Principles of personal data processing

Business company Yoga concept sro, with its registered office at Jana Černého 545/48, Hradec Králové 503 41, IČ: 05345073, registered in the Commercial Register kept by the Regional Court in Hradec Králové, Section C, Insert 37635 (hereinafter the “Administrator”) hereby in accordance with Article 12 et seq. Regulation (EU) 2016/679 of the European Parliament and of the Council, effective from 25 May 2018, informs its customers about the processing of their personal data if they use their services.

 

Personal data

The administrator will process your following personal data:

• Name and surname,
• address,
• telephone number,
• e-mail,
• in the case of business persons, ID number, VAT number (hereinafter referred to as "personal data")

Purpose of processing

The purpose of personal data processing is to fulfill the legal obligations of the administrator arising from the content of the stipulation of the contract between you as the buyer and the administrator as the seller, and to fulfill the legal obligations of the administrator arising from generally binding legal regulations.

Recipiens of personal data

The personal data, processed for the fulfillment of obligations arising from special legal regulations, may be transferred by the controller in justified cases to law enforcement authorities. The administrator may also provide the personal data provided by you to the following entities:

Data transmission related to information systems management:
wpj s.r.o., CZ28860608
Crisp IM SARL, VAT: FR50833085806

The transfer of data related to the execution of the order, depending on the choice of payment method and transport, can take place with the following companies:
Balikobot, s.r.o., CZ06283799
Česká pošta, s.p., CZ47114983
DHL Express (Czech Republic) s.r.o., CZ25683446
General Logistics Systems Czech Republic s.r.o., CZ26087961 (if you use GLS transport)
Hifour s.r.o., CZ47537841 (if you use Balíkonoš service)
PPL CZ s.r.o., CZ25194798
ThePay.cz, s.r.o., CZ28135261

The transmission of data related to marketing services:
Facebook Ireland Limited, IE9692928F
Google Ireland Limited, IE6388047V
Heureka Shopping s.r.o., CZ02387727
Seznam.cz, a.s., CZ26168685
UAB "MailerLite", LT100007448516

The legal reason here is the fulfillment of obligations arising from the stipulated contract with the data subject and also the legitimate interests of the controller or a third party. Personal data belonging to the group of special categories of personal data are not transferred.

OBLIGATION TO PROVIDE PERSONAL DATA

It is necessary to provide personal data to the administrator in order to fulfill the rights and obligations arising from the content of the stipulated contract.

PROCESSING TIME

Personal data may be processed by the controller for the time necessary to fulfill the rights and obligations arising from the stipulated contract, or for the time strictly necessary to resolve disputes originating in the stipulated contract.

Customer rights:

The company Yoga concept s.r.o. informs its customers that they have the right to:

1. obtain confirmation from the Administrator whether the personal data concerning them have being processed and, if so, he have the right to access this personal data and the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients; if the personal data have been or will be disclosed, in particular to recipients in third countries or international organizations, the planned period for which the personal data will be stored or, if this cannot be determined, the criteria used to determine this period, the existence of a right to request rectification or deletion of personal data concerning the data subject or restriction of their processing and / or the right to lodge a complaint with the supervisory authority.
2. ask the Administrator to correct without undue delay inaccurate personal data concerning them. Taking into account the purposes of processing, they have the right to supplement incomplete personal data, including an additional statement.
3. ask the Administrator to deletes personal data concerning them without undue delay and the Administrator is obliged to delete personal data without undue delay if one of the following reasons is given: personal data are no longer needed for the purposes for which they were collected or processed, the customer revokes the consent and there is no other legal title for their processing, the personal data have been processed unlawfully, the personal data must be deleted in order to comply with a legal obligation of the Union or Member State, under which the administrator falls.
4. ask the Administrator to restrict the processing of their personal data, if they deny their accuracy for the period of verification of this fact by the Administrator, the processing is illegal, and the Administrator requests their limited processing instead of deletion, the data are no longer needed for the purpose of processing legal claims.
5. ask the Administrator to transfer their personal data to another administrator designated by them.
6. raise an objection by the Administrator of processing my personal data 
7. contact the Administrator or the Office for Personal Data Protectionin, in case of doubt, whether the personal data has been processed by the Administrator in the sense of the above-mentioned legal regulations

In Hradec Králové on 24.5.2018