Protection of personal data

Protection of personal data

Article 1.

NOTICE ON THE PROTECTION OF PERSONAL DATA

The protection of the Customer’s personal data is governed by the provisions of Regulation of the European Parliament and the Council (EU) no. 2016/679 on the protection of natural persons in the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR”) and Act No. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws as amended (hereinafter referred to as “ZOOÚ”).

Article 2.

DEFINITION OF TERMS

Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”) who can be identified directly or indirectly, in particular by reference to an identifier such as name, identification number, location data, online identifier, or by reference to one or several elements that are specific to the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.

Processing of personal data is an activity or a set of activities with personal data, such as obtaining, recording, organizing, structuring, storing, changing, searching, viewing, providing, limiting, deleting, disposal, by automated or non-automated means.

An operator is anyone who alone or jointly with others defines the purpose of processing personal data, determines the conditions of their processing and processes personal data on their own behalf. For the purposes of this document, the operator is the company LIPA coaching consulting, s. r. o., Halašova 2660/4 010 01 Žilina, Slovak Republic, ID number: 52170730, registered in the Commercial Register of the District Court of Žilina, section: Sro, insert number: 71617/L (hereinafter referred to as “Operator”).

An intermediary is a natural or legal person who processes personal data on behalf of the operator.

The recipient is a natural or legal person, public authority or other entity to which personal data is provided.

The responsible person is the authorized person who ensures the supervision of personal data protection during the processing of personal data by the operator or intermediary. Supervision of personal data protection represents several tasks and activities that the responsible person is obliged to fulfill according to the Personal Data Protection Act. The responsible person can only be a natural person who has full capacity for legal acts, is of good character and has a valid certificate from the office that he has passed the exam. The responsible person can also be the statutory officer of the operator or intermediary, or a person acting on behalf of the statutory body. The responsible person can be one or more natural persons; the responsible person can also be an external natural person.

The consent of the person concerned is any freely given explicit and understandable expression of will, by which the person concerned, on the basis of the information provided, expresses his consent to the processing of his personal data. The consent mainly contains information about who gave the consent, to whom this consent is given, for what purpose, the list or scope of personal data and the period of validity of the consent. The operator may not force or condition the consent of the person concerned by the threat of rejection of the contractual relationship, service, goods or obligation established for the operator by a legally binding act of the European Union, an international treaty to which the Slovak Republic is bound, or the law. Consent must be reliably proven. Consent is demonstrated, for example, in written form, by an audio or audio-visual recording, or by an affidavit of the person who provided personal data to the information system, or in another credible way.

Article 3.

PERSONAL DATA PROCESSING PRINCIPLES

The operator collects, processes and uses personal data especially when providing services in connection with the sale of products, educational activities or courses. The Operator declares that he will protect the Customer’s personal data, will never provide them (for a fee or free of charge) to a third party, or use them in violation of applicable legal regulations for the protection of personal data. The provision of data to a third party occurs only in the case of the transport company that delivers the requested product to the Customer.

Personal data provided through the registration form available on the Operator’s website https://www.lipa.coach/, the Operator with reference to § 10 par. 3 letters b) ZOOÚ authorized to process even without consent, since the processing of personal data in question, as personal data according to ZOOÚ, is necessary in pre-contractual relations, or for the performance of a contract in which the person concerned according to ZOOÚ acts as one of the contracting parties.

By expressing your consent that you have read the instructions on the protection of personal data for the removal of any doubts, you declare that you acknowledge that the provision of personal data is necessary for the processing of the application and subsequently the proper performance of the contract, the subject of which will be the provision of educational services (courses) by the Operator.

The operator hereby informs you that your personal data will not be transferred to a third country and will be processed exclusively by the Operator and authorized persons in accordance with the ZOOÚ.

The Operator is responsible for the security of personal data. The operator is obliged to protect the processed personal data against their damage, destruction, loss, change, unauthorized access and access, provision or publication, as well as against any other inadmissible methods of processing. For this purpose, the Operator has adopted adequate technical, organizational and personnel measures corresponding to the way of processing personal data, taking into account in particular the applicable technical means, the confidentiality and importance of the processed personal data, as well as the scope of possible risks that are capable of disrupting the security or functionality of the information system.

Purposes and objectives of data processing:

The operator will process the Customer’s data for the following purposes:

  1. a) Client administration – records of data on all our clients and services that have been provided,
  2. b) Taxes and accounting – in order to fulfill the obligations arising from applicable laws and regulations connected with your payment for the service, the Operator is obliged to process some of the Customer’s personal data – e.g. when issuing an invoice for the service,
  3. c) Compliance with the law or when issuing documents related to educational activities – The operator is authorized to process personal data for the purposes of resolving disputes, complaints, legal procedures, or due to compliance with generally binding legal regulations.
  4. d) Marketing consents – use of the Customer’s personal data in order to improve and improve the quality of the services provided (the said consent is voluntary and can be revoked at any time).
  5. e) Transport company – provision of necessary personal data of the Customer for the delivery of products ordered by him.

Article 4.

PROCESSING AND ARCHIVING PERIOD OF PERSONAL DATA

We keep your personal data for as long as it is necessary for the purposes for which the personal data is processed. The storage period results from legal regulations, or we will always determine the storage period of your personal data in relation to specific purposes through our internal policy.

