I. Introductory provisions
- LatinArte s.r.o., Reg. no.: 05554713 , VAT ID: CZ05554713 , registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 265756 (hereinafter referred to as "LatinArte"), provides services in the field of dance lessons, dance holidays and organizing cultural and social events and additional sale of goods (hereinafter also referred to as "services"). LatinArte also offers its services and products under the trademark "Hanser Estenoz" (hereinafter also referred to as "Hanser"). LatinArte hereby informs natural persons - subjects of personal data who enter into business relations with LatinArte about the collection and processing of personal data, the treatment of personal data and the privacy policy (hereinafter also referred to as "Policy"). The purpose of this Policy is to provide personal data subjects with the necessary information, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).
- The Principles cover the following areas:
- What personal data we will process;
- For what purposes and how we will process personal data;
- To whom the personal data may be transferred;
- For how long we will process the personal data;
- What are the rights of data subjects in relation to data protection.
- If you need any part of the text explained, advised or to discuss further processing of your personal data, you can contact us at any time at the following e-mail address info@hanser.cz
- For the purposes of this Policy:
The controller is the legal entity that alone or jointly with others determines the purposes and decides how personal data will be processed, LatinArte s.r.o., ID: 05554713 , VAT: CZ05554713 , registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 265756
The data subject is a natural person, whether or not an entrepreneur, whose personal data has been transmitted to and processed by LatinArte and who is a client of LatinArte.
Personal data is any information about an identified or identifiable natural person as a data subject (for example, name, residence, telephone number, email, etc.). A detailed summary of these will be provided below. - When processing personal data, LatinArte complies with the following legal regulations, in particular the Personal Data Protection Act No. 101/2000 Coll., Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as the "Regulation"), Act No. 563/1991 Coll, on Accounting, as amended, Act No. 89/2012 Coll., Civil Code, Act No. 634/1992 Coll., on Consumer Protection, or in accordance with other legislation, and ensures that the principles of data processing pursuant to Article 5 of the GDPR are fulfilled and complied with.
II. Scope of processing of personal data
- LatinArte processes the following categories of personal data provided by the subject in connection with the ordering of services, the conclusion of a contract and the performance of services, including in connection with the www.kurzysalsa website. cz, or in connection with a request to receive newsletters: name and surname, address, email, telephone, parent's contact details, information about studies, billing and transaction data (this includes in particular information appearing on invoices, agreed billing terms and payments received), date of birth (in accordance with the principle of minimisation, this applies in particular to youth clients), information on medical incapacity to attend lessons (only in the case of cancellation and withdrawal from the service provided and explicit consent to processing), information from mutual communication (information from emails or other contact forms. The personal data collected may also include any photographic records of the subject in normal documentary quality taken at the premises of the courses and events.
- Latin Arte only processes personal data that the client explicitly discloses. It does not further verify information about its clients.
III. Purposes and periods of processing of personal data
- The purpose of the processing of personal data is to ensure the proper conclusion and subsequent fulfillment of the contractual commitment to the services and products provided under the Hanser brand (such as participation in dance lessons, cultural and social events, proper instruction, etc.) within the meaning of Article 6(1)(b) GDPR.
- Personal data is processed during the negotiation of the contract for Hanser services and products, for the duration of the contractual relationship and subsequently for 5 years after the end of the respective service. The provision of this personal data is a necessary condition for the conclusion of the contract.
- Furthermore, LatinArte is subject to legal obligations arising from the contractual obligation, therefore personal data is also processed for this purpose within the meaning of Article 6(1)(c) GDPR. These include, in particular, accounting, tax obligations (for example, pursuant to Act No. 563/1991 Coll., on accounting, under which invoice data is processed and stored, or pursuant to Act No. 235/2004 Coll., on value added tax) and archiving obligations, the provision of assistance to administrative authorities, police, courts, etc. These personal data will always be processed for the legally stipulated period of time.
- In accordance with the assessment of overriding interests, consequences and impact, we further process personal data within the framework of LatinArte's legitimate interests, including the protection of LatinArte's rights and legally protected interests.
- We find a legitimate interest in the right to effective defence in the event of a dispute. The data is processed for a period of 5 years from the end of the provision of the service under the contract and the retention period is extended by the period for which the dispute is conducted.
- The legitimate interest is also the sending of commercial communications in accordance with Section 7(3) of Act No. 480/2004 Coll., on certain information society services and in accordance with point 47 of the GDPR Regulation. LatinArte sends its clients information about related similar services (additional lessons, balls, dance and cultural events, follow-up courses), in particular during the period of the service and subsequently for a maximum of 5 years after the end of the service.
