CONTENTS
- Definitions and base principles;
- What information related to your personal data is collected by the Website www.diyanatherapy.com in relation to the use it and in what way;
- What are the purposes for processing your personal data;
- Third parties with whom your personal data is shared and the purpose of this sharing;
- Transfer of personal data outside of the European Union;
- What is the duration for storage of personal data that users provide to the Website;
- Your rights in relation to the use of this website and the GDPR regulation;
- Security of the website in view of the storage of personal data;
- Disputes;
- How to contact us.
- DEFINITIONS AND BASE PRINCIPLES
- “Personal data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
- Processing of “personal data” – all activities performed with and upon personal data through automatic or other means. (collecting, recording, storage, adapting, viewing, using, providing access, etc.);
- 3. “We”, “The Coach”, “The Wibsite” – in the present Privacy Policy will refer to the Coach (owner of the Website) and her team;
- 4. “You”, “Customer”, “User” – a natural person whose personal data will be processed by the Website in connection with its use;
- 5. General Data Protection Regulation – A legal act of the European Union regulating the protection of personal data of natural persons
- 6. Agreement – the present document in its entirety.
By clicking on the button indicating that you have read and accepted this Agreement, you agree to the present Privacy Policy, you enter into this Agreement and you are legally bound to it by explicitly consenting that your personal data can be processed by the Website under the terms and conditions and for the purposes stated in this Agreement. Before clicking on the button indicating agreement with the privacy policy, you must have read it carefully and grasped it. If you do not agree with the present Privacy Policy in whole or in part, you are free not to accept it and to discontinue the use of the Website. In order for the Website to function and for you to be able to use it, we need to collect and process certain information provided by you, which by its nature is personal data. You may decide what information you may share but the use of some of the features of the Website may not be available unless you share certain information that may be personal data of its nature. If you do not wish to share such information, please discontinue the use of the Website, if not in its entirety, at least with regards to the use of those functionalities that require the sharing of such personal data.
We are free to change, modify, amend this Agreement without your prior consent, therefore we encourage you to check frequently if any changes have been applied to this Privacy Policy, whose up-to-date version will always be available and easily accessible by you, located in the following location at the website: home page, in the field: footer. In the event of an amendment that is inconsistent with your free will, your account can be deleted immediately by yourself or by notifying us at the following email address: www.clients.diyanatherapy.com. You should be aware that the Website may retain some of your personal data in the event that a statutory legal provision requires so.
In the event of any amendments to this Privacy Policy, the Website declares that those amendments will comply with the legal requirements of the General Data Protection Regulation and your legal rights under the Regulation will in no way be diminished.
- WHAT INFORMATION RELATED TO YOUR PERSONAL DATA IS COLLECTED BY THE WEBSITE IN RELATION TO THE USE OF THE WEBSITE AND IN WHAT WAY
- Your names or GoDaddy credentials;
- 2. Email Address;
- 3. Credit/debit card data, Stripe or Paypal account data;
- Phone number;
- Current age
- Emergency contact
- Your level of stress at the moment of filling in the registration form
- Brain injuries and epilepsy history data
- Issues you encounter in your life
All data that is processed by the Website belongs to natural persons who have reached the age of 18 and are capable of entering into legal agreements.
USE OF GOOGLE ANALYTICS:
Google Analytics (abbreviated GA) is a free web service provided by Google for the compilation of detailed statistics for website visitors and their country of origin. The statistics are collected on the Google server, as the Website has only placed a Javascript code on the webpage of its online platform.
To learn about Google’s Privacy Policy, please visit the following link:
https://policies.google.com/privacy?Hl=en
SOCIAL MEDIA:
We have the right to access your voluntarily provided personal data that is related to your social media account which data are needed in order to gain access to the Website through personal log-in in case your access to the Website is performed through the use of a social network account. The above data will be processed by the Website solely for the purpose of granting you access to the Platform.
IP ADDRESSES:
IP addresses are used to identify the location of the users, the number of visits from different countries, and to block malicious use; and to analyze and improve the services offered through our website, e.g. to provide you with the best navigation experience.
We need this information to provide you with the services, so we delete this information only after you delete your account.
III. WHAT ARE THE PURPOSES FOR PROCESSING YOUR PERSONAL DATA
The purposes for the processing your personal data are the following:
- Create your profile in the Website, being able to log in to the Website; The Website to be able to administer your account, to provide you services, send you any offerings, notifications and any e-mail messages to the contact details you provide;
- Execution of payment transactions in order to provide or obtain the desired service. You understand and agree that we use third party partners in connection with the operation of the Website, which means that your personal data can be transferred to third parties being partners of ours;
- Conduct of a Session with the Coach;
- Submitting your data to the competent authorities if the Coach has reason to believe that a client or other third party may be in danger or could become a victim of a crime, commit a crime or cause the commitment of a crime;
- The sending of emails, messages, notifications, promotional materials, marketing materials by the Website in connection with the activity of the Coach and everything we deem necessary;
- Compliance with all legal obligations to which the Coach is subjected;
- Provision of information and technical support for the provided services;
- Analysis and improvement of our business, for which purpose we can monitor, analyze, sort, categorize your behavior;
- In connection with all legal or technical issues regarding the Website;
- The emergency contact details will only be used in exceptional cases where you are seriously hurt or at serious risk of harming yourself or the others.
