Book Now

Privacy Policy

“Joy Yoga Ltd strictly complies with Regulation 2016/679 (General Data Protection Regulation) and the Personal Data Protection Act (PDPA) and has appointed data protection officers within the company.
All of our employees have agreed in writing to comply with the regulations and guidelines for the protection, security and confidentiality of personal data.

Page Content

Data about the administrator

“Joy Yoga” Ltd, UIC: 205849454 is a company registered in Bulgaria, whose current activity is conducting IFS therapeutic sessions.

Contact details:

  • E-mail address: rumianag69@gmail.com

Data Protection Officer:

Our Data Protection Officer can be contacted by email at: rumianag69@gmail.com

The personal data we collect and process

The personal data we collect and process from you are:

Personal Data Category:

1. Individuals, when visiting the office.

2. Natural persons, users of the site: names, address, email, phone number, IP address, cookies

3. Employees/employees of the company –identification: names; SSN (date of birth), permanent and/or current address, telephone number, ID card or passport details; education and professional qualifications; details relating to education, work experience, professional and personal qualifications and skills; details relating to health status (in connection with the administration of employment/civil law relationships).

Source

The data is provided voluntarily by the data subject. We declare that the personal data we collect will only be used for the following purposes:

  • Employees and workers: management of human resources, payment of wages and salaries and performance of the employer's related obligations for withholding and payment of employees' health and social security contributions, taxes, and other rights and obligations of the Company as an employer;
  • Clients of the physical office and the website, in strict confidentiality for the services provided: administration of relations with clients of the company and provision of services; preparation of payment documents; performance of legal obligations and reporting to state and other competent authorities, institutions, organizations, establishments and other authorities; contact and correspondence;

Grounds

The basis that gives us the right to process your data is:

“Joy Yoga Ltd. may process your personal data for various reasons, depending on our relationship with you and on the basis of relevantly applicable legal grounds under privacy laws, such as: legitimate business purposes of Joy Yoga Ltd., for entering into and/or performance of a contract with you, for compliance with legal obligations by Joy Yoga Ltd., and with your freely given, specific, informed and unambiguous consent to process your data. Some of the basic principles of personal data processing are:

  • The processing of your data is necessary for the performance of a contract and/or service or our intention to enter into a contract and/or provide a service;
  • The processing is also necessary to comply with legal obligations arising for "Joy Yoga" Ltd (e.g. under the Consumer Protection Act for the administration of complaints received; under the Accounting Act for the storage of accounting records, under the Labour Code for the administration of employment relations, the Social Security Code, tax legislation, the Tax Code, the VAT Act, etc.).
Legal grounds Activities, actions, interests
Legitimate business purposes of “Joy Yoga” Ltd. Business activities of “Joy Yoga” Ltd.
Conclusion and/or execution of a contract Lawful establishment, implementation and termination of commercial, employment and civil legal relations. Ensuring compliance with health and safety procedures
Compliance with legal obligations Fulfilling Joy Yoga’s obligations under applicable labor, civil, tax, insurance and other laws; Ensuring safety and security conditions for its employees and property; Preventing and/or investigating incidents, violations and criminal violations;
Your consent has been obtained To register on our site; To respond to your request to exercise a right, etc.

Access to personal data

The following organisations/persons will receive your personal data:

Website Customers: Recipients of your data may be online appointment booking platforms, such as Start Booking, LLC (https://www.startbooking.com/) and online payment processors, such as Stripe Inc. (https://stripe.com/) in connection with the reservation and payment for services provided by Joy Yoga Ltd.

Employees and workers: the recipients of your data may be an accountancy firm, in its capacity as a processor of personal data, and public authorities to whom we provide it under specific and explicit legal obligations.

Third parties who may receive your data are obliged to keep your data secure and to use it only to fulfil their obligations to us. When they no longer need your data to fulfil these obligations, they are required to comply with the statutory standards for destruction and protection in accordance with the directives and standards of European law.

Consent

By agreeing to accept this Privacy Policy (Privacy Notice), you give us permission to process your personal data only for the purposes we have specified.

Where we ask for consent for special (sensitive) personal data we will always justify why and how this information will be used.

You may withdraw your consent at any time by using the Data Subject Consent Withdrawal Form.

Data retention period

“Joy Yoga” Ltd. will store your personal data no longer than the period provided for in the legal relationship, in the contract or the period of validity of the offer; in the case of a claim – until the final conclusion of the claim proceedings;

Nevertheless, the data shall be stored until the expiry of the relevant statutory periods, if any. All such data will be stored in the ways detailed in the Privacy Policy adopted by Joy Yoga Ltd., which can be consulted in the physical office of Joy Yoga Ltd. or online at rumyanageorgieva.bg and in accordance with the approved by Joy Yoga Ltd. schedule for the collection and destruction of categories of data.

Rights as a data subject

Your rights as a data subject are as follows:

  • You have the right to request a copy of your personal data from Joy Yoga Ltd and the right to access your personal data at any time;
  • you have the right to request from Joy Yoga Ltd your personal data in a form convenient for transfer to another data controller, or to request that we do so without being prevented by us;
  • you have the right to request Joy Yoga Ltd to correct, without undue delay, your inaccurate personal data as well as data that is no longer up to date;
  • you have the right to request that Joy Yoga Ltd erases your personal data without undue delay on any of the following grounds:
    - the personal data are no longer necessary for the purposes for which they were collected;
    - when you have withdrawn your consent;
    - where you have objected to the processing;
    - where the processing is unlawful;
    - where the personal data must be erased in order to comply with a legal obligation under EU or Member State law that applies to us as a data controller;
    - where the personal data have been collected in connection with the provision of information society services.
  • you have the right to ask Joy Yoga Ltd to restrict the processing of your personal data, in which case the data will only be stored but not processed. Our refusal to restrict will only be expressly in writing, and we are obliged to state the legitimate reason for it;
  • you have the right to withdraw your consent to the processing of your personal data at any time by a separate request to the controller;
  • you have the right to object to certain types of processing, such as direct marketing (unsolicited advertising messages);
  • you have the right to object to automated processing, including profiling;
  • you have the right not to be subject to a decision based solely on automated processing, including profiling;
  • if we need to use your personal data for a new purpose not covered by this data protection statement, we will provide you with a new data protection notice and where and when necessary require your prior consent to the new processing.

