Privacy Policy

PURPOSE OF THE PRIVACY POLICY

These Privacy Terms are based on the General Data Protection Regulation (GDPR) and are intended to protect the privacy of our clients in accordance with the laws of the Republic of Estonia and European Union law.

The purpose of this Privacy Policy is also to inform the client what kind of their data is being processed, 
why Prana Breathwork processes, how the data is processed, and what the clients’s rights are with regard to the processing of personal data.

DEFINITIONS

Data subject – a person whose personal data is processed, ie in this context primarily a client.

“Personal data” means any information relating to an identified or identifiable individual, regardless of the form in which the data is presented.

Special types of personal data – data on a person’s state of health, disability, hereditary information, sexual life or trade union membership; biometrics, data on ethnic origin and race, and data on political, religious, and worldviews.

Processing of personal data – any operation performed with personal data, including the collection, storage, organisation, modification and disclosure of personal data; providing access to personal data, making inquiries and making extracts; use, transfer, cross-use, aggregation, closure, deletion or destruction of personal data; or more of the foregoing, whatever the manner in which they are carried out and the means employed.

“Processor of personal data” means a person or legal person who, by reason of their duties and the nature of their work, processes personal data or at whose request personal data is processed.

Service – The services offered by Prana Breathwork are available here: www.prana-breathwork.com (hereinafter the Service).

Client – a person who has expressed a wish to receive or has received one or more Services offered by Prana Breathwork.

PROCESSORS OF PERSONAL DATA

Processor of personal data:
Prana Breathwork, Raimond Feil
Phone: + 372 53 428 390
E-mail: info@prana-breathwork.com

Prana Breathwork discloses personal information to its business partners who act as authorized processors of the customer’s personal information in order to provide Prana Breathwork with services such as IT, logistics, legal assistance, marketing services.

The client’s personal data is also processed by Prana Breathwork’s management, therapists and employees, who have the right and need to process the client’s personal data due to their job responsibilities. Prana Breathwork also discloses the customer’s personal data to public authorities (eg the tax authorities), law enforcement agencies or other government agencies when requested by those authorities and that is aligned with the law.

PURPOSE AND DURATION OF STORAGE OF PERSONAL DATA PROCESSING

Prana Breathwork processes general client data in writing: first and last name; date of birth; contact details: telephone number, e-mail address. Depending on the customer, it may be necessary to process different types of personal data, in particular health data, in order to provide the service.

Prana Breathwork bases the processing of personal data on: the consent of the client, including the written consent entered into with the client; Prana Breathwork legitimate interest; fulfillment of Prana Breathwork’s legal obligation.

The precondition for providing the service is the submission of personal data.

The data processed in Prana Breathwork comes from the client, the parents of the minor client, the guardian of the client with limited legal capacity.

Prana Breathwork processes personal data for the following purposes:

1. To register the client, perform operations related to registration, contact the client and, in the event of contact by the customer, identify the customer. Personal data used: first name, surname, date of birth, e-mail address, telephone number, fact of acceptance of the conditions submitted on the consent form. Basis: consent with the client and its fulfillment.

2. For the provision of therapy services. Personal data used: first name, surname, date of birth, e-mail address, telephone number and health data based on the Client’s state of health. Basis: consent with the client and its fulfillment.

3. For the delivery of services ordered from Prana Breathwork, such as a gift card. Personal data used: e-mail address, telephone number, customer’s first name, surname, if necessary, address. Basis: Consent with the customer.

4. For accounting and tax purposes. Personal data used: as provided in the Accounting Act and tax laws. Basis: Accounting Act and other applicable laws and regulations.

5. To fulfill other obligations arising from law, for example, to fulfill orders, requests and inquiries of law enforcement authorities. Personal data used: depending on the case. Basis: legitimate interest, other applicable laws and regulations.

6. For direct marketing purposes (eg to receive a newsletter), if the client has indicated a request to receive advertising letters on the consent form. Data used: customer’s first name, last name, e-mail address. Basis: clients consent.

