Privacy Policy

Purpose of Privacy Policy

These Privacy Terms are based on the General Data Protection Regulation (GDPR) and are intended to protect the privacy of our clients in accordance with the laws of the Republic of Estonia and European Union law.

The purpose of this Privacy Policy is also to inform the client what kind of their data is being processed,
why Prana Breathwork processes, how the data is processed, and what the clients’s rights are with regard to the processing of personal data.

Who processes the personal data?

Processor of personal data:
Prana Breathwork, Raimond Feil
Phone: + 372 53 428 390
E-mail: info@prana-breathwork.com

In which cases is the customer’s personal data transferred to third parties?

Prana Breathwork / Raimond Feil (hereinafter referred to as Prana Breathwork) will disclose the customer’s personal data to public authorities, e.g., law enforcement agencies or other public authorities, in cases and upon request required by law.

Prana Breathwork discloses personal data, as necessary, to its cooperation partners, who act as processors of the customer’s personal data and provide services to Prana Breathwork, such as IT, logistics, legal, and marketing services.

Prana Breathwork will transfer customer data to third parties only if such an obligation arises from Estonian or European Union law.

Prana Breathwork does not transfer personal data to third countries.

Processing of personal data.

Prana Breathwork will process the customer’s general data: first name and surname, date of birth, and contact data: telephone number, e-mail address, and address. In order to provide the service, it may be necessary to process the client’s health data.

Prana Breathwork collects and processes personal data based on the customer’s consent (consent is expressed by the freely given provision of the data in any way and any form), Prana Breathwork’s legitimate interest, and Prana Breathwork’s performance of a legal obligation.

The provision of the service is subject to the submission of personal data.

The data processed by Prana Breathwork comes from the client, a minor client’s parents, and the incapacitated client’s guardian.

Prana Breathwork processes the client’s personal data for the purposes of carrying out all operations related to the registration, the provision of therapy services, and the delivery of services ordered from Prana Breathwork, e.g., gift cards.

Personal data used: first name, surname, e-mail, telephone number, address, and, depending on the client’s state of health, health data.

Personal data used for accounting and tax purposes: in accordance with the provisions of the Accounting Act and the tax laws.

To fulfill other legal obligations, such as to comply with law enforcement orders and requests. Personal data used: depending on the specific case.

For direct marketing purposes (e.g., to receive newsletters), where the customer has indicated on the consent form that they wish to receive promotional emails or has registered to receive newsletters on the Prana Breathwork website (prana-breathwork.com).

Time limits for storing personal data.

Prana Breathwork will keep records containing personal data for the period specified by law. If no such time limits exist, then until such time as the purpose for which the personal data was originally collected has been achieved.

Currently, the time limits are as follows:
– Personal data of accounting relevance are kept for seven years from the date of the creation of the corresponding record as the original accounting document, subject to the requirements of the Accounting Act.

– Any data relating to consent will be kept for as long as they are necessary for the service provision and for as long as the consent given by the customer is valid and has not been withdrawn.

– At the end of the retention period, the personal data will be deleted or destroyed in a way that renders the personal data unreadable. Digital media shall be erased using file transcription software; paper media shall be destroyed using a paper shredder.

Clients rights.

You have the right to request access to your personal data, request that Prana Breathwork rectify or complete the data about you, and request the deletion of your data if the data is no longer necessary for the purposes for which it was originally collected or processed; the personal data has been unlawfully processed; or such right arises under European Union or Member State law directly applicable to Prana Breathwork.

Prana Breathwork has the right to refuse to erase data where it is necessary: for the performance of an obligation imposed on Prana Breathwork by European Union or Member State law, or of a task carried out in the public interest; or for the establishment, exercise or defense of legal claims.

In order to exercise any of the above rights, the customer shall submit a request to this effect in writing, signed by the customer, or by email, using the e-mail address that he/she has previously provided to Prana Breathwork to contact him/her. Prana Breathwork will provide the requested information or give reasons for refusing to provide the information within one month of receipt of the request.

The data will be provided to the client in the manner in which the client has made the request (in writing or electronically). Health data in paper form will be provided to the applicant on the basis of an identity document. Electronically, the data are transmitted in encrypted form.

Prana Breathwork will refuse to disclose the data if there is a legal basis for doing so or if Prana Breathwork has doubts about the identity of the person requesting the data.

Notification of personal data breaches.

Prana Breathwork will promptly notify the customer of a personal data breach if it is likely to pose a risk to the customer’s rights and freedoms.