Privacy Policy (GDPR)

1. Data Controller

The controller of your personal data is:

Yogaspace s.r.o.
Company ID: 24207608
Registered office: Nad Smetankou 225/2, 190 00 Prague 9, Czech Republic
Registered with the Municipal Court in Prague, File No. C 188685

We operate the websites www.yogaspace.cz and www.yogaspace.eu.

Contact details: Email: yoga@yogaspace.cz , Tel: +420 776 678 999

2. What personal data we process and why

a) Provision of services and contract performance

We process personal data such as billing details, email address, phone number and, where applicable, postal address for the purpose of:

• registrations and class bookings

• issuing accounting documents

• delivery of purchased services and products

Legal basis: performance of a contract

b) Accounting

Billing data are stored for 10 years following the end of the relevant tax period, in accordance with applicable legal obligations.

Legal basis: legal obligation

c) Marketing communications

• existing customers: based on our legitimate interest, for 5 years FROM `the` last purchase

• non‑customers: only based on consent, for 5 years FROM `the` date consent was granted

Consent may be withdrawn at any time via the unsubscribe link included in every email.3. Cookies

We use:

• essential cookies necessary for the proper functioning of the website

• analytical and marketing cookies based solely on your consent

You may manage or change your cookie preferences at any time via the cookie banner.

4. Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.

5. Recipients of personal data

Personal data may be shared with the following processors:

• Emocio s.r.o. – website administration

• SmartEmailing, a.s. – newsletter distribution

• MOZYTA s. r. o. (Slovakia) – Sportimea booking system

• Česká pošta, s. p. – delivery services

• Google LLC – analytics tools (Google Analytics)

All processors are contractually bound to comply with GDPR requirements.

6. Transfers outside the EU

When using Google services, personal data may be transferred to third countries. Such transfers are carried out in accordance with GDPR, based on standard contractual clauses and additional safeguards.

7. Automated decision‑making

We do not carry out automated individual decision‑making or profiling within the meaning of Article 22 GDPR.

8. Your rights

You have the right to:

• access your personal data

• rectification or erasure

• restriction of processing

• data portability

• object to processing

• lodge a complaint with the Czech Data Protection Authority