Beauty Ventures s.r.o. hereby allows you to inform you about the method and scope of personal data processing, including the scope of your rights as data subjects, related to the processing of your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”).

1. About us
The operator of this website is Beauty Ventures s.r.o., with registered office at V Park 2308/8, Chodov, 148 00 Prague 4, Czech Republic, ID No.: 087 48 781, registered in the Commercial Register maintained by the Municipal Court in Prague under file number C 324462.

2. About Cookies
Our website uses cookies. A cookie is a small text file that your web browser stores on the hard drive of your terminal device when you browse a website. Cookies make it easier and faster for you to use our website by remembering your preferences (e.g. login details and language). Cookies also enable you to make better use of our website and to tailor its content to your interests and needs.

You can set cookies according to your preferences via the cookie bar on our website, but refusing cookies may negatively affect the use of certain parts of our website.

2.1. Beauty Ventures clients
Clients have at their disposal separate information on the processing of personal data, which they receive when signing a contract for the provision of health services.

2.2 Collaborating healthcare professionals
We may process your personal data for the following purposes:

a) Processing for the fulfillment of the cooperation agreement
For the purposes of fulfilling our joint contract, we process the following categories of your personal data:

• • identification data such as first name, last name, date of birth;
  • contact information, including mobile phone number and email address and residential address;
  • reward details, payment details, including account number, for providing the agreed reward;
  • data on educational attainment and other professional qualifications, including CV, certificates;
  • photographs, promo videos and other promotional materials;
  • other personal data and documents created as part of the administration of our joint contractual relationship.
    We process this data mainly for the purpose of concluding our cooperation agreement, administering our relationship, providing the agreed remuneration and ensuring the provision of services to Beauty Ventures.
    The provision and processing of your personal data is necessary for the conclusion of the contract and its subsequent performance in accordance with the clause. 6 paragraph 1 letter b) GDPR.

b) Processing based on the legal obligations of Beauty Ventures
Some processing of your personal data is required by law. E.g. the accounting and tax documents with which you invoice us for the services provided contain your personal data. We keep these documents only for the purpose of fulfilling the obligations established by the relevant accounting and tax legislation, for the period imposed by these regulations. This processing is necessary to fulfill the legal obligations of Beauty Ventures according to Article 6 paragraph 1 letter c) GDPR.

c) Processing based on legitimate interest
We process some personal data for the purposes of our legitimate interests to defend legal claims and to protect our assets. This is in particular your identification data, data related to the services provided by you and data related to the administration of the contract, or other personal data necessary for the above purposes. This processing is based on our legitimate interest according to Article 6 paragraph 1 letter f) GDPR.

2.3 Other associates of Beauty Ventures
We may process your personal data for the following purposes:

a) Processing for the fulfillment of the cooperation agreement
For the purposes of fulfilling our joint contract, we process the following categories of your personal data:

• • identification data such as first name, last name, date of birth;
  • contact information, including mobile phone number and email address and residential address;
  • reward details, payment details, including account number, for providing the agreed reward;
  • other personal data and documents created as part of the administration of our joint contractual relationship.
    We process this data mainly for the purpose of concluding our cooperation agreement, administering our relationship, providing the agreed remuneration and also for the purpose of ensuring the related communication. The provision and processing of your personal data is necessary for the conclusion of the contract and its subsequent fulfillment in accordance with Article 6, paragraph 1, letter b) of the GDPR.

b) Processing based on the legal obligations of Beauty Ventures
Some processing of your personal data is required by law. E.g. the accounting and tax documents with which you invoice us for the services you provide contain your personal data. We keep these documents only for the purpose of fulfilling the obligations established by the relevant accounting and tax legislation, for the period imposed by these regulations. This processing is necessary to fulfill the legal obligations of Beauty Ventures according to Article 6, paragraph 1 letter c) GDPR.

c) Processing based on legitimate interest
We process some personal data for the purposes of our legitimate interests to defend legal claims and to protect our assets. This is in particular your identification data, data related to the services provided by you and data related to the administration of the contract, or other personal data necessary for the above purposes. This processing is based on our legitimate interest according to Article 6 paragraph 1 letter f) GDPR.

2.4 Applicants for employment
If you express an interest in working with us, we process the personal data you provide to assess whether your experience matches the position you are applying for. This is in particular data relating to your professional qualifications, including your CV, copies of certificates and our notes. For the purpose of ensuring our communication, including possibly scheduling a personal meeting, we also process your contact information.

This processing is based on our legitimate interest according to Article 6 paragraph 1 letter f) GDPR and is also necessary for our pre-contractual negotiations according to Article 6 paragraph 1 letter b) GDPR. Applicants’ personal data may be processed after the end of the selection procedure for the purpose of another job offer, only if the applicant gives consent to this according to Article 6, paragraph 1, letter a) of the GDPR.

2.5 Website Visitors
We use cookies to improve the appearance and functioning of our site and to adapt the content of our site to your preferences. You can find more detailed information about cookies, including the legal basis for the processing of your data, which we obtain through cookies, in our Policy on the use of cookies, available on our website. If you order a consultation through our website, we will process your name, surname, telephone, e-mail and the content you tell us in your message. The provision and processing of your personal data is necessary for our pre-contractual negotiations pursuant to Article 6 paragraph 1 letter b) GDPR.

