Privacy Policy

I. Content and Purpose of this Document

This document contains information about the protection of personal data provided by visitors to the website www.lazarmusicschool.com, the clients and by those interested in its services and products. The purpose of this document is to inform (data subjects) about your rights and to provide clear information on how your personal data is handled.

We value the trust with which you provide your personal data. Therefore, when processing personal data, we follow not only Act No. 101/2000 Coll., on the Protection of Personal Data, but we also comply with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), which came into effect on 25 May 2018.

Here’s what you will find in this document:
I. Content and purpose of this document
II. Data Controller
III. What personal data we process and how we obtain it
IV. The purposes for which we process personal data, for how long, and the legal basis for processing
V. Disclosure of personal data to other persons
VI. Information about your rights regarding personal data protection
VII. Other important information to exercise your rights

II. Data Controller

Lazar Music School with its administration and teachers team, represented by its founder Pola Lazar- Berný, Usti 128, 75301 Usti, Czech Republic. Contact school email: [email protected]

III. What personal data we process and how we obtain it

We process data that you provide to us by yourself. In particular cases, this may include providing data by filling out a forms on the website, entering data into a user account created on the school website, providing data when preparing contracts and related documents, and in connection with fulfilling contracts (i.e., delivery of goods or provision of services), during personal contact, by phone, in writing, by email, or through other communication tools (such as whatsapp messages, sms or messages in applications used for our communication like Google Meet, Facebook Messenger, Mooz, Zoom).

You provide data voluntarily, only in some cases would we be unable to deliver the ordered goods or services without your data (for example, if we need to send an item to a specific address and you did not provide it). We will always inform you about this in advance. You are required to provide data only in cases where it is mandated directly by law.

Personal data may fall into the category of “ordinary personal data,” or there may be special categories of data, i.e., sensitive data, for which legal regulations establish stricter processing conditions.

Ordinary personal data we process:
Name, surname, title, address, company ID, email, IP address, cookies, information about ordered goods and services, information about the products you have purchased from us, information about the services we have provided to you, photographs from live meetings/educational events you attended, video recordings from these events.
Special categories of personal data (“sensitive” data) we process:
we do not process any special categories of personal data.

IV. For what purposes do we process personal data, for how long, and what authorizes us to do so?

A) Processing of personal data for the purpose of concluding and fulfilling contractual obligations
In order to enter into a contract with you and deliver the products or services you have ordered, and to maintain related communication, we process the following ordinary personal data: name, surname, title, address, company ID, email and mobile phone number.

The legal basis (authorization) for processing this data is the fulfillment of contractual obligations arising from the contract concluded between us. Such an obligation may include delivering a product, sending you specific instructions before a course/masterclass, etc. This does not necessarily have to be a formally signed printed contract. It may also be, for example, a contract concluded orally, by phone, or by filling in and submitting an order form on the website and my subsequent confirmation of the order.

For this purpose, we process personal data for the duration of our contractual relationship. After the end of the contractual relationship, certain data is retained to fulfill legal obligations or for legitimate interests, as described in the following sections of this document.

B) Processing of personal data to fulfill obligations under accounting, tax, and other legal regulations
To comply with obligations arising from applicable legal regulations, particularly in the areas of accounting, tax law, and archiving, we process the following data: name, surname, address, company ID, email and mobile phone number.

The duration of data processing is directly determined by the relevant legal regulations that require such processing.

C) Processing of personal data for the purposes of our or third parties’ legitimate interests
Legitimate interest can cover a wide range of situations. Therefore, we inform you about the legitimate interests for which we process personal data:

A legitimate interest is the protection and demonstration of our rights and legal claims, especially those arising from concluded contracts or caused damage. For these purposes, we process personal data for 4 years after the end of our contractual cooperation or our last contact if no contract was concluded. This period is determined with regard to limitation periods, considering that we may not immediately learn about a claim filed in court by the other party. For these purposes, data from contracts and our mutual communication is stored.
Another legitimate interest is direct marketing. To send commercial communications, we will process the following personal data of our clients: name, surname, email and mobile phone number. You can always easily unsubscribe from receiving these emails by clicking on the unsubscribe link provided in the email.
To offer you products and services tailored to you and send you only relevant offers and information (instead of unnecessary bulk messages),we organize our contact database into different lists. For example, if you wish to receive updates about my news, your email is added to the “newsletter” list. Similarly, if you place an order through the website, your contact is added to the “ordered” list, and once paid, to the “paid” list; at that moment, the system may automatically send you the ordered digital product (or trigger shipping of physical goods, etc.). Part of this automated processing directly serves to fulfill our contractual obligations, and part is used for standard marketing (thus falling under legitimate interest).
If this “segmentation” of data were performed on a very large scale or in a highly specialized way, we would need your consent to process it, which you could withdraw at any time as described later in this document.
D) Processing of personal data based on your consent
If you grant us your consent, we will process your personal data to send you offers of our services/products. We need this consent if you are not yet our client. Additionally, if you grant separate consent, we may also process your personal data to send offers from my business partners. Furthermore, we need your consent to publish your testimonial or to use photos or videos for marketing purposes. Before you provide consent, we will always inform you about which data and for what specific purpose your consent will apply. You can withdraw your consent at any time. However, if we also process some of your personal data based on another legal basis (see sections A to C above), I will continue to process the data for those specific purposes even after you withdraw your consent, as consent is not required in those cases.

V. Sharing personal data with other parties

To fulfill some of our contractual or legal obligations, we work with other parties who act as processors. Specifically, these include cooperating accountants, providers of data storage and software applications, and the programmer of our website. We have written agreements with these processors to ensure they meet personal data protection obligations so your data remains secure. The current list of processors is:

Accounting services – Tigra, s.r.o. Pobočka Hranice: Třída 1. máje 328, 753 01, Hranice
Invoicing – FAPI, Smart Selling a.s., Company ID: 29210372, VAT ID: CZ29210372

In the order forms, you also have the option to pay for your order via the payment gateway GOPAY, operated by GOPAY s.r.o., with its registered office at Planá 67, 370 01 České Budějovice, Company ID: 260 467 68, registered in the Commercial Register kept by the Regional Court in České Budějovice, Section C, Insert 11030, which, in the context of GDPR, follows its Privacy Policy.

Personal data will also be made available to the relevant public authorities if required by law (especially in the case of inspections where the authority is entitled to request personal data).

VI. Information about your other rights regarding personal data protection

Right of access to personal data
You have the right to receive confirmation as to whether we process your personal data and, if so, to access that data and information about its processing.
Right to rectification of personal data
You have the right to have inaccurate personal data concerning you corrected without undue delay. Considering the purposes of processing, you also have the right to have incomplete personal data completed, including by providing an additional statement.
Right to erasure of personal data (“Right to be forgotten”)
In cases specified by law or GDPR, you have the right to request that I erase your personal data without undue delay (the reasons are listed in Article 17 of the GDPR, including exceptions where erasure will not take place).
Right to restriction of processing
In cases set out in Article 18 of the GDPR, you have the right to request that we restrict the processing of your personal data.
Right to data portability
Under the conditions set out in Article 20 of the GDPR, you have the right to receive your personal data and transfer it to another controller. If technically feasible, you may also request the direct transfer to another controller.
Right to object
If personal data is processed for legitimate interests, you have the right to object to such processing. In that case, we will no longer process your data unless my legitimate interest outweighs your interests, rights, and freedoms. If the legitimate interest is direct marketing, your objection will always result in the termination of further processing for direct marketing purposes.
Right to lodge a complaint with a supervisory authority
If you believe your personal data protection rights have been violated, you have the right to lodge a complaint with the Office for Personal Data Protection. You can find more information about the office and data protection directly on its website www.uoou.cz. We would be very grateful if you inform us first about your concerns so we can address and correct any potential issue.

VII. Other Important Information About Exercising Your Rights

If you have any further questions about how I process your personal data, you can contact us at [email protected] by sending a message to this email or a written request to the address stated at the beginning of this document, you can also directly exercise your rights described in Article VI. Please note that, to verify that the request is genuinely submitted by you,weI may contact you and reasonably verify your identity and request. The same applies to telephone or similar communication.

The current version of this document is always available at https://lazarmusicschool.com/en/privacy-policy/