General provisions:

The Class, with its registered office in Warsaw (02-592), at ul. Puławska 109b/17, NIP number 8212489895, REGON number 523475474 (hereinafter referred to as "The Class"), which is the owner of the website www.hobayoga.com and operates The Class yoga studio located at ul. Etiudy Rewolucyjna 3 w Warszawie  acts as an administrator pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27/04/2016 (hereinafter referred to as "GDPR") on the protection of natural persons in connection with with the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC, in relation to the personal data of Users who are natural persons. 

 

Data processing and its scope:

Data processing is understood as activities and operations performed on Users' data, including storage or analysis for the purposes of the Website's services.
 

1. 2.1 Account Registration - creating an Account may require the User to provide the following data: Name and Surname, E-mail, Place of birth, Date of Birth, Citizenship, Gender, Mobile phone, Address, NIP, PESEL
   
   2.2 Concluding transactions - The Administrator, as part of the services provided by The Class, may process Users' personal data in order to enable the conclusion of a contract for the sale of services offered by The Class.
   
   2.3 Customer service - The Administrator may process personal data of Users contacting Yoga Beat and using The Class services. The data may be necessary for communication and may be supplemented with personal data from the User Account.
   
   2.4 Reservations, attendance and sale of products - The Administrator, as part of the services provided by The Class, , may process Users' personal data in order to register reservations and attendance at classes, as well as information about products sold by those using the services The Class.
   
   2.5 Data processing by the website - when it is necessary to provide services to the User or constitutes a legitimate interest of the Administrator or third parties, the Administrator is entitled to process such data as: User's IP address, location, time of access to the Website, URL address of the page previously visited by User (referrer link), User's software and hardware parameters, mobile device identification number and other data about devices and systems. The processing of the above information takes place when using the Website, the Website application and the services of external entities.
   
   2.6 Competitions - The Administrator may process data in order to conduct a competition and select its winners.

Purpose of data processing                                                                                                                                                                                   Users' personal data are processed by the Administrator in order to enable Users to use the Website, including in particular performing the following activities:

• setting up and managing a User Account or Accounts,

• enabling access to services, including access to the premises managed by Yoga Beat, including registration of entrances and exits from the facility and making reservations for services

• registering the sale of products and services purchased by the customer

• enabling full use of the Website, including the purchase of season tickets or access to services

• providing support for the User's Account and transactions, including solving technical problems,

• contacting Users, including for purposes related to the provision of services, User service, permitted marketing activities, through available communication channels, in particular e-mail and telephone,

• conducting research and analysis of the Website, among others, in terms of the functioning of the platform, improving the operation of available services or estimating the main interests and needs of visitors,

• ensuring the security of services provided electronically, including enforcing compliance with the Regulations and counteracting fraud and abuse,

• handling User complaints,

• conducting direct marketing of the Administrator's own services or products

• handling Users' requests submitted in particular to the service department and via the contact form,

• organization of loyalty programs, competitions and promotional campaigns in which Users can take part,

• performance of obligations arising from legal provisions, including tax or accounting regulations,

• ensuring the handling of payment services, the execution of commission payments for transactions on the Website, debt collection,

• conducting court, arbitration and mediation proceedings,

• statistical,

• accountants,

• archiving,

• ensuring accountability.

Data sharing
 

1. 4.1 Personal data is partially processed through an external system for operating sports facilities - eFitness provided by eFitness Sp. z o. o., ul. Goździkowa 6, 60-175 Poznań. The Class has a separate www account. system dedicated to The Class customer service. Pursuant to the contract with the eFitness system provider, z o. o. may process personal data only in the scope of operation and maintenance of the Yoga Beat customer management system. By providing personal data to The Class, the user consents to their processing via the eFitness system.
   
   4.2. The administrator does not transfer personal data to third parties, except for:
    

   • the need to share information about the User with public authorities

   • in the fight against fraud and abuse

   • proceedings related to violation of the law and combating violations of the Regulations.

   4.3. The Administrator may provide third parties with data in anonymized form, which do not identify specific Users, and are used to improve the content displayed on the Website, adjust advertisements and reach Users outside the Website.

Users' permissions
 

1. 5.1. Each User has the right to:
    

   • access to their personal data - the User may request the Administrator to provide a catalog of personal data processed about himself,

   • objection to data profiling - the User may request the Administrator to disable profiling (personalization) of the Website's offer and related marketing activities,

   • rectification, deletion or limitation of processing, data transfer, lodging a complaint to the supervisory authority and the right to withdraw consent at any time without affecting the lawfulness of processing which was made on the basis of consent before its withdrawal

   
   If you exercise the right to access your personal data, rectify, delete, limit processing, object to their processing, request data transfer or not be subject to a decision based solely on automated data processing - without undue delay, no later than month from the receipt of the request, information will be provided about the actions taken in connection with the User's request. Implementation of the data transfer request is free of charge, however, in accordance with the provisions of the GDPR, the Administrator may charge a fee in a reasonable amount for providing the data subject or refuse to exercise the right in the case of:
    

   • request another copy of personal data subject to processing,

   • manifestly unjustified demands,

   • excessive requests, in particular due to their continuous nature.

   The amount of the charged fee referred to above will be determined individually, will be reasonable and its amount will take into account the administrative costs of providing information, communication or taking the requested actions that the Administrator had to bear.
   
   5.2. Providing data by the User is a contractual requirement. If the User does not provide the required personal data, selected functionalities of the Website may be unavailable to the User (e.g. the ability to register, place orders, contact with other Users).
   
   5.3. The User may contact the person supervising the processing of personal data by the Administrator by electronic means at the following e-mail address: hi@hobayoga.com

Data safety                                                                                                                                                                             The data administrator takes care of the security of the shared data. These data are particularly protected and secured against access by unauthorized persons. Communication between the Website and Users is secured with the SSL encryption protocol on pages containing personal data. 

Other                                                                                                                                                                                                                            The Administrator undertakes to store the entrusted personal data of Users until they withdraw their consent or submit an objection. After revoking the consent, for a period of time corresponding to the period of limitation of claims that may be raised by the data controller and which may be raised against the data controller.