Privacy policy

Company Yorkmut ("Pets Yoga") appreciates your interest in our services and your visit to our website. The protection and security of our clients' personal data is a priority for us and we would therefore like to inform you about the processing of personal data we obtain when you visit our website, purchase gift vouchers and tickets for our classes and the purposes for which it is processed ("Policy").

Unless prevented by the purpose of the processing, we will always process your personal data in a strictly confidential manner, anonymised and in accordance with applicable law and this Policy.

As the legislation on the processing of personal data is quite dynamic, we will certainly be forced to change or modify our internal regulations and the way we process our clients' personal data in the future. Please therefore review this document from time to time, the current version of which is always published on our website, so that you are fully up to date each time you visit.

§ 1 Administrator and scope

The controller of personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR") is:

Yorkmut

ID: 19952066

Registered office: Prague 1 - Nové Město, Senovážné náměstí 978/23, Postal Code: 110 00

Registered in the Commercial Register: the Municipal Court in Prague, Section C, Insert 394405

Phone number: +420 733 543 643

E-mail: petsyogaprague@gmail.com

Website: www.petsyogaprague.com , www.petsyogabrno.com , www.petsyogadresden.com

The wording of this Policy governs the processing of personal data of visitors to our websites, which can be found at www.petsyogaprague.com , www.petsyogabrno.com, www.petsyogadresden.com and for all other Yorkmut s.r.o. websites and other documents that refer to this Policy.

§ 2 Data Protection Officer

Our data protection officers are

Miss Anna Dvořáková and Miss Markéta Blahová,

who can be contacted by email: petsyogaprague@gmail.com or by phone:+420 733 543 643

§ 3 Principles of personal data processing

The term "personal data" includes all information relating to an identified or identifiable natural person, such as name, age, address, telephone number, date of birth, email address, IP address and even user behaviour on the website, or other data about the processing of which we inform you further in this Policy. Information that cannot be (or can only be with unreasonable effort) linked to a specific person, such as anonymous information, is not personal data. We can only ever process personal data (collection, retrieval, use, storage and transfer, etc.) on the basis of a legal basis, the so-called legal basis for processing, in accordance with the applicable law. Such a legal basis is your consent, our legitimate interest, the performance of a legal obligation, the fulfilment of a contract we enter into, etc.

We delete processed personal data as soon as the specified period for storing and processing it has expired, usually as soon as we no longer need it and there are no other legitimate grounds for processing it.

Please see below for information on the specific procedures, scope and purpose of the processing of your personal data, the legal basis that justifies such processing and the retention period.

§ 4 Processing of personal data

Website

a) Scope and purpose of processing

We only record and use the personal data of our users to the extent necessary for the functionality of the website and the content of the services we offer. When you visit our website, we only collect personal data that your internet browser automatically transfers to our server and temporarily stores in a so-called log file. Until it is automatically deleted, we have the following information:

The IP address of your computer,
the date and time you visited our website,
the name and URL of the downloaded file,
the network from which you are accessing the website (URL link),
your computer's browser and operating system, if applicable, as well as the name of your access provider,
an identifier stored on your device (cookies).

Working with this data will allow us, and consequently you, to ensure a smooth connection to our websites and their smooth functionality.

b) Legal basis

The personal data listed in the previous paragraph is necessary for the purpose of providing our services and is used to protect our legitimate interests. We process them on the basis of Article 6(1)(f) GDPR. You may object to the processing of personal data pursuant to Article 6(1)(f) GDPR in accordance with Article 21 GDPR, which you can find out more about below (see Sections 8 and 9 of this Policy).

c) Data deletion and storage time

We will delete your personal data once the purpose for which your data was stored has been fulfilled. We cannot do without the data that we need for the smooth functioning of our websites and store in log files in the operation of the websites, and therefore there is no possibility for the user to object to the processing of this data. Further storage of personal data may only occur on a case-by-case basis if required and/or stipulated by law.

2. Contact form

a) Scope and purpose of processing

If you want to ask us a question via the contact form, which you can find in the "Contact" section of the website, you need to fill in the following data:

reason for contacting,
how we should address you in our reply,
your name and surname,
your email address, or phone number,
address (street/number, city, postcode),
and the specific message - i.e. your request or query.

We use all this information to answer your query and process your request.

b) Legal basis

We process the personal data that is required to be filled in the contact form in order to answer your enquiry or process your request for the purpose of establishing contact in accordance with Article 6(1)(f) of the GDPR. You may object to the processing of your personal data pursuant to Article 6(1)(f) GDPR in accordance with Article 21 GDPR, which you can find out more about below (see Sections 8 and 9 of this Policy).

c) Retention period

We will delete the personal data collected through the contact form within 90 days after we have finished processing your enquiry or request, unless we need it longer for reasons of verifiability, customer service or legal retention. Further retention may take place on a case-by-case basis if the law requires it or there is another legal basis for it, in simple terms - if we have another GDPR permitted legitimate reason for doing so.

