Personal data protection (GDPR)

By visiting my website, my premises, or subscribing to my services, courses, or newsletters (emails), you entrust me with your personal data. I am responsible for their protection and security. Familiarize yourself with my policies and your rights under Regulation (EU) 2016/679 of the European Parliament and of the Council - General Data Protection Regulation abbreviated as GDPR.

Contact Information

Email: penzesova@email.cz

WhatsApp: +420 736 642 674

Address of the establishment: 45 rue Laurent Ménager, Maison Paramédical Pafendall, L2143m Luxembourg

IČO: LU33671225

Statement

I declare that as the controller of your personal data, I fulfill all legal obligations required by applicable legislation, especially the Personal Data Protection Act and the GDPR, and thus:

- I will process your personal data only on the basis of a valid legal reason, primarily legitimate interest, performance of a contract, legal obligation, or granted consent.
- I fulfill the information obligation according to Article 13 of the GDPR before commencing the processing of personal data.
- I will enable you and support you in asserting and fulfilling your rights under the Personal Data Protection Act and the GDPR.

Scope of Personal Data and Purposes of Processing

I process personal data that you provide to me for the following reasons (and to fulfill these purposes):

- Provision of services
- Fulfillment of the contract
- Keeping accounts
- Marketing - sending newsletters
- Advanced marketing based on consent
- Photographic documentation, references, live events, courses, and workshops

When browsing my websites, I record your IP address, how long you stay on the page, and from which page you come. I perceive the use of cookies for measuring website traffic and customizing the display of websites as my legitimate interest as the controller because I believe that this allows me to offer you even better services.

Security and Protection of Personal Data

I protect personal data to the maximum extent possible using modern technologies that correspond to the degree of technical development. I protect them as if they were my own. I have adopted and maintain all possible (currently known) technical and organizational measures to prevent misuse, damage, or destruction of your personal data.

Transfer of Personal Data to Third Parties

Employees and collaborators have access to your personal data. To ensure specific processing operations that I cannot manage on my own, I use the services and applications of processors who can protect data even better than I do and specialize in such processing.

Transfer of Data Outside the EU

I process data exclusively in the European Union or in countries that ensure an adequate level of protection based on the decision of the European Commission.

Your Rights

In connection with the protection of personal data, you have a number of rights.

You have the right to information, which is already fulfilled by this information page with the principles of personal data processing.

Thanks to the right of access, you can request at any time, and I will provide you within 14 days, what personal data I process and why.

If something changes for you or you find your personal data inaccurate or incomplete, you have the right to supplement and change personal data.

You can use the right to restrict processing if you believe that I process your inaccurate data, you believe that I process data unlawfully, but you do not want to delete all data, or if you have objected to processing.

The right to data portability: If you would like to take your personal data and transfer it to someone else, I will proceed in the same way as when using the right of access - just with the difference that I will provide you with information in a machine-readable format. I need at least 30 days for this.

The right to erasure (right to be forgotten): I don't want to forget about you, but if you wish, you have the right to it. In such case, I will delete all your personal data from my system and from the systems of all subprocessors and backups. I need 30 days to ensure the right to erasure. In some cases, I am bound by a legal obligation, for example, I must record issued tax documents for the period prescribed by law. In this case, I will delete all such personal data that is not bound by another law. I will inform you by email about the completion of the erasure.

Complaint to the Office for Personal Data Protection: If you feel that I am not handling your data in accordance with the law, you have the right to lodge a complaint with the Office for Personal Data Protection at any time. I would be very grateful if you first inform me directly about any suspicions, so that I can correct any potential and, above all, unintentional errors.