PERSONAL DATA PROTECTION
In YOGA IN CRETE (hereinafter the “Company”) we care about the protection of your personal data and we wish to be open and transparent about the way they are processed.
The personal data the user voluntarily provides anywhere on our Website are solely intended to ensure the functioning of the services provided and the legitimacy of the transactions concerned and may not be used by any third party without complying with the provisions of the General Data Protection Regulation 2016/679 (GDPR), the national, community and international law on the protection of individuals from the processing of personal data as currently in force.
The personal data controller in accordance with the applicable legislation is the sole proprietorship Kladakis Georgios with the distinctive title “YOGA IN CRETE” which is headquartered in Piraeus at 98 Karaiskou st., with TIN 063751032
e-mail for personal data issues: firstname.lastname@example.org
To process your data as described below, the company relies on the following legal bases:
- Execution of contract: In order for the visitor/user-customer to book for yoga classes, it is necessary to process the personal data provided by him/her when signing up and registering his/her reservation on the participation form and the recording of his/her transactions.
- Legitimate Interests: The processing of personal data is necessary to improve the company’s services (processing of statistics and non-identifiable data), to detect fraud attempt and to safeguard the legitimate interests of the company.
- Consent – assent: Customers are required to give their explicit consent to the following processing purposes: sending of informative / promotional messages.
1.1 Information, processing and processing purposes:
YOGA IN CRETE informs the visitor / registered user and the visitor / registered user acknowledges that s/he is aware of the following:
a) Processing of Personal Data: The company will process the personal data of the visitor/ registered user, as declared by him/her when completing his/her details in the reservation form, in order to complete his/her participation in the yoga lessons. Furthermore, and provided that the visitor / registered user has given his/her consent, the company may process his/her personal data to send information and promotional messages about Yoga and any lessons s/he may wish to participate in.
b) Online reservation for yoga lessons, Personal Data Type and Processing Purposes:
b.1) Basic processing
The user/customer has the option of choosing 2 ways to complete an online reservation and to state his/her personal data:
As a visitor: In this case, the visitor’s / customer’s personal data will be retained in the company’s records until the completion of his/her lessons, except for transaction data for tax purposes, and their processing will concern the sole purpose of executing the sales contract.
As a registered user: In this case, the customer / user has created a user account at www.yogaincrete.com and their personal data will be retained in the company’s records until the user requests their deletion. Once a year the company will ask the user/customer to confirm the correctness of the data it keeps and to update them, in case there are any changes. The user/customer may at any time change or correct his/her data by sending an email to email@example.com with his/her request.
In order to make any transaction through www.yogaincrete.com and to make reservations for company’s lessons, the following are requested:
- full name,
- contact phone number
- customer’s e-mail address
- city and
- country of origin.
The credit card details are not stored in the company’s storage media during the transaction but are registered directly in a secure environment of the co-operating bank (EUROBANK) that has undertaken the routing of the cards.
The purpose of the basic data processing is to execute the contract and to complete the specific reservation, to communicate with the customer-user and to send informative messages regarding the stages of the processing of the reservation, to provide clarifications about the reservation and generally the information for lessons s/he has attended and the confirmation and identification of the user-customer in all the necessary circumstances. The visitor / registered user is informed that the provision of the above mandatory personal data as well as the details of his/her transactions are necessary and constitute a prerequisite for the proper implementation of the services’ contract. For this reason, the user’s-customer’s consent is not required for this particular processing.
Each user-customer who uses www.yogaincrete.com is informed that his/her personal data regarding the receipt and execution of the reservation as well as queries regarding the services of yogaincrete.com and the reservations for yoga lessons will be processed for the purpose of serving the users-customers by both the competent employees of the company and the third party recipients and/or those processing on its behalf in the course of the execution of a reservation. These third-party recipients are providers of special fitness services, tour operators and tourist accommodations with which the company cooperates and which are subject to the special strict conditions of processing of personal data that have been agreed with the company as the Controller. The company YOGA in CRETE requires that its employees, website maintainers and third-party partners take all necessary technical and organizational measures (including appropriate policies and procedures to prevent disclosure of the personal data of its visitors / registered users-customers that process and hold and apply procedures of management and processing of personal data in a manner that is lawful and protect them in accordance with the GDPR).
b.1.1.) Excursion organizing
In this case, the visitor’s/ customer’s personal data will be retained in the Company’s records until the service selected has been completed, except for transaction data for tax purposes, and their processing will concern the sole purpose of executing the sales contract.