2.6 Persons interested in receiving our commercial communications
We also process your personal data, in particular contact data and data about your interests (including any interests in our other services), for the purposes of our marketing campaigns, e.g. for sending individual offers of services provided by us, if you have given your consent to such processing, e.g. via our website. You can refuse to receive commercial communications at any time via our contact e-mail address, see below, or as described in the marketing e-mail. The processing of personal data for the purposes of direct marketing is based on consent pursuant to Article 6 paragraph 1 letter a) GDPR).

2.7 Visitors to the premises of Beauty Ventures
To ensure the safety of people and property, Beauty Ventures company premises have camera systems installed to record people. The purpose of recording from the camera is to protect the property of Beauty Ventures, its clients, employees, external suppliers, and possibly other persons. This processing is based on our legitimate interest according to Article 6 paragraph 1 letter f) GDPR.

3. IS YOUR PERSONAL DATA AUTOMATICALLY PROCESSED?
Personal data that we are authorized to process will not be used to make decisions purely on the basis of automated processing or profiling.

4. WHO DO WE SHARE YOUR PERSONAL DATA WITH?
We may share your personal information with certain trusted third parties who also provide sufficient and credible assurances about the security of your personal information. These are mainly:

a) our health and beauty professionals, including health service providers;
b) our marketing and customer relationship advisors;
c) our professional advisers, auditors and accountants;
d) suppliers who provide us with certain support services such as word processing, translation, copying and document review, telephone and internet connection, etc.;
e) IT service provider.

Furthermore, under certain conditions, your personal data may be made available to state authorities, courts and administrative authorities, etc., as part of the exercise of their legal powers) or we may directly provide them to other entities to the extent stipulated by a special law. Personal data may be transferred for processing within the European Union, or of the European Economic Area (e.g. to our suppliers based in other EEA states). To transfer personal data to countries outside the European Union, or The European Economic Area is not running out.

5. HOW DO WE PROTECT YOUR PERSONAL DATA?
We apply measures necessary to securely store information in electronic or physical form, and to prevent unauthorized access, changes or disclosure of information. Our information security is supported by a number of security standards, processes and procedures. We store information in areas with limited access or in electronic databases that require login details and passwords. We require our data storage providers and other processors to meet relevant industry security standards. All partners, employees and service providers who have access to confidential information are subject to confidentiality obligations.

6. HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We keep personal data only for the time necessary to fulfill the specified purpose. For the provision of our services, we process your personal data for the duration of our contract, after termination of the contractual relationship for the period necessary and required by legal regulations (in particular for the period set by tax regulations or legal regulations regarding the provision of health services) or for the duration of our legitimate interest . If you apply for a job with us, we process your personal data only until the end of the selection process, and for successful candidates even longer for the purposes of fulfilling our legal obligations and joint employment contract. For processing that is based on consent, we only process your personal data for the time necessary in relation to the intended purpose, but no longer than until it is revoked. When sending commercial messages, you give your consent for the duration of our contractual relationship and for a further period of 5 years from its termination, or until you withdraw your consent. The recording from the cameras is kept only for the time absolutely necessary, which is used to detect a specific illegal act (in particular theft or unauthorized entry into the premises of Beauty Ventures).

7. WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH THE PROCESSING OF YOUR PERSONAL DATA?
You have the right to request from us access to your personal data, their correction or deletion, or to limit their processing, as well as the right given by the GDPR to the portability of personal data. More detailed conditions for the use of these rights follow from the relevant legal regulations (in particular Articles 15 to 21 of the GDPR), with the understanding that not all these rights are guaranteed for each partial processing (for each separate purpose mentioned in point 1. above). In relation to your personal data that we process, you have the following rights:

a) Right of access to data: You have the right to ask whether we are processing your personal data and, if so, to request access to that data. You also have the right to access information regarding, among other things, for what purpose and for how long we process your personal data, which specific data we have at our disposal and to whom we have given access to this data. However, these data access rights may be limited with regard to the interests of other natural persons.

b) The right to correct data: Based on your request, we are obliged to correct inaccurate personal data or complete personal data that is incomplete.

c) Right to deletion of data (right to be forgotten): Under the conditions set out in the GDPR, we are obliged to delete the data at your request, e.g. if these data are no longer needed to achieve the purpose for which they were collected, if that you objected to the further processing of personal data, or that your personal data was processed in violation of the law.

d) Right to restriction of processing: Under the conditions specified in the GDPR (e.g. if the correctness of personal data is disputed or personal data has been unlawfully processed), we are obliged to restrict the processing of certain personal data concerning you at your request. In such cases, we may only use this data for certain limited purposes as stipulated by the GDPR, or other legal regulations.

e) Right to data portability: Under the conditions set out in the GDPR and to the extent of our technical capabilities, you have the right to request your personal data to which we have access in a structured, commonly used and machine-readable format and to send such data to another entity.

f) Right to object: In compliance with legal requirements (see Article 21 GDPR), you have the right to object to the processing of your data if it is processed for our legitimate interests or the legitimate interests of another person.

If you are not satisfied with the way we process your personal data, you also have the right to file a complaint with the relevant supervisory authority, which in the Czech Republic is the Office for the Protection of Personal Data, Plk. Sochora 27, 170 00 Prague 7, phone: 234 665 111, Email: posta@uoou.cz, www: https://www.uoou.cz

8. WHERE CAN YOU CONTACT US?
You can exercise your rights and send us your questions or comments by e-mail at gdpr@abclinic.com or in writing at the Beauty Ventures correspondence address: V Parku 2308/8, Chodov, 148 00 Prague 4, Czech Republic

Last update: 14. 8. 2020