Refusal of deletion

We may refuse to delete your personal data for the following reasons:

  • in the exercise of the right to freedom of expression and the right to information;
  • to comply with a legal obligation on our part or to perform a task of public interest.
  • for the establishment, exercise or defence of legal claims.

Right of appeal

You have the right to complain to the supervisory authority:

You have the right to lodge a complaint directly with the supervisory authority, the competent authority being: the Commission for Personal Data Protection, address. 1592 Sofia Blvd. “”Prof. 2 (www.cpdp.bg).

In case you wish to lodge a complaint regarding the processing of your personal data by Joy Yoga Ltd, you can do so by contacting Joy Yoga Ltd on the contact details provided.

You can read more about how and why we use your data below.

Under the GDPR, personal data is defined as:

“Any information relating to an identified natural person or an identifiable natural person (“data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;”.

In order to provide you with the services we offer, we need to collect personal data in the categories and for the purposes detailed above.
We ensure that the information we collect and use is necessary for that purpose and is not for the purpose of invading your privacy.
For the purpose of communication for advertising and marketing purposes, Joy Yoga Ltd will ask for your further consent.

In the privacy notice above, we detail the purposes and reasons for collecting and processing your personal data.

We will not sell your data to third parties, nor will we pass it on in order to gain any benefit.

“Joy Yoga Ltd may pass on your personal data to our sub-service providers who have contracted with us.

Any third parties who may receive your data are obliged to keep your data secure and only use it to fulfil their obligations to us. When they no longer need your data to fulfil these obligations, they will have detailed instructions for destroying it in accordance with procedures established by Joy Yoga Ltd.

Where we intend to transfer special (sensitive) personal data to a third party, we will only do so after we have obtained your consent. (there will only be an exception if we are legally obliged to do otherwise).

“Joy Yoga Ltd. processes (collects, stores and uses) the information you provide in a manner consistent with the requirements of the General Data Protection Regulation (GDPR). We will strive to keep the information accurate and up to date.

We will not retain information about you longer than reasonably necessary to fulfill the specific purposes for which it was collected and for which you are notified here.

Some of the retention periods depend on legal obligations to keep documents and information for certain minimum periods

We will take all reasonable technical and organisational measures to ensure that your data is protected from unauthorised access.

  • The data is stored in premises protected by a security system;
  • Access to the administrative premises of “Joy Yoga” Ltd. is restricted – a controlled access system has been established; outsiders are allowed only after identification and with an escort from “Joy Yoga” Ltd;
  • There is a video surveillance system in place on the administrative and commercial premises of Joy Yoga Ltd.
  • Access to the data, which is in electronic form, is stored in specialised software programs, and can only be accessed by the respective responsible persons, for whom separate accounts have been created with a separate username and password, which are known only to the respective responsible person;
  • Frequent changing of access passwords has been established to achieve a higher level of data protection;
  • Various procedures are in place to ensure the security of data processing, storage and destruction;
  • Antivirus software and firewalls are installed on all computer devices; when software programs containing data are inactive, access to them is automatically disabled; each employee who works with a computer device enters a user name and password to be able to use it;
  • Data that is on paper shall be stored in a locked cabinet that can only be accessed by the person responsible;
  • Data on websites is protected by an SSL certificate (Secure Sockets Layer (SSL) is a protocol for enabling data encryption on the Internet or intranet and for helping users of web pages to verify the owner of the website.)

“Joy Yoga” Ltd. is obliged to answer your request what information we store about you and how it is processed.

In case we have your personal data, you can request the following information:

  • Contact details of the organisation that processes or on whose behalf your data is processed. (In some cases this may be an EU representative).
  • Purposes of the processing;
  • The legal basis for the processing;
  • The relevant categories of personal data processed;
  • The recipients or categories of recipients to whom disclosure has been or will be made;
  • Recipients in third countries or international organisations, if there is a transfer of personal data to such recipients, and guarantees that data security there will be at least at the EU level;
  • If the processing is based on the legitimate interests of Joy Yoga Ltd or a third party, information about those interests.
  • The intended period for which the personal data will be stored;
  • Details of your rights to request rectification or erasure of personal data or restriction of processing of personal data, and to object to such processing;
  • Information about your right to withdraw your consent at any time;
  • Details of your right to complain to a supervisory authority;
  • Information as to whether the provision of personal data is a mandatory or contractual requirement, or a requirement necessary for the conclusion of a contract, and whether or not you are under an obligation to provide the personal data and the possible consequences of failing to provide such data.
  • The source from which your personal data was collected, in cases where it was not collected directly from you.
  • Any details and information about the existence of automated decision-making, such as profiling, and any meaningful information about the underlying logic of these operations, as well as the meaning and expected consequences of this processing.

Access to my data

How can I access my data that has been processed?

Registered users of the e-shop can exercise their rights through the personal data management tools in the profile.

For all other data subjects in this declaration, you need to complete an access request, which can be obtained here or at the physical office of Joy Yoga Ltd. To verify your identity, you must provide proof of identification.

We use cookies

This site uses cookies to improve user experience.