can also request data transfer directly to another controller, but only if it is technically feasible. The transfer right applies only to the data that we process with your consent or to perform the contract with you.
  • Automatic decision-making (including profile analysis) - If we have informed you that we are performing automated processing (including profile analysis) that results in legal consequences for you or has a significant effect on you, then you may require that the decision is not made solely on the basis of automated processing.

If you have any questions regarding the information in the statement or you wish to submit an application for the rights of the data subject, please contact us at the e-post address info.meriton.tallinn@parkinn.com

We will do our best to address your requests and wishes in good time and free of charge, except in cases where this would be associated with a disproportionate cost. If you are not satisfied with the answer provided by us, you will be able to appeal to the Data Protection Inspectorate.