The general retention periods of personal data for the purposes defined by us for the processing of personal data are as follows:

  1. a) Administration of clients (i.e. organization of courses, training or professional seminars): After the end of your course, training or professional seminar, it can be a period of up to 10 years.
  2. b) Marketing consents (sending promotions/advertisements, course offers, newsletters): Until you withdraw your consent or send an objection to the processing of your personal data.
  3. c) Taxes and accounting: during the 10 years following the accounting year to which the accounting documents relate.
  4. d) Compliance with the law (legal agenda): Until the legal claim expires.
  5. e) Transport company – only for the time required for delivery. Archiving according to the rules of the given transport company.

Only general periods during which personal data are processed for specific purposes are listed. In reality, however, we proceed with liquidation or anonymization of personal data even before the expiration of these general periods, if we already consider your personal data to be unnecessary from the point of view of the stated purposes of processing.

Article 5.

LEGAL BASIS FOR THE PROCESSING OF YOUR DATA

In most cases, we process your personal data on the basis that the processing is necessary for the purposes of the legitimate interest we pursue, on a legal basis, on a contractual basis or on the basis of your consent as the person concerned. In the case of processing based on consent, you always have the option to withdraw your consent.

The legal basis of this processing is the negotiation of a contract or its fulfillment (Article 6(1)(b) GDPR). The data will be processed for this purpose during our contractual relationship, while subsequently some data may be further processed on the basis of our legitimate interests (Article 6(1)(f) GDPR) in the defense of rights and property, until the statutory limitation periods.

Article 6.

RESPONSIBILITY FOR THE PROCESSING OF PERSONAL DATA

The Operator is responsible for the protection of your personal data.

Article 7.

RESPONSIBLE PERSON

If you have questions and comments regarding the protection of your personal data, please write to the email address: info@lipa.coach with the subject GDPR. Please note that we may require confirmation of your identity depending on your application.

Article 8.

YOUR RIGHTS UNDER THE DATA PROTECTION ACT

Right to access data – You have the right to know whether we are processing your personal data. If we process these, you can ask us to access the data. Based on your request, we will issue a confirmation with information about the processing of your personal data by our company.

Right to rectification – You have the right to have your personal data that we process correct, complete and up-to-date. If your personal data is incorrect or out of date, you can ask us to correct or supplement it.

Right to erasure – In certain circumstances, you have the right to have your personal data erased by us. You can ask us to delete your data at any time. We will delete your personal data if we no longer need your personal data for the purpose for which you provided it to us you withdraw your consent you object to the processing of your personal data we are processing your personal data illegally the personal data must be deleted in order to fulfill a legal obligation if you are a child or . the parent of a child who agreed to the processing of personal data via the Internet.

Right to restriction of processing – You can ask us to restrict the processing of your personal data. If we comply with your request, we will only store your personal data and will not work with them further. The restriction of the processing of your data will occur if you notify us that your personal data is incorrect, and until we verify its accuracy we are processing your personal data unlawfully, but you do not agree to its deletion and instead request that we only restrict the processing of your personal data we no longer need your data, but you need it to prove, exercise or defend your rights object to the processing of your personal data, until we verify whether our legitimate interests outweigh your reasons.

Right to data portability – You have the right to request that we provide you with your personal data in a form that allows you to easily transfer the data to another company.

Right to object – You have the right to object to us processing your personal data. If we process your personal data for direct marketing purposes, you can object to their processing at any time. Based on the objection, we will delete your personal data. If we process your personal data in the following cases:

to perform a task in the public interest or in the exercise of public authority, due to our legitimate interest, creating a customer profile, you can object to their processing if you have personal reasons for doing so.

The rights of the user may be limited only if such limitation results from a special law or its application would violate the protection of the user, or the rights and freedoms of other affected persons would be violated.

Based on a written request, the user has the right to object to the operator:

processing his personal data for a purpose other than the purpose specified in these terms and conditions, processing his personal data, which he assumes are or will be processed for direct marketing purposes without his consent, and to request their liquidation, the use of personal data referred to in § 10 par. 3 letters d) ZOÚ for the purposes of direct marketing in postal communication, or the provision of personal data referred to in § 10 par. 3 letters d) ZOÚ for the purposes of direct marketing, processing of personal data in cases according to § 10 par. 3 letters a), e), f) or g) ZOOÚ by stating legitimate reasons or presenting evidence of unauthorized interference with its rights and interests protected by law, which are or may be damaged in a specific case by such processing of personal data.

The user, on the basis of a written request or in person, if the matter cannot be delayed, further has the right to object to the operator at any time and not to submit to a decision of the operator that would have legal effects or a significant impact for him, if such a decision is issued solely on the basis of automated processing of his personal data . The user has the right to ask the operator to review the issued decision by a method different from the automated form of processing, while the operator is obliged to comply with the user’s request, in such a way that the authorized person will have a decisive role in the review of the decision.

If the user suspects that his personal data is being processed without authorization, he can submit a proposal to the Office for the Protection of Personal Data to initiate proceedings on the protection of personal data. If the user does not have full legal capacity, his rights can be exercised by a legal representative. If the user is not alive, his rights, which he had according to the ZOOÚ, can be exercised by a close person.