Privacy Policy
Privacy Policy
Last updated: 21 October 2026
This Privacy Policy explains how CLIMBIA collects and processes personal data in connection with the website, coaching applications, athlete assessments, video analysis, coaching services, communications and payments.
1. Data controller
The data controller is:
CZAKÓ LÁSZLÓ PÉTER, trading as CLIMBIA
Registered address: 1085 Budapest, VIII., Jozsef krt 71 73
Registration number: 58920354
Tax / VAT number: 48911290-1-42
Email: info@climbia.hu
Website: https://climbia.org
2. What personal data is processed
Depending on how you interact with CLIMBIA, the following data may be processed:
- name and contact details;
- age or date of birth;
- country and time zone;
- climbing history, experience and competition background;
- goals, training availability and training environment;
- assessment and monitoring responses;
- submitted climbing videos, images and video links;
- coaching notes, movement-analysis observations and training records;
- communications relating to coaching;
- parent or guardian information where the athlete is a minor;
- payment and transaction information;
- invoicing information;
- technical information generated when using the website or online services.
Only data reasonably necessary for the relevant purpose is requested.
3. Coaching applications
Information submitted through the CLIMBIA Online Coaching Application is used to:
- understand the applicant’s goals and background;
- assess whether CLIMBIA coaching is suitable;
- recommend an appropriate coaching option;
- communicate with the applicant before a coaching relationship begins.
The legal basis is taking steps at the applicant’s request before entering into a contract and, where applicable, the performance of a contract.
Submitting an application does not guarantee acceptance into coaching.
Applications that do not result in a coaching relationship are normally deleted or anonymised within 6 months after the last relevant communication, unless a longer period is necessary for a legal claim or the applicant separately asks to remain in contact.
4. Athlete assessment and coaching records
For accepted clients, CLIMBIA may process information provided through athlete assessments, monitoring forms, training plans, video analysis and coaching communications.
These data are used to:
- assess the athlete’s current profile;
- identify relevant training priorities;
- prepare and adjust training;
- analyse movement and climbing performance;
- monitor training and recovery;
- prepare for competitions or climbing goals;
- provide the agreed coaching service.
The main legal basis is performance of the coaching contract.
Coaching records are normally retained for the duration of the coaching relationship and for up to 12 months after it ends, unless a longer period is necessary to establish, exercise or defend legal claims or is required by law.
5. Health and injury information
Information concerning injuries, pain, medical conditions, recovery or other health-related matters may constitute special-category personal data under the GDPR.
CLIMBIA only requests health-related information where it is relevant to safe and appropriate coaching.
Where such information is processed on the basis of consent, CLIMBIA relies on the athlete’s explicit consent under Article 9(2)(a) GDPR.
Providing health information is voluntary. However, if information relevant to safe training is not provided, CLIMBIA may be unable to provide or continue certain coaching services safely.
Consent may be withdrawn at any time. Withdrawal does not affect processing that was lawful before withdrawal.
CLIMBIA does not provide medical diagnosis or medical treatment.
6. Climbing videos and images
Clients may submit climbing videos, photographs or links for movement and performance analysis.
These materials are used only for the agreed coaching purpose unless separate permission is obtained for another use.
Client videos or photographs will not be published on the CLIMBIA website, social media or promotional materials without separate permission.
7. Athletes under 18
For athletes under 18, CLIMBIA requires involvement of a parent or legal guardian in the application and contracting process.
Where consent is required for processing personal data of an athlete under the applicable age threshold, the consent must be provided or authorised by the parent or legal guardian.
For athletes under 16, parent or guardian authorisation is required for consent-based processing falling within Article 8 GDPR.
CLIMBIA may take reasonable steps to verify parental or guardian authorisation.
8. Payments and invoices
Payments may be processed through Stripe or another payment provider identified at the time of payment.
CLIMBIA does not normally receive or store full payment-card details. Payment providers process payment information according to their own legal and privacy obligations.
Payment-related information is processed to:
- perform the coaching contract;
- confirm payments;
- administer subscriptions where applicable;
- prevent fraud;
- comply with accounting and tax obligations.
Invoices and legally required accounting records are retained for the period required by applicable Hungarian tax and accounting law.
9. Service providers and recipients
CLIMBIA uses third-party services where necessary to operate the coaching service.
These may include:
Google services may be used for:
- Google Forms;
- Google Sheets;
- Google Drive;
- email and communication;
- storage of coaching and assessment information.
Google processes data under its applicable business and data-protection terms.
Stripe
Stripe may process payment and transaction information.
Depending on the processing activity, Stripe may act as a processor or as an independent data controller.
Website hosting
Website-related data may be processed by:
[HOSTING PROVIDER LEGAL NAME AND DETAILS]
Accounting / invoicing
Where an accountant or invoicing provider is used, information necessary for invoicing, accounting and tax compliance may be disclosed to that provider.
CLIMBIA does not sell personal data.
10. International data transfers
Some technology providers used by CLIMBIA may process data outside the European Economic Area.
Where personal data is transferred internationally, the relevant provider is required to use a lawful transfer mechanism where required, such as:
- an adequacy decision;
- the EU–US Data Privacy Framework where applicable; or
- European Commission Standard Contractual Clauses.
11. Legal obligations and legitimate interests
In addition to contractual processing, personal data may be processed where necessary to:
- comply with legal, tax or accounting obligations;
- protect the security of systems and accounts;
- prevent abuse or fraud;
- establish, exercise or defend legal claims.
Where legitimate interests are relied upon, CLIMBIA considers the impact on the individual’s rights and interests.
12. Data security
CLIMBIA takes reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure.
Access to coaching records is limited to persons who require access for the relevant service or legal purpose.
Clients are also responsible for using secure accounts and for avoiding unnecessary disclosure of sensitive information through insecure communication channels.
13. Your data-protection rights
Subject to the conditions of the GDPR, you may request:
- access to your personal data;
- correction of inaccurate personal data;
- deletion of personal data;
- restriction of processing;
- data portability;
- objection to processing based on legitimate interests;
- withdrawal of consent where processing is based on consent.
Requests may be submitted to:
[BUSINESS EMAIL ADDRESS]
CLIMBIA may need to verify identity before responding to a request.
14. Right to complain
You have the right to lodge a complaint with a data-protection supervisory authority.
In Hungary:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
1055 Budapest, Falk Miksa utca 9–11.
Website: naih.hu
You may also contact the supervisory authority in the EU/EEA country where you live or work.
15. Cookies and analytics
The website may use technical cookies that are necessary for basic operation.
CLIMBIA will not activate non-essential analytics, advertising or tracking technologies without providing any consent mechanism required by applicable law.
If analytics or marketing technologies are introduced later, this Privacy Policy and any cookie information will be updated accordingly.
16. Changes to this Privacy Policy
This Privacy Policy may be updated when CLIMBIA’s services, technology providers or legal obligations change.
The current version will always be published on the CLIMBIA website with the date of the latest update.
