If you are my customer, newsletter subscriber, or website visitor, you entrust me with your personal data. I am responsible for their protection and security. Please familiarize yourself with the data protection policy, principles, and your rights in accordance with the GDPR (General Data Protection Regulation).
Who is the data controller?
I am MUDr. Anna Palgutová, Kaštanová 459, 25168 Sulice – Želivec, and I operate the website www.palgutova.cz. I process your personal data as the data controller, which means I determine how your personal data will be processed, for what purpose, for how long, and I select any additional processors who will assist me in processing the data.
Contact details
If you wish to contact me during the processing, you can reach me at the phone number (+420)774870999
or by e-mail:
We declare
I declare that as the data controller of your personal data, I fulfill all legal obligations required by the applicable legislation, especially the Personal Data Protection Act and GDPR, and therefore:
I will process your personal data only on the basis of a valid legal reason, primarily legitimate interest, performance of a contract, legal obligation, or consent granted.
I will fulfill the information obligation according to Article 13 of the GDPR before starting the processing of personal data.
I will enable and support you in exercising and fulfilling your rights under the Personal Data Protection Act and GDPR.
Scope of personal data and purposes of processing
Zpracovávám osobní údaje, které mi svěříte sami, a to z následujících důvodů (pro naplnění těchto účelů):
· Provision of services, fulfillment of the contract
We require your personal data, such as your email address, for the fulfillment of the contract (e.g., sending access details to the application, delivering an online course, providing goods, etc.).
· Accounting
If you are a customer, we need your personal data (billing information) to fulfill the legal obligation of issuing and recording tax documents.
· Marketing – sending newsletters
We use your personal data (email and name), gender, what you click on in the email, and when you most frequently open it for the purpose of direct marketing – sending commercial communications. If you are our customer, we do so based on legitimate interest, as we reasonably assume that you are interested in our updates, and this will last for 5 years from the last order.
If you are not our customer, we send newsletters based on your consent, for a period of 5 years from when the consent was given. In both cases, you can withdraw this consent by using the unsubscribe link in each email sent.
· Advanced marketing based on consent
Only with your consent can we send you inspiring offers from third parties or use your email address, for example, for remarketing and targeted advertising on Facebook, for a period of 5 years from the consent being given. This consent can, of course, be withdrawn at any time through our contact details.
We retain your personal data for the duration of the statute of limitations, unless the law requires a longer retention period or we have specified otherwise in specific cases.
Cookies
When browsing my website, I record your IP address, how long you stay on the page, and the referring website. The use of cookies for website traffic measurement and customizing the display of the website is considered a legitimate interest of the data controller, as I believe it allows me to offer you even better services.
Cookies for advertising targeting will be processed only based on your consent.
You can also browse my website in a mode that does not allow the collection of personal data. You can disable the use of cookies on your computer.
Security and protection of personal data
I protect personal data to the maximum extent possible using modern technologies that are appropriate to the level of technical development. I protect it as if it were my own. I have adopted and maintain all possible (currently known to me) technical and organizational measures to prevent the misuse, damage, or destruction of your personal data.
Sharing personal data with third parties
My employees and collaborators have access to your personal data.
To ensure specific processing operations that I am unable to handle on my own, I use the services and applications of processors who can protect the data even better than I can and specialize in the relevant processing.
These are the providers of the following platforms:
Accounting firm
It is possible that in the future I may decide to use additional applications or processors to facilitate and improve the processing. However, I promise that in such cases, I will demand at least the same level of security and quality of processing from the processors as I do for myself.
Transfer of data outside the European Union
All personal data processing will be carried out within the European Union.
Your rights regarding personal data protection
In connection with personal data protection, you have a number of rights. If you wish to exercise any of these rights, please contact me via email at .
You have the right to information, which is provided by this informational page with the personal data processing principles.
Thanks to the right of access, you can request at any time, and I will provide you within 30 days with information on which of your personal data I process and why.
If something changes or you find your personal data to be outdated or incomplete, you have the right to update and modify your personal data.
You can exercise the right to restrict processing if you believe that I am processing your inaccurate data, if you think the processing is unlawful but do not want to delete all the data, or if you have objected to the processing. You can limit the scope of personal data or the purposes of processing. (For example, by unsubscribing from the newsletter, you restrict the purpose of processing for sending commercial communications.)
Right to data portability
If you would like to take your personal data and transfer it to someone else, we will proceed in the same way as when exercising the right of access – with the difference that I will send the information to you in a machine-readable format. I will need at least 30 days to process this request.
Right to erasure (right to be forgotten)
Your other right is the right to erasure (right to be forgotten). I don’t want to forget about you, but if you wish, you have the right to this. In that case, I will erase all your personal data from my system, as well as from the systems of all subprocessors and backups. To ensure the right to erasure, I will need 10 days.
In some cases, I am bound by a legal obligation, such as the requirement to keep issued tax documents for the period stipulated by law. In this case, I will delete all personal data that is not subject to another legal obligation. I will inform you via email once the deletion is completed.
Complaint to the Office for Personal Data Protection
If you feel that your data is not being handled in accordance with the law, you have the right to file a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů) at any time. I would appreciate it if you could first inform me of your concerns so I can address the issue and correct any possible mistakes.
Unsubscribing from newsletters and commercial communications
I send you emails with inspiration, articles, or products and services based on my legitimate interest, if you are my customer.
If you are not yet a customer, I send you emails only based on your consent. In both cases, you can unsubscribe from my emails by clicking the unsubscribe link in any email sent to you.
Confidentiality
We would like to assure you that our employees and collaborators who process your personal data are obligated to maintain confidentiality about your personal data and the security measures, the disclosure of which could jeopardize the protection of your personal information. This confidentiality remains in effect even after the contractual relationship with us ends. Without your consent, your personal data will not be disclosed to any other third party.
These personal data processing principles come into effect on December 1, 2021.