PROTECTION OF PERSONAL DATA ACCORDING TO GDPR

 

 

Dear yogis,

 

if you are my customer or visitor to my website or my services registration system, you are entrusting me with your personal data. I am responsible for their protection and security. Please familiarize yourself with the protection of personal data, the principles and rights you have in connection with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in connection with the processing of personal data and on the free movement of such data (hereinafter: " GDPR").

 

​

Personal data manager

MgA. Simony Hrušková, place of business Zahradní 712, 391 02, Sezimovo Ústí, ID number: 01961136, phone: +420 776241300, e-mail: simona.pear@gmail.com I operate the website www.simonahruskova.cz and the database of customers in the Wix system. .com. I process your personal data as an administrator, i.e. I determine how personal data will be processed and for what purpose, for how long and I select any other processors who will help me with the processing.

 31

Declaration

I declare that, as the administrator of your personal data, I fulfill all legal obligations required by applicable legislation, in particular the Personal Data Protection Act and the GDPR, and therefore that I will process your personal data only on the basis of a valid legal reason, namely legitimate interest, fulfillment of a contract, legal obligations or granted consent. According to Article 13 of the GDPR, I fulfill the obligation to provide information even before the processing of personal data begins.

 

​

Scope of personal data and processing purposes

I process personal data that you entrust to me for the following reasons (to fulfill these purposes):

• Provision of services, fulfillment of the contract Your personal data in the scope of name, surname, e-mail, telephone number and payment (debit/credit) card number are absolutely necessary to:

  • reservation for services provided (yoga lessons, masterclasses, workshops, yoga weekends),

  • making online payments and identifying purchased inputs to the services provided,

  • informing about possible changes in the schedule.

Personal data retention period

I keep your personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship and to assert claims from these contractual relationships (for a period of 10 years from the termination of the contractual relationship), unless the law provides for a longer period for them.

 

​

Security and protection of personal data GDPR

I protect your personal data to the maximum extent possible using modern technologies that correspond to the level of technical development. I have adopted and maintain all possible (currently known) technical and organizational measures that prevent misuse, damage or destruction of your personal data.

 

​

Transfer of personal data to third parties

Only my colleagues have access to your personal data. In order to ensure specific processing operations that I cannot ensure on my own (e.g. the studio reservation system, statistical data on the traffic of my websites), I use the services and applications of processors who can protect data even better than me and specialize in the given processing. They are the providers of the following platforms:

• the operator of the wix.com reservation system, to which you provide the data needed to activate the account for booking my services under the following conditions:

  • If a new client wants to register in the system, he will have to agree to the processing of personal data that I absolutely need for the provision of services, fulfillment of the contract (i.e. to make a reservation for the services provided, identify the purchased tickets for the services provided and inform about any changes in the schedule) , otherwise it won't get into the system.

• Google Inc.

• Facebook Inc.

It is possible that in the future I will decide to use other applications or processors to facilitate and improve the quality of processing, and in such a case, when choosing, I will place on the processor at least the same demands on security and quality of processing as on myself.

 

​

Transfer of data outside the European Union

All processing of personal data will be carried out in the territory of the EU. I do not intend to transfer personal data to a third country (a country outside the EU) or an international organization.

 

​

Your rights in connection with the protection of personal data

• The right to information, which is already fulfilled by this information page with the principles of personal data processing.

• The right of access, thanks to which you can challenge me at any time and I will provide you with proof within 14 days of what personal data I process and why.

• The right to supplement and change personal data if something changes about you or if you find your personal data out of date or incomplete.

• You can use the right to restrict processing if you believe that I am processing your inaccurate data, that I am processing it illegally, but you do not want to delete all data or if you have objected to the processing. You can limit the scope of personal data or processing purposes.

• You can use the right to portability, i.e. the transfer of your data to another administrator, if you would like to take your personal data and transfer it to another administrator, we will proceed in the same way as when using the right of access, with the only difference that I will send you the information in a typed in legible form within 30 days from the delivery of the request for the transfer of your data.

• You can use the right to erasure if you wish, you have the right to do so. In this case, I will delete all your personal data from my system and from the system of all sub-processors and backups. I need 14 days to secure the right to erasure. In some cases, I am bound by a legal obligation, e.g. I have to register issued invoices for a period specified by law. In this case, I will therefore delete all personal data that are not bound by this law. I will inform you by e-mail about the completion of the deletion.

• You can file a complaint with the Office for Personal Data Protection if you feel that I am not handling your data in accordance with the law, you have the right to contact the Office for Personal Data Protection with your complaint at any time. I would appreciate it if you would first inform me of this suspicion so that I can correct any errors.

​

 

Secrecy

I would like to assure you that I and my colleagues who will process your personal data are obliged to maintain confidentiality about personal data and security measures, the disclosure of which would endanger the security of your personal data. At the same time, this confidentiality continues even after the end of contractual relations with us. Without your consent, your personal data will not be released to any other third party.

  

These principles of personal data processing apply from 05/31/2021.