Prana Breathwork will retain documents containing personal data for a period of time specified by law or, in the absence of such a time limit, until the purpose for which the personal data were originally collected. The deadlines for the preparation of this procedure are next:

1. Personal data of accounting significance shall be kept for seven years from the creation of the respective item as the source accounting document, taking into account the requirements arising from the Accounting Act.

2. The sales or service agreement, the documents related to the agreement, as well as the correspondence and other documented communication with the client are kept for three years from the end of the respective agreement or communication, insofar as the retention of such data is important to protect Prana Breathwork’s rights.

3. Data related to any consent will be retained for as long as it is necessary for the provision of the service and as long as the consent given by the client is valid and has not been revoked.

After the expiration of the retention period, personal data will be deleted or destroyed in a manner that excludes the readability of the personal data. Digital media is erased using file overwriting programs; paper wolves are used to destroy paper media.

CLIENTS RIGHTS

The client has the right to: request access to personal data concerning them; demand that Prana Breathwork correct the inaccurate data relating to them or change the incomplete data; request the deletion of data if: the data are no longer needed for the purposes of the original collection or processing; the client has withdrawn his consent to the processing of the data and there are no other grounds for the processing of the data; personal data have been processed illegally; or such right derives from European Union or Member State law directly applicable to Prana Breathwork.

Client can request a restriction on the processing of personal data if: he has disputed the accuracy of the personal data; the processing of personal data is illegal and the client does not request the deletion; or Prana Breathwork no longer needs personal data for processing purposes, but the client needs it to submit, compile or protect legal claims.

Client has the right to: object to the processing of personal data; request the transfer of data provided by Prana Breathwork to another processor of personal data if the data were processed for the performance of the contract and the data were processed automatically. Personal data on paper (submitted) is not subject to transfer. Submit a complaint related to the processing of personal data to the supervisory authority, ie the Data Protection Inspectorate or to a court. Client has the right to withdraw its consents to processing operations for which the client has given his consent. Withdrawal of consent shall not affect the lawfulness of the processing carried out prior to the withdrawal. Following the withdrawal of consent, Prana Breathwork may continue to process personal data to the extent necessary to fulfill its obligations under law or European Union law.

If the client requests the deletion of the data or the restriction of the processing of the data, Prana Breathwork will transmit the information to all recipients to whom the personal data have been transferred, unless this proves impossible or requires a disproportionate effort. Prana Breathwork reserves the right to refuse to delete data if necessary: to fulfill an obligation or a task in the public interest arising from European Union or Member State law for Prana Breathwork; or for the preparation, submission or defence of legal claims.

In order to exercise the aforementioned rights, the client submits a request in writing, signed or by e-mail, using the e-mail address they have previously provided to Prana Breathwork for contact. Prana Breathwork will release the required data together with the rules for the processing of personal data or give reasons for refusing to provide the data within one month of receiving the application.

The data is issued to the client in the manner in which the client submitted the application (in writing or electronically). Paper health information is provided to the applicant on the basis of an identity document. The data is transmitted electronically in encrypted form.

Prana Breathwork will refuse to release the data if there is a legal basis or if Prana Breathwork has any doubts about the identity of the person requesting the data.

TRANSFER OF PERSONAL DATA TO THIRD PARTIES

Prana Breathwork does not transfer Personal Data to third parties and to third countries except as required by law.
Prana Breathwork does not transfer or share Special Types of Personal Data to any third parties.

NOTIFICATION OF PERSONAL DATA INFRINGEMENT

Prana Breathwork will immediately notify the client of a personal data breach if it is likely to endanger the customer’s rights and freedoms.

Prana Breathwork has no obligation to notify if: the necessary technical and organisational security measures have been applied to the processing of personal data to make the data unreadable to unauthorised persons; Prana Breathwork has taken the necessary measures to make the risk unlikely.