IV. Legal basis for the processing of personal data
The legal basis is provided by Article 6(1) of the GDPR, according to which processing is lawful if it is necessary for the performance of a contract, the fulfilment of a legal obligation, the protection of legitimate interests or the processing is based on consent. The individual titles of processing are described above. If the client is interested, it is possible to request a more detailed overview of the rights described below.
V. Transfer of personal data to third parties
- LatinArte is obliged to provide personal data to public authorities, such as tax authorities, courts, law enforcement authorities or capital market supervisory authorities.
- Personal data may also be passed on to subcontractors and processors for the performance of the contract, such as postal and courier service providers (sending information letters, invitations to paid classes or events, etc.), accountants, law firms, graphic design studios, course instructors. The transfer of personal data will always be in accordance with the principle of minimisation and only for the specific purpose expressed.
- LatinArte will not transfer clients' personal data to other entities for the purpose of offering third party services.
- Personal data will not be transferred to countries outside the European Union or the European Economic Area or to any international organisation.
VI. Period of processing of personal data
- The duration of the processing of personal data is set out in Article III of this Policy. However, in accordance with the principle of transparency and clarity of the transmission of information, it can be summarised as follows:
a) personal data will be processed for the period for which the services or other performance will be provided or for the period necessary to comply with archiving obligations under applicable law, such as the Accounting Act, the Archives and Records Act or the Value Added Tax Act.
b) Personal data will be processed and stored for at least the duration of the contract. Certain personal data required, e.g. for tax and invoicing obligations, will be stored for a longer period of time, generally 5 or 10 years (in particular in accordance with the relevant provisions of the Accounting Act or the Value Added Tax Act), starting from the year following the occurrence of the stored fact.
c) Personal data necessary for the exercise of LatinArte's legitimate interests will be retained for a maximum of five (5) years from the end of our contractual relationship.
d) Personal data processed for marketing purposes (newsletter, promotional materials) will be retained for a maximum of five (5) years from the date of acquisition.
e) Personal data will never be kept longer than the statutory maximum. After the expiry of the archiving period, the personal data will be securely and irretrievably destroyed so that it cannot be misused.
VII. Origin of personal data
- LatinArte obtains personal data directly from the data subject, in particular from completed forms, mutual communication or personally concluded contracts. In addition, personal data may also come from publicly available sources, registers and records, such as the commercial register, professional registers, etc. However, this is exceptionally the case (especially when correcting the data provided, fulfilling legal obligations, cooperating with public authorities or other activities within the scope of legitimate interests).
- If a situation arises where LatinArte obtains personal data from a person other than the data subject in connection with the submission of a partner application on behalf of a couple or the application of a child and the indication of the data of his/her legal guardian, the person completing the application will already be instructed as part of the application to enter the personal data of all subjects with their cooperation or at least with their knowledge and consent.
- LatinArte strives to prevent unauthorized use of personal data and is always transparent. The person filling in the application form is obliged to "pair" the data submitted for the participation of the pair or the data for the participation of minors properly and truthfully. Such information may be verified by LatinArte in communication with the parents or other member of the couple.
VIII. Related processing information
- If the subject does not provide his/her personal data, it is not possible to conclude the relevant contract with LatinArte and to provide the performance resulting from it. In this context, the personal data contained in the application form is necessary for the provision of a specific service. The data within the meaning of Article VI.1.d) of this Policy is voluntary and is not a condition for the conclusion of a contract.
- The subject is obliged to provide only true and accurate personal data. The subject is responsible for the correctness, accuracy and truthfulness of the personal data provided. LatinArte is not responsible for the accuracy of the data provided.
- Personal data is and will be processed in printed and electronic form and LatinaArte does not carry out automated decision-making or profiling.
IX. Rights of data subjects related to processing
- LatinArte informs its clients as data subjects that they have the following rights in relation to the protection of personal data:
(a) request access to personal data
The data subject is entitled to request information on whether or not his or her personal data is processed and, if so, to access information on the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients, the period of storage of the personal data, information on his or her rights (rights to request rectification or erasure, restriction of processing, to object to such processing), the right to lodge a complaint with the Data Protection Authority, information on the source of the personal data, information on whether automated decision-making and profiling is taking place and information concerning the procedure used as well as the meaning and expected consequences of such processing, information and safeguards in the event of transfer of personal data to a third country or an international organisation. The participant has the right to be provided with copies of the personal data processed. However, the right to obtain such a copy shall not adversely affect the rights and freedoms of others.