3. Processing of personal data in case of purchase

a) Scope and purpose of processing

If you purchase a gift voucher or a single lesson ticket via our website, we will work with the data you fill in the order form. This mainly concerns:

name and surname,
e-mail,
phone number,
billing information.

We need to process personal data to fulfil our contract - to enable you to download and print your gift voucher and/or to welcome you among our cute puppies for a lesson. We will also communicate with you via your contact details regarding your queries or (heaven forbid) complaints. Please note that if you are buying a ticket for someone else and entering his/her personal details when ordering, you must be mindful of their privacy and such actions must always be in accordance with the law.

We will process personal data for the purpose of processing orders, processing payments, providing discounts, processing any cancellations or complaints, and last but not least to comply with our legal obligations (especially with regard to accounting and taxes). We transfer your data to third parties if this is necessary for the processing of payments and for our accounting purposes. We may pass on data on outstanding debts to third parties if we proceed to collect them. However, this will certainly not be necessary 😊.

b) Legal basis

The processing is based on Article 6(1)(b) GDPR - performance of a contract and Article 6(1)(c) GDPR - compliance with legal obligations to which we are subject.

c) Data erasure and retention period

For the duration of our performance of our obligations under the contract and thereafter for 10 years from the last provision of such service or delivery of goods, unless a different (longer) period is stipulated by specific legislation.

3B. User account

a) Scope and purpose

If you set up a user account to speed up logging in to the booking system for individual lessons and the purchase of vouchers, we will have virtually identical data as for purchases and bookings without registration. We will therefore process the following personal data:

first and last name,
e-mail,
phone number,
billing information.

As part of the account management, we only keep data about your orders, so you yourself will have an overview of how often you have visited us.

b) Legal basis

For the purpose of the processing of personal data in connection with the creation of a user account, the information given in the previous article -> "Processing of personal data in the event of a purchase" applies.

The legal basis for the processing of personal data when setting up a user account in the e-shop is determined by the performance of the contract according to Article 6 (1) (b) GDPR.

c) Data erasure and storage period

We will use the personal data to maintain your account for the duration of its use. We will deactivate your account and delete the data if you do not use the account for more than 48 months after your last purchase.

You can also deactivate your account at any time. In this case, your personal data will be deleted.

§ 4 Transfer of personal data to a third party

Within the operation of Pets Yoga, only those persons who need your personal data to perform their tasks - our assistants before the start of each lesson or the company's managers who personally run the company and the entire operation of our lessons - have access to your personal data. However, we need the assistance of selected professionals to provide some of the services or individual sub-processes that are necessary for the operation of Pets Yoga. These are suppliers:

IT services (e.g. server hosting, software applications, etc.),
legal, accounting and tax advisors,
cloud providers,
payment service providers and banks for processing individual payments.

These service providers only process your personal data on our behalf and on our instructions, and only to the extent necessary and for a limited period of time. Even in such cases, we remain responsible for protecting your privacy.

If we are required to do so by law, we are also obliged to pass on our clients' personal data to public authorities.

You should also be aware that in some cases, personal data is transferred on the basis of a so-called European Commission adequacy decision pursuant to Article 45 GDPR or on the basis of the European Union's standard contractual clauses (see: https://eur-lex.europa.eu/legal-content/CS/TXT/HTML/?uri=CELEX%3A32021D0914 ) to data recipients outside the European Economic Area (see below). However, even such transfers of personal data are carried out with an adequate level of data protection by appropriate technical and organisational measures in accordance with Article 46 GDPR in connection with their processing.

§ 5 Cookies

Our websites use different types of cookies, which are small text files that we store on your browser. Some types of cookies ensure that they work properly, while other types of cookies allow us, for example, to carry out all kinds of analytical reports that enable us to make the website more efficient and user-optimised (for example, to remember your preferred country or the language you use). But don't worry, cookies can't run any programs, they don't contain viruses and they can't cause any other damage to your computer, tablet or mobile phone.

The use of essential cookies - those without which some indispensable functions of our website simply do not work - serves to protect our legitimate interests within the meaning of Article 6(1)(1)(f) of the GDPR. However, before we send any cookies to your browser that are not technically necessary, we will ask for your consent (within the meaning of Article 6 (1) sentence 1 (a) GDPR). You can, of course, change the cookie settings on our website at any later time by clicking on the "Change cookie settings" link in the footer of the website.

