PERSONAL DATA PROTECTION

1. Data ControllerNatalie Kohoutova, ID No. 08101671, registered office: Eduarda Beneše 5, Plzeň, operator of the website www.tantrakatarsis.com

2. Contact InformationIf you wish to contact us regarding the processing of personal data, please email: natalie.plzen@seznam.cz.
We declare that as the data controller, we comply with all legal obligations required by applicable law, especially the Personal Data Protection Act and GDPR, meaning that:

• Your personal data will only be processed based on a legitimate reason, such as legitimate interest, contract performance, legal obligation, or given consent.
• We fulfill the information obligation under Article 13 GDPR before processing personal data.
• We provide and support you in exercising your rights under the Personal Data Protection Act and GDPR.

3. Scope of Personal Data and Purpose of ProcessingWe process personal data that you provide for the following purposes:

• Voucher purchase – email, billing information, postal address (if the voucher is sent by mail), phone number (for order confirmation). Your data is required to process your order.
• Massage reservation – name, phone number. Your data is required to process the booking, send reminder SMS, or call in case of changes.
• Course registration – name, phone, email, billing information. Your data is required to process the registration.
• Accounting – if you are a customer, we need your personal data (billing information) to fulfill legal obligations for issuing and recording tax documents.

Your personal data is retained for the statutory limitation period unless the law specifies a longer retention period or we indicate otherwise.

4. CookiesWhen you browse our website, we record your IP address, the duration of your visit, and the referring page. We use cookies to measure website traffic and personalize the website display based on our legitimate interest as the data controller, to provide better services.
Advertising cookies are processed only with your consent. Our website can be viewed without collecting personal data. You can disable cookies on your computer.

5. Security and Protection of Personal DataWe protect personal data to the maximum extent possible using modern technologies appropriate to the current level of technical development. We treat your data as if it were our own. We have implemented and maintain all known technical and organizational measures to prevent misuse, damage, or destruction of your personal data.

6. Disclosure to Third PartiesTo perform specific processing operations that we cannot handle ourselves, we use the services of processors who specialize in data processing and can protect data as well as or better than we can.
These include:

• GoDaddy – web hosting
• Headquarters: 2155 E. GoDaddy Way, Tempe, AZ 85284, USA
• Google Analytics – website traffic statistics
• Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

In the future, we may use other applications or developers to facilitate and improve processing. We promise to apply at least the same security and quality requirements as we do for ourselves.

7. Data Transfer Outside the EUData is processed exclusively within the European Union or in countries providing an adequate level of protection based on a European Commission decision (except for Google Analytics services).

8. Your RightsRegarding personal data protection, you have several rights. To exercise any of these, contact us at natalie.plzen@seznam.cz.

• Right to Information – All information is provided on this privacy page.
• Right of Access – You may request confirmation and details of the data we process about you within 30 days.
• Right to Rectification – You can request correction or completion of your personal data if it is inaccurate or incomplete.
• Right to Restriction of Processing – You may restrict processing if you believe data is inaccurate, processed unlawfully but you do not want deletion, or if you object to processing.
• Right to Data Portability – You can request your personal data in a machine-readable format to transfer to another controller. Response time: 30 days.
• Right to Erasure (“Right to be Forgotten”) – You may request deletion of all your personal data, including backups and processor systems, unless legal obligations (e.g., tax records) require retention. Processing of deletion requests: 30 days.
• Right to File a Complaint – If you believe your data is processed unlawfully, you may file a complaint with the Personal Data Protection Office. We appreciate it if you inform us first to correct any issues.
• Unsubscribe from Marketing Communications – Emails or SMS with promotions or inspiration are sent based on legitimate interest. You can unsubscribe by replying to the email or contacting our phone number to request cessation.

9. ConfidentialityWe, our employees, partners, and processors are obliged to maintain confidentiality regarding personal data and security measures. Your personal data will not be shared with third parties without your consent.

10. Effective DateThis Privacy Policy has been effective since 01.01.2022.