GDPR

Svítání, z.s., with registered office at Klášterní 870/3, 460 01 Liberec, ID tax number: 68974990, registered in the commercial register maintained by L 3194/KSUL Regional Court in Ústí nad Labem (from now on also "We"), as the administrator of personal data, you as a user website https://hipoterapie-kurzy.com/ informs about the personal data collection and privacy policy described below.

Further in the text, you will learn in particular:

What personal data will we process;

• For what purposes and in what way we will process your personal data;
• To whom your personal data may be transferred;
• How long will we process your personal data;
• What are your rights to the protection of your personal data?

If you need to explain any part of the text, advise or discuss further processing of your personal data, you can contact us at any time at the e-mail address: svitani@hipoterapie-kurzy.com

Processing of personal data of children (persons under the age of 16)

Our website is not intended for children under the age of 16. We do not process the personal data of children under the age of 16. A person under the age of 16 may only use our website with the consent of their legal guardian.

Scope of personal data processing

When you contact us through the Website, you may be asked to provide certain information about yourself or your company. These data may, in particular, be:

• Your first and last name,
• trading company,
• address or registered office of the company,
• identification number and tax identification number,
• phone number or
• email address

When you visit our website, we may automatically collect certain information about you, such as the date and time you accessed the website, information about your Internet browser, IP address, information about your operating system, etc. We may also process data about your behaviour on our website, i.e., which links you visit and which goods are shown to you. However, information about your behaviour on the website is anonymised and, therefore, cannot be assigned to a specific user, i.e. a particular person.

Cookies

Our website uses cookies to provide services, personalise ads and analyse traffic. Cookies are short text files the server places in your internet browser when you load a web page. They record information about your behaviour (e.g. the pages you visit) and send it back to the relevant server. This allows us to tailor our site content and marketing communications to your needs. Cookies are not directly linked to your name or email address and are not associated with your personal data in any way. The collected data is completely anonymous.

Why do we use cookies to make surfing our website and shopping in our e-shop as pleasant as possible for you? We use cookies to customise our e-shop offer based on your online behaviour. They also provide us with data about the use of our e-shop, based on which we improve the clarity and user-friendliness of the website. We also use third-party software (e.g. Google.com, Seznam.cz, etc.) that processes cookies. They allow us to display our personalised offers/advertisements on partner sites. The cookies of these companies are subject to their privacy policies.

You can limit cookies or altogether disable them in your browser settings - instructions can be found in the browser's help. However, it may limit some features of your favourite websites.

Purpose of processing, legal reasons for processing

We use the information you provide us to contact you back and provide you with the information you have requested or to fulfil our obligations. The legal reason is thus the conclusion of the contract and the fulfilment of the contract. All personal data are processed legally and transparently, and only adequate, relevant and necessary data are required about the purpose of the processing, i.e., to deliver the purchased goods to you properly or to provide you with the purchased services correctly. Therefore, based on this legal reason, we mainly process invoicing and delivery data.

The provision of personal data to perform the contract and the provision of personal data to answer questions raised by you or information requested by you are our contractual requirements, and failure to provide them may result in not concluding the contract or not providing answers to questions raised by you.

Legitimate interest

Another legal reason for processing your personal data is our legitimate interests. Based on legitimate interest, we process personal data that we process automatically and cookies in this way. We can use your name, surname and e-mail address to send you relevant content, i.e., to inform you about events, publications or services that we provide and which, in our opinion, may be of interest to you and for research. Your satisfaction with our services and further process your product reviews and display such reviews to other customers. Due to legitimate interest, we may also send you e-mails and SMS messages.

We can send you a Newsletter 1-2 times a month based on legitimate interest. We can also send you a special offer of our services.

Your consent

Another legal reason for processing your personal data is your consent. We process your personal data based on your consent to send commercial messages by e-mail or SMS. However, if you do not consent and are our customer, we can send you commercial messages without your permission.

However, it always applies that you can refuse to process your personal data to send commercial messages at any time, which will not affect our other mutual relations. Please send us an e-mail with the relevant request to: svitani@hipoterapie-kurzy.com or unsubscribe from our newsletters. You can easily unsubscribe from commercial communications by adjusting your user profile settings or via the unsubscribe form provided directly in the email from which you received commercial communications from us.

We do not transfer your personal data outside the EU countries.

Who has access to your personal information?

We, as the administrator, will process your personal data. We may transfer your data to our subcontractors for the abovementioned purposes to process them for us. Personal data may be transferred to:

• external accountant;
• external law firms;
• processors who provide us with the server, web, cloud or IT services or who are our business partners;
• to entities involved in the delivery of goods or services or involved in making payments based on a contract;
• providers of external archiving and shredding services within the framework of fulfilling our legal obligation to archive and shred documents according to the relevant legal regulations of the Czech Republic;
• to public authorities within the framework of fulfilling legal obligations or fulfilling the supervisory and control functions of the relevant public authority (Financial Office, ČOI, Office for the Protection of Personal Data, etc.).

Time of personal data processing

We will process your personal data for the period during which we will provide you with our services or fulfil a mutual agreement, but for a maximum period of five years, or for the period necessary to fulfil archiving obligations according to applicable legal regulations, such as the Accounting Act, the Archiving Act and registration or value added tax law. We will delete personal data after the retention period for personal data has expired. In the case of processing personal data for which consent has been granted, your personal data will generally be processed for five years or until such consent is revoked.

Your rights arising from the processing of personal data

In relation to our processing of your personal data, you have the following rights:

• right of access to personal data;
• right to rectification;
• right to erasure ("right to be forgotten");
• the right to restriction of data processing;
• the right to object to processing;
• the right to data portability;
• the right to complain about the processing of personal data.

Your rights are explained below to give you an idea of their content.

You can exercise all your rights by contacting us at the e-mail address svitani@hipoterapie-kurzy.com.

You can file a complaint with the supervisory authority, the Office for the Protection of Personal Data (www.uoou.cz).

The right of access means that at any time, you can request our confirmation whether or not personal data concerning you is being processed, and if so, for what purposes, to what extent, to whom it is made available, for how long we will process it, whether you have the right to correction, erasure, restriction of processing or to raise an objection, where we obtained personal data and whether automatic decision-making takes place based on the processing of your personal data, including possible profiling. You also have the right to obtain a copy of your personal data; At the same time, the first provision is free of charge; for further provision, the Intermediary may demand reasonable payment of administrative costs.

The right to rectification means you can ask us at any time to correct or supplement your personal data if it needs to be corrected or completed.

The right to erasure means that we must erase your personal data if (i) it is no longer necessary for the purposes for which it was collected or otherwise processed, (ii) the processing is unlawful, (iii) you object to the processing, and there are no overriding legitimate reasons for the processing, or (iv) we are required to do so by law.

The right to restriction of processing means that until we have resolved any disputed issues regarding processing your personal data, we must restrict the processing of your personal data so that we can only store it and, where appropriate, use it to determine, exercise or defend legal claims.

The right to object means that you can object to the processing of your personal data that we process for direct marketing or reasons of legitimate interest. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

The right to data portability means you can ask us to transfer your personal data in a structured, commonly used, machine-readable format to another controller. The condition for using this right is the possibility of technical transferability.

Terms of security of personal data

We have taken all appropriate technical and organisational measures to secure personal data. We declare that only persons authorised by us have access to personal data. We regularly review their security and continuously raise their security standards.

Final Provisions

By submitting an order from the online order form, you confirm that you are familiar with and accept the terms of personal data protection.

The administrator is authorised to change these conditions. It will post the new version of the privacy policy on its website.

 

This Privacy Policy is effective as of April 1, 2023.