In order to be able to organize your excursion through www.yogaincrete.com and to realize the yoga lessons at the destination you choose, the following are required:
- the full name
- the contact phone number
- the customer’s e-mail address
- the price range
- your stay
- the type of diet you follow
- the meals you desire
- the destination
- your Level
- the number of people
- the days of stay
- day of arrival and departure
- the kind of Yoga
- any additional services you desire
- the language and
- your transportation
The purpose of the data processing is the expression of interest from the visitor/ customer for the execution of the contract and the completion of the particular excursion, the communication with the user-customer and the sending of informative messages concerning the stages of the excursion, the provision of clarifications related to the excursion and the confirmation and identification of the user-customer in all the necessary circumstances. The visitor / registered user is informed that the provision of the above mandatory personal data constitutes a prerequisite for the proper implementation of the services’ contract, which in this particular case is the organization of an excursion with Yoga lessons. For this reason, the user’s-customer’s consent is not required for this particular processing.
Each user-customer who uses www.yogaincrete.com is informed that his/her personal data regarding the organizing of an excursion as well as queries regarding the particular services of yogaincrete.com will be processed for the purpose of serving the users-customers by both the competent employees of the company and the third-party recipients and/or those processing on its behalf in the course of organizing the excursion. These third-party recipients are travel agencies and internet service providers, with which the company cooperates and which are subject to the special strict conditions of processing of personal data that have been agreed with the company, as the Controller. The company YOGA in CRETE requires its employees, website maintainers and third-party partners to take all necessary technical and organizational measures (including appropriate policies and procedures to prevent disclosure of the personal data of its visitors / registered users-customers that process and hold and implement procedures of management and processing of personal data in a manner that is lawful and protect them in accordance with the GDPR).
No other processing or transmission of users’-customers’ data will be made by the company except for the processings under b.2 below for which the company has obtained the prior consent of the users-customers or if required by the Law or competent supervisory or judicial authority.
b.2) Consent requiring processing
b.2.1) In order to send the registered user-customer informative and promotional messages from www.yogaincrete.com, the registered user/customer must have previously given his/her explicit consent.
The Purpose of this processing of the registered user’s – customer’s data is to send informative promotional messages of the company and/or its third-party partners to the registered user-customer, to provide special offers and discounts on www.yogaincrete.com, to provide new or alternative services, to communicate forms of www.yogaincrete.com
You may at any time withdraw this consent and not receive such communications from www.yogaincrete.com by sending your request via e-mail to the email address firstname.lastname@example.org.
b.2.2.) YOGA IN CRETE also informs its registered user/customer that it can process his/her personal data and conduct researches to improve its provided services to the registered users/customers. Within this process, the company has the ability to record their needs, to take the necessary steps of promoting its appropriate services in order to improve the management of its clientele and to promote its services. In order for registered users/customers to receive personalized offers and updates based on their reservations they have made on the company’s website, they should give their consent to the analysis of their consumer behavior (profiling) based on purely automated processing, and in particular of the following data generated by user’s-custome’s transactions:
- Services s/he has purchased at www.yogaincrete.com
- Frequency of visits at www.yogaincrete.com
- Services s/he has put in his/her basket, or in the favorites list at www.yogaincrete.com
- Demographics s/he has declared at www.yogaincrete.com
- Years of remaining a registered user-customer at www.yogaincrete.com
- Participation in promotion steps
- Expenditure incurred on purchase at www.yogaincrete.com
- Reservation History at www.yogaincrete.com
The purpose of this particular processing is to optimize the purchasing experience of registered users-customers, their personal reward, the communication of services tailored to the needs of the customer base of yogaincrete.com, the receipt by the registered users-customers of customized offers and updates that relate to them directly as well as the invitation to participate, with or without reward, in researches for the formation of the yogaincrete.com website, for the evaluation of market trends and the evaluation of the services on the basis of the purchases s/he has made.