PRINCIPLES OF PROCESSING / PROTECTION OF PERSONAL DATA

Privacy Policy

If you are our customer, newsletter subscriber or website visitor, you entrust us with your personal data. We are responsible for their protection and security. Please familiarize yourself with the privacy policy, principles and rights you have in relation to the GDPR (Data Protection Regulation).

Who is an administrator?

We are a company Hell.cz., ID 27134954, with its registered office at Přístavní 1315/7 registered at the Municipal Court in Prague under file number C 98894. We process your personal data as an administrator, i.e. we determine how personal data will be processed and for what purpose, for how long and we select any other processors who will help us with the processing.

Contact details

If you wish to contact us during the processing, you can contact us at tel. +420 775 353 696 or by e-mail: [email protected].

We declare

We declare that, as the controller of your personal data, we comply with all legal obligations required by applicable legislation, in particular the Personal Data Protection Act and the GDPR, and therefore that:

• we will process your personal data only on the basis of a valid legal reason, in particular a legitimate interest, performance of a contract, legal obligation or consent granted,
• we comply with the information obligation pursuant to Article 13 of the GDPR before the start of the processing of personal data,
• we will enable and support you in exercising and fulfilling your rights under the Personal Data Protection Act and the GDPR.

Scope of personal data and purposes of processing

We process personal data that you entrust to us for the following reasons (to fulfil these purposes):

provision of services

We record your personal data in the internal customer information system of Hell Studio to the following extent:

• Name and surname – data necessary to identify the customer
• Phone number – the information necessary for the possible cancellation or postponement of the date of the meeting in the Hell studio
• E-mail – the data necessary for sending a document with subsequent care for piercing/tattooing/modification, the provided e-mail is not used to send the newsletter
• Date of birth – information necessary for assessing the possibility of providing the service (reaching the age of 18 or 21 – varies according to the type of service)
• Postal code – The information necessary for the adjustment of terms by the study Hell.cz. We offer new dates to customers outside Prague as a matter of priority to make it easier for them to connect to the studio.
• Procedure and order history – The history of interventions and orders in Hell Studio is necessary data in order to provide the customer with support in the care of Hell products. The history contains the dates of performing procedures, possible complications and information about the medications used.

Since 95% of orders come to us by phone, we inform you about the inclusion in the internal customer information system of hell studio orally. You will confirm your consent to inclusion in the database in writing during a personal visit to the studio Hell.cz on the day of the arranged meeting. We archive the data for 10 years.

In paper form, we archive the consent to perform the procedure and the following personal data:

• Name and surname – data necessary to identify the customer
• Date of birth – data necessary for secondary identification of the customer
• Phone number – the information necessary for the possible cancellation or postponement of the date of the meeting in the Hell studio
• Nature of the procedure
• In the case of minors, we also record in paper form the name and surname of the legal representative (information necessary for a minor customer) and the telephone number of the legal representative (data necessary to verify the consent of the legal representative)

marketing – sending newsletters

We use your personal data (e-mail and name), what you click on in the e-mail and when you most often open it for the purpose of direct marketing – sending commercial communications. If you are our customer, we do so out of legitimate interest, as we reasonably assume that you are interested in our news for a period of 7 years from the last order.

If you are not our customer, we send you newsletters only on the basis of your consent, for a period of 7 years from the date of granting. In both cases, you can revoke this consent by using the unsubscribe link in each email you send.

advanced marketing based on consent

Only on the basis of your consent, we can also send you inspiring offers from third parties or use your e-mail address, for example, for remarketing and targeting advertising on Facebook, for a period of 7 years from the date of consent. Of course, this can be revoked at any time via our contact details.

photographic documentation

We archive photos from our events on our servers for an indefinite period of time and publish them on our website, social media profiles, newsletter, other promotional materials under the news license guaranteed by the Civil Code. Of course, we only select suitable photos for publication. If you still have a reasoned objection to their publication, please write to us on [email protected].