- THIRD PARTIES WITH WHOM YOUR PERSONAL DATA IS SHARED AND THE PURPOSE OF THIS SHARING
Access to your personal data is given to the Website as well as the Coach with whom you chose to conduct online Session.
Your personal data may be provided to the competent government authorities in the event that the Coach has reason to believe that a Client or other third party may be in danger or could become a victim of a criminal offense, commit a crime or cause the commitment of a crime.
The Website cooperates with a team of programmers who perform maintenance and technical support of the website. You acknowledge and agree that in order for them to fulfill these obligations, your personal data may be provided to them
Your personal data may be disclosed to third parties only in connection with the fulfillment of the objectives set out in Section III and in connection with the Webiste’s compliance with statutory obligations.
We could however sometimes use third parties to process your personal data – such as payment card processors, the company that provides the maintenance of the website, the company that provides hosting services for the website, and any other third parties, that make possible the technical operation of the Website. You acknowledge and agree that in order for them to fulfill these obligations, your personal data may be provided to them.
The Website may contain links to other websites, services, offers, etc. In the event that you click on such links, you may be redirected to other webpages, and we bear no responsibility for their handling of your personal data. Therefore, in such cases please carefully review the privacy policy of these webpages with regards to the way they process your personal data.
It is possible in case of sale of the website and sale of our business as a whole, merger, consolidation, division, separation, for us to pass your personal data to third parties, and it is possible that the data may be stored and processed under new rules, therefore in such a scenario please check for changes in the privacy policy.
- TRANSFER OF PERSONAL DATA OUTSIDE THE TERRITORY OF THE EUROPEAN UNION
Within the context of the services that we offer to you through this online website, the personal data that you provide to us may be transferred to countries outside the European Union (the “EU”). For example, some of our partners we are working with may be located outside of the EU. In that case, we will undertake steps to ensure that the necessary security measures and adequate protection are in place so that your privacy rights can continue to be protected as set out in this Policy and in accordance with the rules of Chapter V of the General Data Protection Regulation – Transfer of personal data to third countries or international organizations.
If you use our services while you are outside the EU, your personal data may need to be transferred outside of the EU in order to provide you with these services.
- WHAT IS THE DURATION FOR STORAGE OF PERSONAL DATA THAT USERS PROVIDE TO THE WEBSITE
Your personal data that is necessary for creating your account and logging in the Website will be stored for a period of 5 (five) years.
Video and voice conversations between you and the Coach will be neither recorded nor stored or in cases of such action a prior consent shall be obtained by both parties.
At any given moment, you have the option to request the deletion of all your personal data that is stored in the Website by using the following email address: clients.diyanatherapy@gmail.com. However, you must be aware that we may retain some of your personal data in order to comply with our statutory legal obligations.
VII. YOUR RIGHTS IN RELATION TO THE USE OF THIS WEBSITE AND THE GDPR REGULATION
- Right to rectification – You have the right to ask the data controller to correct inaccurate personal data associated with you.
- Right to be forgotten – You have the right to ask the data controller to delete all personal data you have provided to the Website (referred to in Section IV of this Agreement).
- Right to data portability – You have the right to receive the personal data you have provided to the data controller and have the right to transmit it to another data controller without any hindrances.
- Right to object – You have the right to object to the processing of personal data relating to you, and the data controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject
- Right to legal remedy – You have the right to legal or administrative remedy in the event that your rights regarding the processing of your personal data have been violated
- Right to not be subjected to a decision based on automated processing – You have the right not to be the subject of a decision based solely on automated processing, including profiling that produces legal effects concerning you or particularly affects you
- Right to restriction of processing according to Art. 18 of the General Data Protection Regulation.
- Right to object to the processing of personal data for the purposes of direct marketing under Art. 21 of the General Data Protection Regulation.
- Right to access your personal data
- Right to file a complaint to a competent supervisory authority
VIII. SECURITY OF THE WEBSITE IN VIEW OF THE STORAGE OF PERSONAL DATA
The Website has taken all necessary measures to ensure the protection of your personal data, namely the following technical and organizational measures:
- All personal data is encrypted;
- Use of functionality that prevents you from using passwords that have a low security level;
- We have ensured the implementation of the necessary security certificates, such as HTTPS and SSL
- Functionalities are used that reduce the risk of hacking attacks.
Each user’s personal data is stored on a server that has a developed security strategy that guarantees complete protection of the website, and therefore complete protection of your personal data. It includes:
- SH Protect security system – it protects against hacking attacks on the website and neutralizes attempts to breach security at all levels.
- Detection and removal of malicious code within 24 hours
The database used is fully encrypted.
You are aware and agree that, despite the undertaken security measures, we are not responsible in situations where your personal data under unforeseen circumstances beyond the control of the data controller have become known to third parties. You are the only one responsible for keeping the confidentiality of your passwords, as well as preventing third parties from accessing the profiles you have created in the Website. If you have any doubts about the security of your account, please notify us immediately.
- DISPUTES
In the event of any dispute, claim or ground for taking legal action on your part in connection with this Privacy Policy and any and all terms and conditions that you have accepted and agreed to regarding the processing and storage of your personal data, such dispute, claim or legal action shall be referred to the competent court in Republic of Bulgaria and the laws of Republic of Bulgaria shall be applicable.
- HOW TO CONTACT US
If you have any questions regarding the protection of your personal data, please contact us immediately via the following email address: clients.diyanatherapy@gmail.com