(b) to correct the personal data provided
If, for example, there has been a change of residence, telephone number or other fact which may be considered personal data, the data subject has the right to request the controller to correct the personal data processed. In addition, the data subject has the right to have incomplete personal data completed, including by providing an additional declaration.
(c) to delete the personal data provided
In certain specified cases, the data subject has the right to require the controller to erase the personal data. Such cases include, for example, that the data processed are no longer necessary for the purposes mentioned above. The controller erases personal data automatically after the expiry of the period of necessity, but the data subject may contact the controller at any time to make a request. The request will then be subject to an individual assessment (despite the right to erasure, the controller may have an obligation or legitimate interest to retain the personal data) and the data subject will be informed in detail about the processing of the request.
(d) to limit the processing of personal data
The controller processes personal data only to the extent strictly necessary. However, if the data subject has the impression that the controller, for example, goes beyond the purposes for which the personal data are processed as set out above, he or she may request that his or her personal data be processed solely for the strictly necessary legitimate purposes or that the personal data be blocked. The request will then be subject to an individual assessment and the data subject will be informed in detail about its processing.
e) lodge a complaint with the Office for Personal Data Protection
The data subject may at any time contact the supervisory authority, the Office for Personal Data Protection, located at Pplk. Sochor 27, 170 00 Prague 7, website https://www.uoou.cz/, with a complaint regarding the processing of personal data.
(f) the right to transfer personal data to another controller
Should the subject wish LatinArte to transfer and provide the personal data to another controller or another company, then LatinArte, as the controller, is obliged to transfer the personal data that it would process on the basis of a concluded contract, or with consent and in an automated manner, in the appropriate format, to the designated subject, provided that no legal or other significant obstacles prevent it.
(g) the right to object to the processing of personal data
In the event that the data subject becomes aware or believes that the controller is processing personal data in breach of the protection of private and personal life or in breach of the law (provided that the personal data are processed on the basis of public or legitimate interest, or are processed for direct marketing purposes, including profiling, or for statistical purposes or purposes of scientific or historical interest), he or she may contact the controller and request an explanation or rectification of the situation. An objection may also be raised directly against automated decision-making and profiling. - Individual rights can be exercised by sending a request to info@hanser.cz or in writing to LatinArte s.r.o., Budečská 974/6, 120 00 Prague 2.
- The requirements for the rights in paragraph 1(c) and (d) of this Article cannot be fully satisfied in some cases because of the purposes set out in Article III of this Policy. However, in the case of the purposes set out in Article III(4), all the rights set out in paragraph 1 of this Article may be exercised.
- If the data subject considers that the LatinArte carries out processing of his or her personal data in violation of the protection of his or her private and personal life or in breach of applicable law, in particular if the personal data are inaccurate with regard to the purpose of the processing, he or she shall be entitled to:
a) request an explanation from LatinArte by email to info@hanser.cz,
(b) object to the processing and request, by e-mail sent to info@hanser.cz, that LatinArte ensure that the situation has been remedied (e.g. by blocking, correcting, supplementing or destroying the personal data). LatinArte shall immediately decide on the objection and inform the data subject. If LatinArte does not meet the objection, the data subject has the right to contact the Data Protection Authority directly. This provision is without prejudice to the right to bring a complaint directly to the Data Protection Authority. - LatinArte will respond to the objection and provide information on the action taken as soon as possible, but no later than one month. If necessary, and in particular in view of the number of requests or the complexity, it shall be entitled to extend the time limit by a further two months. The subject shall be informed of any extension and of the reasons for it.
- If the data subject exercises any of the rights set out above, LatinArte has the right to request proof of the data subject's identity. It is recommended to send requests from the subject's email address that was previously forwarded to LatinArte. If the request is made in a different form or from a different email address, LatinArte has the right to request additional verification by replying to the verification email. In the event that the applicant does not prove his/her identity within 14 days of the verification email, his/her request to exercise rights may not be accepted.
- The controller is entitled to charge a reasonable fee for the administrative costs involved in the case of repeated and unjustified requests for the provision of a physical copy of the personal data processed.
XI. Final Provisions
- All legal relations arising in connection with the processing of personal data are governed by the law of the Czech Republic, regardless of where the data was accessed from. The Czech courts are competent to resolve any disputes arising in connection with the protection of privacy between the subject and the controller.
- The subject may lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection (www.uoou.cz).
- This Policy shall take effect on 25 June 2024.