Last update: December 1, 2022

​

Statement on the processing of personal data

REBOX THERAPY Ltd., Seydlerova 2151/3, 158 00 Prague 13, CZ, informs about the processing of personal data and the rights and obligations of the controller and processor in compliance with Act No. 101/2000 Coll. on the protection of personal data and the GDPR regulation, as amended, and the European Union Regulation 2016/679, on the protection of natural persons in connection with the processing of personal data and on the free movement of such data.

What data do we process?

REBOX THERAPY Ltd. operates a website, supplies goods and services. We collect and process data about browsing our website, including contact that was provided by the customer in the contact form. When ordering goods or services, we process the data necessary to fulfill the contract and our legal obligations, especially warranty conditions and accounting. 

​

How and for how long are personal data processed?

We process personal data manually and automatically in information systems. We protect personal data to prevent unauthorized or accidental access to personal data, its transfer, change or loss, or other possible misuse. All persons who come into contact with personal data in the performance of their work or contractual obligations are bound by a duty of confidentiality regarding both the personal data itself and the security measures to protect it. We process personal data for the period necessary to implement and protect the rights and obligations arising from the mutual contractual relationship and further for the period resulting from legal regulations, or for the period specified in the consent of the data subject.

​

Obligations of the administrator and processor of personal data

REBOX THERAPY Ltd. as administrator and processor of personal data is obliged to:

• to take measures to prevent unauthorized or accidental access to personal data, their alteration, destruction or loss, unauthorized transfers, their other unauthorized processing, as well as other misuse; this obligation applies even after the termination of personal data processing;

• collect data only to the extent necessary for the specified purpose;

• during processing, take care to protect the private life of the data subject;

• process and document technical and organizational measures taken and implemented to ensure the protection of personal data;

• process only true and accurate personal data known to the controller;

• to provide information on the processing of his personal data free of charge at the request of the data subject.

​

Rights of persons - data subjects

In accordance with Act No. 101/2000 Coll. On the protection of personal data, as amended by the European Union Regulation 2016/679, on the protection of natural persons in connection with the processing of personal data and on the free movement of such data, the subject has:

• the right to request access to your personal data (Article 15 GDPR), i.e. in particular the right to know the purpose of personal data processing;

• the right to know the categories of personal data concerned;

• the right to know the recipients or categories of recipients of personal data;

• the right to know the period for which personal data will be stored;

• the right to all available information about the source of the personal data, unless obtained from the subject of the personal data;

• the right to facts about whether automated decision-making is taking place, including profiling;

• the right to request the Administrator to correct personal data (Article 16 GDPR);

• the right to erasure of personal data (Article 17 GDPR);

• the right to limit the processing of personal data (Article 18 GDPR);

• the right to object to the processing of personal data (Article 21 GDPR);

• the right to file a complaint with a supervisory authority (Article 77 GDPR);

• the right to data portability, i.e. the right to obtain your personal data provided to the Administrator (Article 20 GDPR).
   

If you wish to view, correct or delete personal data that we process about you, or raise a question about the processing, you can do so via the e-mail address rebox@rebox.cz. In the event that REBOX THERAPY s.r.o. as the administrator or processor processed personal data in violation of the law or in violation of the protection of the privacy and personal life of the data subject, the person concerned may ask the administrator or processor for an explanation, or request the removal of the objectionable condition and, in the event of non-compliance with this request, he has the option of contacting the Office for Personal Data Protection, based in Plk. Sochora 27, 170 00 Prague 7, CZ, and by email: posta@uoou.cz.