We always conclude a written contract with the performers at our events and with the participants of Hell suspension workshops, where they expressly agree to the publication of photos and archiving of photographs for an indefinite period.

We retain your personal data for the duration of the limitation periods, unless the law provides for a longer period of their retention or we have indicated otherwise in specific cases.

Cookies

When you browse our website, we record your IP address, how long you stay on the page and which page you come from. We perceive the use of cookies to measure website traffic and customize the display of websites as our legitimate interest of the administrator, as we believe that thanks to this we can offer you even better services.

Advertising targeting cookies will only be processed on the basis of your consent.

Our website can also be browsed in a mode that does not allow the collection of personal data. You can disable the use of cookies on your computer.

Security and privacy

We protect personal data to the maximum extent possible using modern technologies that correspond to the stage of technical development. We protect them as if they were our own. We have taken and maintain all possible (currently known) technical and organizational measures to prevent the misuse, damage or destruction of your personal data.

Transfer of personal data to third parties

Our employees and associates have access to your personal data.

To ensure specific processing operations that we are not able to provide on our own, we use the services and applications of processors who can protect data even better than we do and specialize in the processing.

They are providers of the following platforms:

• SmartSelling a.s. (SmartEmailing, MioWeb, FAPI, Proaffil)
• Facebook
• Google

It is possible that in the future we will decide to use other applications or processors to facilitate and improve the quality of processing. However, we promise you that in such a case, when choosing, we will place at least the same demands on the processor on the security and quality of processing as on ourselves.

Transfer of data outside the European Union

We process the data exclusively in the European Union or in countries that ensure an adequate level of protection based on the decision of the European Commission.

Your rights in relation to the protection of personal data

You have a number of rights in relation to the protection of personal data. If you wish to exercise any of these rights, please contact us via e-mail: [email protected].

You have the right to information that is already fulfilled by this information page with the principles of personal data processing.

Thanks to the right of access, you can ask us at any time and I will prove to you within 14 days what personal data we process and why.

If something changes with you or you find your personal data outdated or incomplete, you have the right to add and change your personal data.

You can exercise the right to restriction of processing if you believe that we are processing your inaccurate data, you believe that we are processing unlawfully, but you do not want to delete all the data or if you have objected to the processing. You can limit the scope of personal data or the purposes of processing. (For example, by unsubscribing from the newsletter, you limit the purpose of processing for sending commercial communications.)

Right to portability. If you would like to take your personal data and transfer it to someone else, we will proceed in the same way as when exercising the right of access – except that we will provide you with the information in a machine-readable form. Here we need at least 30 days.

Your other right is the right to erasure (to be forgotten). We do not want to forget you, but if you wish, you have the right to do so. In this case, we will delete all your personal data from our system as well as from the system of all sub-processors and backups. We need 60 days to ensure the right to erasure.

In some cases, we are bound by a legal obligation and, for example, I have to register the issued tax documents for the period set by law. In this case, we will delete all such personal data that is not bound by another law. We will inform you by e-mail about the completion of the deletion.

Complaint with the Office for Personal Data Protection

If you feel that we do not handle your data in accordance with the law, you have the right to contact the Office for Personal Data Protection with your complaint at any time. We will be very happy if you first inform us about this suspicion so that we can do something about it and correct any mistakes.

Unsubscribe from newsletters and commercial communications

We send you emails with inspiration, articles or products and services if you are our customer on the basis of our legitimate interest.

If you are not already a customer, we will only send them to you based on your consent. In either case, you can unsubscribe from our emails by pressing the unsubscribe link in each email you send.

Coyness

We would like to assure you that our employees and co-workers who will process your personal data are obliged to maintain confidentiality about personal data and security measures, the disclosure of which would jeopardize the security of your personal data. This confidentiality continues even after the termination of the contractual relationship with us. Without your consent, your personal data will not be disclosed to any other third party.

This principle of personal data processing applies from 25.5.2018.