Who is the controller / service provider?
Mgr. Klára Bigasová
Namasté yoga studio, Masarykovo náměstí 69, 688 01 Uherský Brod
Company ID: 04614542
Contact details
If you wish to contact us at any time during the processing of your data, you can reach us on +420 775 607 710 or by email: studio namasteyoga cz.
We declare that as the controller of your personal data we meet the legal obligations required by current legislation, in particular the Personal Data Protection Act and the GDPR, which means that:
- we will process your personal data only on a valid legal basis, in particular legitimate interest, performance of a contract, legal obligation or granted consent,
- we fulfil the information obligation under Article 13 of the GDPR before starting to process personal data,
- we will enable and support you in exercising and fulfilling your rights under the Personal Data Protection Act and the GDPR.
Scope of personal data and purposes of processing
We process the personal data you entrust to us yourself, for the following reasons (to fulfil these purposes):
- Provision of services and performance of a contract. We need your personal data – first name and surname, address, date of birth, email and telephone – to perform the contract (e.g. a service contract).
- Bookkeeping. We need your personal data (billing details) in order to comply with our legal obligation to issue and record tax documents.
- Staying informed – newsletters. We use your personal data (email), what you click on in the emails and when you tend to open them, in order to send you information about events and courses at Studio Namasté. We only send newsletters on the basis of your consent, for a period of 10 years from the moment it is granted. You can withdraw this consent at any time by using the unsubscribe link in every email we send.
- Photos and video recordings from events. At some of our events we take photos or video. We use event photos in promotional materials, mainly on the website and social networks. Participant names never appear in this material, unless it is a reference and consent has been given. If you don't want to appear in the recordings, please let us know.
- Photos and video for promotional materials. We handle such material only on the basis of your consent.
We keep your personal data for the duration of the limitation periods, unless the law prescribes a longer retention period or we have stated otherwise in specific cases.
Security and protection of personal data
We protect personal data to the maximum extent possible using modern technologies that correspond to the current state of the art. We have adopted technical and organisational measures to prevent misuse, damage or destruction of your personal data.
Sharing personal data with third parties
Your personal data are accessed by us (the providers) and our collaborators, who are bound by confidentiality and trained in the security of personal data processing. To handle certain specific processing operations that we cannot perform ourselves, we use services and applications of processors that specialise in the given processing and comply with the GDPR.
These are the providers of the following platforms and services:
- MailChimp
We may decide in the future to use further applications or processors to make processing easier and better. However, we promise that when choosing them we will place at least the same security and processing quality requirements on the processor as on ourselves.
Transferring data outside the European Union
We process data exclusively within the European Union or in countries that ensure an adequate level of protection based on a European Commission decision.
Your rights regarding personal data protection
You have a number of rights in connection with the protection of personal data. If you wish to exercise any of these rights, please contact us by email: studio namasteyoga cz.
- Right to information, which is already fulfilled by this information page with the personal data processing policy.
- Right of access. You may ask us at any time and, within 30 days, we will document which of your personal data we process and why.
- Right to update and rectify personal data. If something in your details changes or you find your personal data outdated or incomplete.
- Right to restrict processing may be used if you believe we are processing inaccurate data about you, that our processing is unlawful but you do not wish to delete all the data, or if you have objected to the processing. You can restrict the scope of the personal data or the purposes of processing (e.g. by unsubscribing from the newsletter you restrict the processing purpose for commercial communications).
- Right to erasure (to be forgotten). In such a case we will erase all your personal data from our system. We need 30 days to secure the right to erasure. In some cases we are bound by a legal obligation, for example we must keep issued tax documents for a period set by law. In that case we will delete all personal data that are not bound by another law. We will inform you by email once the erasure is complete.
- Complaint to the Office for Personal Data Protection. If you feel we are not handling your data in accordance with the law, you have the right to lodge a complaint with the Office for Personal Data Protection at any time. We would be very grateful if you would first let us know about such suspicion, so that we can do something about it and correct any wrongdoing.
- Unsubscribing from newsletters and commercial communications. If you are our client or supporter, we send you emails with inspiration, articles or products and services on the basis of our legitimate interest. If you are not, we send them only on the basis of your consent. In both cases you can unsubscribe from our emails by pressing the unsubscribe link in every email we send.
Confidentiality
We assure you that our collaborators who will process your personal data are obliged to maintain confidentiality about the personal data and about the security measures whose disclosure would jeopardise the security of your personal data. This confidentiality continues even after our contractual relationships with us end. Without your consent your personal data will not be released to any other third party.
This personal data processing policy is effective as of 25 May 2018.
