**Privacy Policy**

**Declaration on the Processing of Personal Data**

This declaration is made in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of personal data, hereinafter referred to as GDPR, and Act No. 110/2019 Coll. on the processing of personal data.

If you are my customer, newsletter subscriber, or website visitor, you are entrusting me with your personal data. I am responsible for their protection and security. Please acquaint yourself with the protection of personal data, the principles, and the rights you have in connection with the GDPR (General Data Protection Regulation).

**Data Controller**
Markéta dos Santos Gomes, Výstavní 820, 389 01 Vodňany
ID No.: 01996975
I operate the websites: www.qhht.family, www.cestoulaskyasvetla.cz, www.institutvedomiasupervedomi.cz, www.tajemstvivedomehouceni.cz, www.bqh.cz, www.spiritualnihypnoterapie.cz, and www.beyondcaboverde.com.

I process your personal data as a data controller, i.e., I determine how personal data will be processed and for what purpose, for how long, and I select any other processors who will assist me with the processing.

**Contact Information**
During the processing of your personal data, you can contact me at: marketa@qhht.family.

**Declaration**
I declare that as a data controller, I comply with all statutory obligations required by applicable legislation, especially the Personal Data Protection Act and the GDPR, and therefore:
- I will process your personal data only on the basis of a valid legal reason, primarily legitimate interest, performance of a contract, legal obligation, or consent given,
- I comply with the information obligation under Article 13 of the GDPR before starting to process personal data,
- I will enable and support you in exercising and fulfilling your rights under the Personal Data Protection Act and the GDPR.

**Scope of Personal Data and Purposes of Processing**

I process personal data that you entrust to me yourself, for the following reasons (to fulfill these purposes):
-**Providing Services, Fulfilling Contracts**
Your personal data in the scope of: email, name, surname, home address, in case of purchase as a business or company also ID and VAT number, account number, or phone number are necessary for the fulfillment of the contract (e.g., sending access to the application, sending study and information materials or online courses, delivering goods, etc.).
- **Accounting**
If you are a customer, your personal data (billing information) are necessary to comply with the legal obligation for issuing and recording tax documents.
- **Marketing - Sending Newsletters**
Your personal data (email and name), gender, what you click on in the email and when you most often open it, are used for direct marketing - sending commercial communications. If you are my customer, I do so out of legitimate interest, as I reasonably assume that you are interested in my news, for a period of 5 years from the last order.
If you are not my customer, I send you newsletters only based on your consent, for a period of 5 years from the granting of the consent. In both cases, you can revoke this consent using the unsubscribe link in every email sent.
- **Advanced Marketing Based on Consent**
Only based on your consent, I can send you inspiring offers from third parties or use your email address for remarketing and ad targeting on Facebook, for a period of 5 years from the granting of the consent. This consent can, of course, be revoked at any time through my contact details.
- **Photographic Documentation - Live Events, Workshops**
I retain your personal data for the duration of the limitation periods, unless the law stipulates a longer period for their retention or I have stated otherwise in specific cases.

**Cookies**
When browsing my websites, your IP address, how long you stay on the page, and from which page you come are recorded. I perceive the use of cookies for measuring website traffic and customizing the display of web pages as my legitimate interest as a data controller, as I believe that this allows me to offer you even better services.
Cookies for targeting advertising will only be processed based on your consent.
My websites can also be browsed in a mode that does not allow the collection of personal data. The use of cookies can be disabled on your computer.

**Security and Protection of Personal Data**
I protect personal data to the maximum extent possible using modern technologies that correspond to the level of technical development. I protect them as if they were my own. I have taken and maintain all possible (currently known) technical and organizational measures to prevent misuse, damage, or destruction of your personal data.

**Transfer of Personal Data to Third Parties**
Your personal data is accessible to my collaborators. To ensure specific processing operations that I cannot provide on my own, I use the services and applications of processors who can protect data even better than I can and specialize in the processing. These are providers of the following platforms:
- Facebook
- Google
- Mioweb
- Fapi
- Smartemailing
- SimpleShop
- Reenio
- GoPay

In the future, I may decide to use other applications or processors to facilitate and improve processing. I promise you, however, that in such a case, I will place the same demands on the security and quality of processing as on myself.

**Transfer of Data Outside the European Union**
Data is processed exclusively in the European Union or in countries that provide an adequate level of protection based on a decision by the European Commission.

**Your Rights Regarding Personal Data Protection**
In connection with the protection of personal data, you have a number of rights. If you want to exercise any of these rights, please contact me via email: marketa@qhht.family.
- **Right to Information:** This is fulfilled by this informational page with the principles of personal data processing.
- **Right of Access:** You can ask me at any time and I will provide you with information within 30 days about what personal data I process and why.
- **Right to Rectification and Change:** If something changes for you or you find your personal data outdated or incomplete, you have the right to supplement and change personal data.
- **Right to Restriction of Processing:** You can use this if you believe that I am processing your inaccurate data, you think that I am processing unlawfully, but you do not want all data to be erased, or if you have objected to the processing.
- **Right to Limit the Scope of Personal Data or Purposes of Processing:** (e.g., by unsubscribing from newsletters, you limit the purpose of processing for sending commercial communications).
- **Right to Data Portability:** If you would like to take your personal data and transfer it to someone else, I will proceed in the same way as for the right of access - except that I will provide the information in machine-readable form. This requires at least 30 days.
- **Right to Erasure (to be Forgotten):** Your next right is the right to erasure (to be forgotten). I do not want to forget you, but if you wish, you have the right to do so. In such a case, I will delete all your personal data from my system as well as from the system of all sub-processors and backups. It takes 30 days to ensure the right to erasure.
In some cases, I am bound by a legal obligation, for example, I must keep issued tax documents for the period stipulated by law. In this case, I will delete all such personal data that is not bound by another law. I will inform you by email about the completion of the erasure.

**Complaint to the Office for Personal Data Protection**
If you feel that I am not handling your data in accordance with the law, you have the right to file a complaint at any time with the Office for Personal Data Protection. I will be happy if you first inform me about this suspicion so that I can do something about it and rectify any possible shortcomings.

**Unsubscribing from Newsletters and Commercial Communications**
I send you emails with inspiration, articles, or products and services if you are my customer based on my legitimate interest. If you are not yet a customer, I send them to you only based on your consent. In both cases, you can stop receiving my emails by clicking the unsubscribe link in each email sent.

**Confidentiality**
I assure you that my collaborators who will process your personal data are obliged to maintain confidentiality regarding personal data and security measures, the disclosure of which would endanger the security of your personal data. This confidentiality continues even after the contractual relationships with us end. Without your consent, your personal data will not be disclosed to any other third party.

These personal data processing principles are effective from 01.05.2024