Privacy Policy
1. GENERAL INFORMATION
The purpose of this section is to provide Clients with information about the processing of their personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (hereinafter referred to as the “GDPR”), and Czech Act No. 110/2019 Coll., on the Processing of Personal Data.
2. DATA CONTROLLER
Monika Lörinczová
Business Identification Number (IČO): 07153627
Registered address: Ke dvoru 858/33, Vokovice, 160 00 Prague 6, Czech Republic
Email: info@backtoyou.cz
Telephone: +420 776 849 480
(hereinafter referred to as the “Controller”).
3. CATEGORIES AND SOURCES OF PERSONAL DATA
The Controller may process, in particular, the following personal data:
a) first name and surname;
b) telephone number and email address;
c) information about booked and provided services, including their dates and prices;
d) payment information;
e) communications between the Client and the Controller;
f) information contained in complaints, claims or other submissions made by the Client;
g) technical data related to visits to the website.
The Controller obtains personal data primarily directly from the Client, particularly when booking a service, submitting a contact form, communicating with the Controller or receiving a service.
The Controller does not carry out automated individual decision-making or profiling.
4. PURPOSES AND LEGAL BASES OF PROCESSING
Personal data is processed for the following purposes:
a) receiving and managing bookings, communicating with the Client and providing services; the legal basis is taking steps prior to entering into a contract and performing the contract;
b) recording payments and fulfilling accounting, tax and other statutory obligations; the legal basis is compliance with the Controller’s legal obligations;
c) handling complaints and claims and protecting the legal rights of the Controller or the Client; the legal bases are performance of the contract, compliance with legal obligations and the Controller’s legitimate interest in protecting her legal rights;
d) ensuring the functionality, security and protection of the website; the legal basis is the Controller’s legitimate interest.
Providing basic identification and contact information is necessary for booking and properly delivering services. Without this information, it may not be possible to accept a booking or provide the requested service.
The Controller does not require consent to process personal data where processing is necessary for booking and providing services, complying with legal obligations or protecting legitimate interests.
If the Controller processes personal data for another purpose requiring consent, particularly for regularly sending marketing communications, separate, freely given consent will be obtained in advance.
5. HEALTH-RELATED INFORMATION
The Controller does not maintain medical records or systematically record Clients’ diagnoses or health conditions.
Information about limitations relevant to the safe provision of a service is generally communicated verbally by the Client immediately before the service begins. The Controller does not normally record this information.
Clients should not send medical reports, detailed diagnoses or other detailed health information by SMS, email or other electronic means.
If the Controller receives such information without prior agreement, she will not retain it in her records and will delete it without undue delay, unless its retention is necessary for the establishment, exercise or defence of legal claims.
6. RETENTION PERIODS
Personal data relating to bookings, the provision of services and communications with Clients will be retained for as long as necessary to fulfil the contract and subsequently, as a general rule, for three years from the date the service was provided or the booking was cancelled, for the purpose of protecting legal claims.
Personal data contained in accounting, tax and similar documents will be retained for the periods prescribed by applicable legislation.
Data relating to complaints or legal disputes may be retained for the duration of the relevant proceedings and subsequently for the applicable limitation periods or other statutory periods.
Data processed on the basis of consent will be retained no longer than until consent is withdrawn or the period specified when consent was given expires, unless another legal basis justifies further processing.
7. RECIPIENTS OF PERSONAL DATA
The following parties, in particular, may have access to personal data to the extent necessary:
a) accounting and tax service providers;
b) web hosting, website maintenance, email and cloud service providers;
c) banking and payment service providers;
d) legal or other professional advisers;
e) public authorities where disclosure is required by law.
Personal data is not sold or disclosed to other parties without a lawful basis.
The Controller does not transfer personal data to third countries outside the European Economic Area or to international organisations.
8. CLIENT RIGHTS
Subject to the conditions set out in the GDPR, the Client has, in particular, the right to:
a) request information about whether and which personal data the Controller processes;
b) access their personal data;
c) request the correction or completion of inaccurate or incomplete data;
d) request the erasure of personal data where there is no longer a legal basis for its continued processing;
e) request the restriction of processing;
f) data portability, where the statutory conditions are met;
g) object to processing based on legitimate interests;
h) withdraw consent at any time where processing is based on consent;
i) lodge a complaint with the Czech Office for Personal Data Protection.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Clients may exercise their rights by contacting the Controller via email or in writing at the Controller’s registered address. Before responding to a request, the Controller may take reasonable steps to verify the identity of the person making it.
9. SUPERVISORY AUTHORITY
Office for Personal Data Protection
(Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
Telephone: +420 234 665 111
Email: posta@uoou.cz
Website: www.uoou.cz
10. COOKIES
The website may use technical cookies necessary for its proper, secure and functional operation.
Analytics, preference or marketing cookies will only be used with the visitor’s consent where such consent is required by applicable law.
Detailed information about the specific cookies and tools used is available in the cookie settings on the website.
