Privacy policy

Privacy policy

by BODY CENTRUM, Ltd. based on The General Data Protection Regulation (EU) 2016/679 (GDPR)

1. Personal data controller

The personal data controller is BODY CENTRUM, Ltd., ID 26215420 registered at the office at  Nebovidy 165, the Czech Republic, Postal Code 66448, also available at the premises of Vodní 16, CZ-60200 Brno, e-mail info@bodycentrum.cz.

2. Type of data processed

We only process the personal data provided by you when ordering goods, visiting our website or store, subscribing to business information, communicating by phone and the data you have sent to us via e-mail. The most common personal data we process: name and surname, address, e-mail, telephone, IP address, photos from promotions, competitions and presentations.

3. Use of personal information

We process personal data on the legal bases. These are primarily the fulfillment of the concluded contract and fulfillment of obligations related to the keeping of accounting and tax records. We also use the data for marketing purposes, for sending business messages and newsletters, sending information about upcoming events, or for sending other information that you have subscribed to. We may also use them to improve our website, customize its content (cookies), process poll results, contests, promotions, etc.

4. Who can access your personal data

We pass on your personal data to other processors primarily to fulfill our mutual obligations. These are entities that are involved in the delivery of our goods and services, providing transport services, payments, accounting and tax services. They also include accounting software providers, operators and operators of our website and e-shop, and marketing and analytics services relating to the traffic to our websites and the adaptation of their content.

We declare that we have taken all appropriate technical and organizational measures to keep your personal data safe, secure data storage as well as physical data storage. We declare that only persons authorized by us have access to personal data. We do not pass on personal data outside the EU.

5. Retention period of personal data

We process personal data for the time necessary to exercise the rights and obligations arising from the contractual relationship and the statutory archiving period related to the accounting records. Usually this is for 10 years, or according to the expiration of your consent, if granted.

6. Rights related to the protection of personal data

Under the conditions set out in Regulation (EU) 2016/679 (GDPR), you have:

• the right to access your personal data pursuant to Article 15 of the GDPR,
• the right to rectify your personal data or restrict their processing,
• the right to erasure pursuant to Article 17 of the GDPR,
• the right to object to the processing of personal data pursuant to Article 21 of the GDPR,
• the right to portability of their personal data under Article 20 of the GDPR,
• the right to revoke your consent to the processing of personal data in writing or electronically to the address or e-mail of the controller referred to in Article 1 of this Policy,
• the right to file a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated.

This Policy is valid from 31 August 2018