General Data Protection Regulation Compliance
Jóga Harmonie is fully committed to complying with the General Data Protection Regulation (EU) 2016/679 (GDPR). This page outlines how we handle your personal data in accordance with these regulations.
The data controller responsible for your personal data is:
Jóga Harmonie
Vinohradská 48
Prague 2, 120 00
Czech Republic
Email: [email protected]
You have the right to obtain confirmation as to whether your personal data is being processed, and if so, access to that data along with information about how it is used.
You have the right to request correction of inaccurate personal data and completion of incomplete data.
Also known as the "right to be forgotten," you may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for its original purpose.
You may request that we limit how we use your data while we verify its accuracy or assess a complaint you have made.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You may object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not employ such automated decision-making processes.
To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month. This period may be extended by two further months for complex requests, in which case we will inform you of the extension.
We process personal data on the following legal bases:
We conduct data protection impact assessments when introducing new technologies or processing activities that may present high risks to individuals' rights and freedoms.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay when there is a high risk.
If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority. In the Czech Republic, this is:
Office for Personal Data Protection (ÚOOÚ)
Pplk. Sochora 27
170 00 Praha 7
Czech Republic
We primarily store and process data within the European Economic Area. Any transfers to third countries are conducted with appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.
We incorporate data protection principles into our business processes and systems from the outset, ensuring that personal data is processed with appropriate security measures and minimal collection.
We review and update this GDPR information periodically to reflect changes in our practices or applicable regulations. The date of the last update is indicated at the top of this page.