For more information, click on Cookies policy

§ 6 Plug-Ins

1. Facebook, Instagram, YouTube, Pinterest

The Pets Yoga website may contain social plug-ins for the social networks "Facebook" (Facebook Inc., 1601 S. California Ave., Palo Alto, California 94304, USA), "Instagram" (Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA), "YouTube" (YouTube LLC., 901 Cherry Ave., San Bruno, CA 94066, USA) and "Pinterest" (Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA). We cannot exclude that personal data about visitors to our websites may also be collected via these plugins, transmitted and processed further.

Pets Yoga does not collect or receive any personal data through these social plugins.

Unfortunately, we also have no influence on whether and to what extent the respective service providers collect personal data. We know nothing about the scope, purpose or retention period of the respective data collection. But we prefer to assume that at least the IP address and information relating to your computer, tablet or mobile phone is recorded via social plug-ins. It is also possible that the respective service providers use cookies.

You should instead familiarise yourself with the scope and purpose of the collection and processing of users' personal data directly on the website of the specific social network. There you will also find information about your data protection rights and your privacy settings:

a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA.

https://en-gb.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0

b) Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA.

https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect

c) YouTube LLC., 901 Cherry Ave., San Bruno, CA 94066, USA.

https://policies.google.com/privacy?hl=en=de

d) Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA.

https://help.pinterest.com/de/guide/all-about-pinterest

§ 7 Hyperlinks

Our websites may contain links to the websites of breeders we work with, satisfied corporate clients (legal entities, etc.) or advertisers, which in turn may contain links to our websites. If you use a link from any of our websites, please note that these linked websites have their own privacy policies and we cannot accept any responsibility for the cookies used by these websites or the processing of personal data collected by these third parties. Please check the privacy policy of this website before submitting personal data to this website.

§ 8 Your rights as a data subject

If any natural person's personal data is processed, he or she becomes a "data subject" within the meaning of the GDPR. This Regulation grants each data subject the following rights (among others):

The right to obtain confirmation as to whether or not personal data concerning you are being processed (Article 15 GDPR). Under this provision, you can request information about the purpose of the processing of your personal data, what specific data about your person is processed by the processor, to whom it is provided, in particular information about recipients in third countries or international organisations. You will find out for how long your personal data is to be stored and, if this cannot be determined in advance, what criteria are used to determine this period. On the basis of this provision, you are entitled to request the rectification or erasure of your personal data or the restriction of its processing or to object to this processing. You have the right to lodge a complaint with the supervisory authority, to request any information about the source of the personal data, unless it is obtained from natural persons (their subjects) and the existence of automated decision-making, including profiling, or meaningful information regarding the process used to process it.

Under Article 16 of the GDPR, you can request immediate correction of inaccurate personal data or completion of the data.

In the event that the specific processing of your personal data is not necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest and/or for the establishment, exercise or defence of legal claims, you may request the erasure of the personal data you have provided to us in accordance with Article 17 of the GDPR.

In the event that you are not satisfied with the erasure of your personal data due to the need to preserve it for the establishment, exercise or defence of legal claims, but at the same time believe that the processing of your personal data is unlawful or that the data is inaccurate (and we no longer need the data), you may request a restriction of the processing of your personal data pursuant to Article 18 GDPR. You are also entitled to the same if you have objected to the processing in accordance with Article 21 GDPR.

Pursuant to Article 20 GDPR, we are obliged to transmit the personal data you have provided to us to you in a structured, commonly used and machine-readable format. Alternatively, you can request that we transfer it to another controller.

Article 7(3) of the GDPR allows you to withdraw your consent to the processing of your personal data at any time. They can then no longer process your personal data.
You can also file a complaint directly with the supervisory authority, which in our case is the Office for Personal Data Protection - https://uoou.gov.cz/, pursuant to Article 77 of the GDPR.
You can also submit a complaint to us. Please write to Ms. Dvořáková at the email address listed in Article 2 and Article 12 of this Policy or at the address of our registered office (see Article 1).

§ 9 Right to object

If the processing of your personal data is carried out on the basis of Article 6(1)(e) or (f) of the GDPR and you do not consent to it, the provisions of Article 21 of the GDPR (as explained above) give you the right to object to such processing.

You may also exercise your right to object if your personal data is processed for the purpose of carrying out direct marketing.

Please address any objections to Ms. Dvořáková and Ms. Blahová and send them to their email address: petsyogaprague@gmail.com

§ 10 Data security and security measures

We are committed to protecting your privacy and treating your personal data confidentially. To prevent the manipulation, loss or misuse of stored data, we implement extensive technical and organisational measures, which are regularly checked and adapted to technical progress.

We would like to inform you that due to the structure of the Internet, it is possible that the data protection rules and the above security measures may not be observed by another person or institution, for which we are not responsible. In particular, unencrypted data, e.g. if sent by e-mail, may be read by a third party. We have no way of technically preventing this problem. It is the responsibility of the user to protect the data he provides against misuse by encryption or any other appropriate means.

In Prague on 15. 2. 2024

Yorkmut