RULES OF PROTECTION OF PERSONAL DATA BY IYENGAR YOGA INSTITUTE PRAHA

May 2018

The protection of your personal data is taken very seriously.

Following changes in legal regulation relating to the protection of personal data, we set out below a list of basic principles, which we believe may be of interest to you. These contain information relating to which of your personal data we process, for what purpose, and which rights do you have in relation to such data.

We would also like to assure you, that technical and organizational measures are in place designed to ensure that your personal data is secure.

  1. IDENTITY OF THE ADMINISTRATOR

The administrator of the personal data is YOGAJOGA s.r.o. with its seat at Vodickova 15, Praha 1, Identification Number: 24257010, registered with the Municipal Court in Prague, section C, insert no. 198047 (the “Administrator”).

Recommended contact details are telephone +420 777 260 498, or e-mail: info@iy.yoga

  1. SUBJECT OF PROCESSING

The following personal data is processed:

  1. identification data (such as name, surname, date of birth etc.);
  2. contact data (such as address, telephone, email etc.);
  3. payment data (for staff salary payments etc);
  4. information relating to your financial credit;
  5. attendance records;
  6. data relating to the history of education;
  7. images;
  8. movements and acts in monitored areas (without audio recording); and 
  9. health data.
  1. REASON AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

Your personal data is processed for the following reasons and on the basis of the following legal rights:

  1. The provision of yoga lessons and workshops (further the “WS”) based on the fulfilment of the agreement entered into between you and us in relation to your registration or reservation or on the basis of our fulfilment of the request of your employer;
  2. The provision of yoga off-site events based on the fulfillment of the agreement entered into between you and us in relation to your registration;
  3. The provision of TTC/Mentoring courses, based on the fulfilment of the agreement entered into between you and us in relation to your registration for such course;
  4. The provision of adequate premises on the basis of our interest on ensuring safe and proper use of our premises;
  5. The provision of information on the balance on your client account, on the basis of the agreement entered into between you and us in relation to your registration;
  6. The payment for services provided on the basis of the agreement entered into between you and us in relation to your registration or on the basis of our interest in allowing payments by discount vouchers;
  7. The introduction of our company and support of its development – marketing on the basis of our interest in supporting our company and improving our services; in certain circumstances this will be on the basis of your specific consent;
  8. The administration of our assets on the basis of the agreement entered into between you and us in relation to the rental of our premises;
  9. The protection of assets and persons on the basis of our interest in ensuring the safety of our and your assets as well as general provision of safety on the monitored premises;
  10. The protection of legal entitlements on the basis of the agreement entered into between you and us in relation to enabling you to practice yoga on our premises, or on the basis of our entitlement to provide for the possible enforcement of our rights and entitlements as well as ensuring the back up of all documentation; and
  11. entering into agreements with suppliers and contractual partners on the basis of the agreement entered into between you and us, where the personal data of the contact persons are being specifically processed.

Your health data are processed only with your specific consent in relation to the provision of yoga lessons and WS, off-site yoga events or courses of TTC.

  1. DURATION OF PROCESSING OF YOUR PERSONAL DATA

Your personal data that is processed by us is only kept for certain period of time. At the end of the relevant period the data is deleted. Specifically, we keep your personal data for the following periods of time:

  1. In relation to yoga lessons and WS, the data is kept for the duration of the agreement and then for the 10 years following, or in relation to your registration for the period of 1 year following your last active participation;
  2. in relation to yoga off-site events for a period of 5 years for registrations and 10 years for accounting receipts;
  3. in relation to TTC courses for the duration of the course and for the period of 10 years following conclusion of the course;
  4. as we do not process your personal data in relation to provision of premises and client account information, we do not keep such data;
  5. in relation to payments for services for the period of 10 years;
  6. in relation to the introduction of our company and the development of our company – marketing, until the revocation of your consent or for the period of 1 year;
  7. in relation to maintenance of our own assets for the duration of the agreement and following the termination of such agreement for a period of 10 years;
  8. in relation to protection of assets and persons for the period of 14 days, after which the data is automatically deleted;
  9. in relation to protection of our legal rights for the duration of the agreement and for the period of 1 year following termination of such agreement in respect of individual practice, 5 years in respect of attendance records and 10 years in respect of back-up of information;
  10. in relation to conclusion and fulfilment of agreement with our suppliers and contractual partners for the period of fulfilment of such agreements and for the period of 10 years following termination of such agreements.
  1. RECIPIENTS OF YOUR PERSONAL DATA

Whilst processing your data it may be provided to, or access to it may be given to, the following processing agents, who are processing such data on the basis of our instructions (these agents may not process your personal data for their purposes):

  1. provider of reservation and attendance systems;
  2. advertising portals;
  3. international teachers and examiners;
  4. external marketing specialists;
  5. technicians of the camera system;
  6. provider of the cloud services; and
  7. provider of e-mail marketing services;

During processing of your personal data we may provide or make the data available to the following providers, mainly on the basis of relevant legal regulations:

  1. social networks;
  2. travel agency;
  3. public authorities; and
  4. health insurance companies.
  1. YOUR RIGHTS RELATING TO PERSONAL DATA PROTECTION
    1. Enforcement of your rights

If you would like to enforce any of your above listed right, or just make an enquiry, you are entitled to do so by e-mail on info@iy.yoga or on the above stated correspondence address.

We shall process your enquiry within 1 month. Should this period be exceptionally prolonged, we would inform you of this.

    1. Right to revoke the consent

You are entitled to revoke your consent to the processing of your personal data. Upon receipt of such request, we will ensure, that your personal data to which your consent was given will no longer be processed.

    1.  Right of access

From this information you know generally which of your personal data we hold, why and for how long we keep it. You have a right of access to your specific personal data that we process and also to request a copy of this data. The first copy will be provided free of charge, further copies shall be provided against a fee of 250,-CZK (two hundred fifty Czech crowns)

    1. Right of correction

You are entitled that only your correct and full data are processed. If this is not so, you are entitled to correct or update of such data.

    1. Right of deletion

In certain circumstances you may be entitled to require that we delete personal data held by us. In such case, provided all the conditions are met and the processing of your personal data is no longer required to fulfill our legal obligation or the establishment, execution or protection of our legal rights, we shall do so.

    1. Right of limitation of processing

In certain cases, you are also entitled to request, for a certain period of time, (unlike in the case of your right to the deletion of your personal data that we hold, never for a permanent period of time) a suspension of the processing of your personal details.

    1. Right to transfer

You are entitled to request that we transfer your personal data, processed by us in our electronic databases on the basis of the agreement concluded with you, in a usual format and in a legible printed format to other administrators.

    1. Right of objection

You are entitled to raise an objection against processing that we carry out on the basis of our legitimate entitlement.

    1. Right of complaint

You are entitled to file a complaint against the processing of your personal data at the relevant public office, The Office for Protection of Personal Data, Pplk. Sochora 27, 170 00 Praha 7.