As a visitor to our website, you entrust us with your personal data and we are responsible for its protection and security. Please familiarize yourself with these privacy policies and the rights you have in connection with the GDPR (General Data Protection Regulation).

 

Controller

The controller of personal data is me, Barbora Tenčlová, IČ 01408381, a natural person registered in the Trade Register in Brandýs nad Labem since 11. 2. 2013, with registered office at Výletní 1073/38, 1250 01 Brandýs nad Labem-Stará Boleslav, operating the website www.touchtherapy.cz.

I process your personal data as a controller, i.e. I determine how it will be processed and for what purpose, for how long and I select any other processors who may participate in the processing.

 

Contact

If you would like to contact me, you can contact me at info@touchtherapy.cz.

 

Declaration

I declare that as the controller of your personal data I comply with all legal obligations required by applicable legislation, in particular the Personal Data Protection Act and the GDPR, and therefore that:

• I will process your personal data only on the basis of a valid legal reason, primarily legitimate interest, performance of a contract, legal obligation or consent granted;
• I comply with the information obligation pursuant to Article 13 of the GDPR before the processing of personal data begins, and I will enable and support you in exercising and fulfilling your rights under the Personal Data Protection Act and the GDPR.

 

Scope of personal data and purposes of processing

I process personal data that you entrust to me for the following reasons (to fulfill these purposes):

Provision of services, performance of the contract:

• I need your personal data such as name and e-mail (or address) to fulfill the contract (e.g. to send access to the application, send online courses, deliver goods, etc.).

Accounting:

• If you are my customer, I absolutely need your personal (invoicing) data to comply with the legal obligation to issue and record tax documents.

Marketing – sending newsletters:

• I use your personal data (e-mail and name), gender, what you click on in the e-mail and when you most often open it for the purpose of direct marketing – sending commercial communications. If you are my customer, I do so out of legitimate interest, as I reasonably assume that you are interested in my news, for a period of 5 years from your last order.
• If you are not my customer, I only send you newsletters based on your consent for a period of 5 years from the date of granting. In both cases, you can revoke this consent by using the unsubscribe link in each email sent.

Advanced marketing based on consent:

• Only with your consent can I also send you inspiring offers from third parties or use your email address, e.g. for remarketing and advertising targeting on Facebook, for a period of 5 years from the date of granting consent. This can of course be revoked at any time via my contact details.
• I retain your personal data for the duration of the limitation periods, unless the law stipulates a longer retention period or I have stated otherwise in specific cases.

 

Cookies

When browsing our website, I record your IP address, how long you stay on the page and which page you come from.

I see the use of cookies to measure website traffic and customize the display of websites as my legitimate interest as the administrator, because I believe that this allows me to offer you even better services.

Cookies for advertising targeting will only be processed based on your consent.

My website can also be browsed in a mode that does not allow the collection of personal data – you can disable the use of cookies on your computer.

 

Security and protection of personal data

I protect your personal data to the maximum extent possible using modern technologies that correspond to the level of technical development. I protect it as if it were my own. I have adopted and maintain all possible (currently known) technical and organizational measures to prevent the misuse, damage or destruction of your personal data.

 

Security and protection of personal data

My colleagues and employees may have access to your personal data. To ensure specific processing operations that I cannot ensure myself, I use the services and applications of processors who can protect data even better than I do and specialize in the given processing.

 

These are the providers of the following platforms:

• WordPress
• Google
• MailChimp
• Fapi

It is possible that in the future I will decide to use other applications or processors to facilitate and improve the quality of processing. However, I promise you that in such a case, when choosing a processor, I will place at least the same demands on security and quality of processing as on myself.

 

Data transfer outside the EU

All personal data processing will be carried out only within the EU.

 

Your rights in connection with the protection of personal data

You have a number of rights in connection with the protection of personal data. If you would like to exercise any of these rights, please contact me by e-mail info@touchtherapy.cz.

You have the right to information, which is already fulfilled by this information page with the

Thanks to the right of access, you can contact me at any time and I will provide you with evidence within 30 days of what personal data I am processing and why.

If something changes for you or you find your personal data outdated or incomplete, you have the right to supplement and change your personal data.

You can exercise the right to restrict processing if you believe that I am processing your inaccurate data, you believe that I am processing it unlawfully, but you do not want to delete all the data, or if you have objected to the processing. You can limit the scope of personal data or the purposes of processing. (For example, by unsubscribing from the newsletter, you limit the purpose of processing for sending commercial communications.)

The right to portability – if you would like to take your personal data and transfer it to someone else, I will proceed in the same way as when exercising the right of access – with the only difference being that I will send you the information in machine-readable form (within at least 30 days).

Right to erasure (to be forgotten) – your other right is the right to erasure (to be forgotten). I don’t want to forget you, but if you wish, you have the right to do so. 🙂 In such a case, I will delete all your personal data from myself/my system and from the system of all sub-processors and backups. I/we need 10 days to ensure the right to erasure.

In some cases, I am bound by a legal obligation and, for example, I have to register issued tax documents for a period specified by law. In this case, I will delete all such personal data that are not bound by another law. I will inform you by e-mail when the erasure is complete.

 

Complaint to the Office for Personal Data Protection

If you feel that I am not handling your data in accordance with the law, you have the right to contact the Úřad pro ochranu osobních údajů with your complaint at any time. I would be happy if you would inform me of any suspicions first so that I can check the situation and correct any errors.

Unsubscribing from newsletters and commercial communications

I send you emails with news on my website, with inspirations, with articles or products and services if you are my customer, based on a legitimate interest that I reasonably assume you have.

If you are not a customer yet, I only send them to you based on your consent.

In both cases, you can unsubscribe from my emails by clicking the unsubscribe link in each email sent.

 

Confidentiality

I want to assure you that my colleagues and employees who will process your personal data are obliged to maintain confidentiality of personal data and security measures, the disclosure of which would jeopardize the security of your personal data. This confidentiality continues even after the termination of the contractual relationship with us. Your personal data will not be disclosed to any other third party without your consent.

This Privacy Policy is effective as of 25/05/2018.