Privacy Policy

Personal Data Controller/Provider

(see par. 1.16 of the GTC)

Reverie Center s.r.o., ID No.: 233 69 043, VAT No.: CZ23369043, with its registered office at U Červeného mlýna 613/6, Ponava, 612 00 Brno, the Czech Republic, registered in the Commercial Register of the Regional Court in Brno, file No. C 145619, e-mail: [email protected], tel.: +420 775 505 512.

Categories of Processed Data

• Clients (see par. 1.4 of the GTC):
  • identification and contact details:
    • title, first name, last name;
    • place of birth and/or place of residence;
    • date of birth;
    • telephone number, e-mail address;
  • information as per the Contract (see par. 1.6 of the GTC);
  • information about health status;
  • information about mental state;
  • information about previous traumatic experiences;
  • information about the Client's experience with the use of addictive or other substances;
• Website (see par. 1.21 of the GTC) users:
  • first name, last name (or nickname);
  • contact details (e.g., phone number and/or e-mail address);
  • cookies;
  • user device IP address;
  • information derived from a user profile on a social network;
• business partners of the Provider:
  • title, first name, last name;
  • role with a business partner;
  • business name;
  • registered office or permanent or other residence, mailing address;
  • identification details or date of birth;
  • phone number, e-mail address;
  • information as per the relevant cooperation agreement.

Legal Basis and Purposes of Processing

• conclusion and fulfilment of a contract to which we are a party, or taking measures at the request of a data subject prior to entering into a contract;
• fulfilling a legal obligation we are subject to;
• our predominantly legitimate interests, primarily justified by:
  • interest in establishing contractual cooperation;
  • pre-contractual communication and any claims arising from pre-contractual liability;
  • future resumption of negotiations on establishing contractual cooperation;
  • measures for the further development of our services;
  • optimizing procedures for analyzing our needs;
  • enforcement of legal claims and defense in legal disputes;
  • security verification;
  • communication between parties to a contractual relationship;
  • recording and control within our operations;
• if the law requires the data subject's consent to processing, we will always request this in advance.

Recipients

• cooperating contractual partners, e.g., Psychotherapists (see par. 1.17 of the GTC);
• providers of IT services and/or electronic or information systems;
• external accounting and tax advisory providers;
• legal services providers;
• persons who, under authorization, carry out our contractual or legal obligations, exercise rights established by contract or law, or otherwise cooperate with us in fulfilling a contract or conducting our business (i.e., private enforcement officers, auditors, etc.);
• public authorities, courts, or criminal justice authorities (if this obligation arises from the relevant laws and regulations).

We will not transfer personal data to international organizations.

If the Destination (see par. 1.9 of the GTC) is outside the EU, outside countries that have ratified the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data, or outside countries to which personal data may be transferred on the basis of a decision by an EU authority, the personal data of the data subject (i.e., the Client) may also be provided to recipients in this third country (e.g., to the Accommodation Facility (see par. 1.1 of the GTC). In connection with the Contract and as part of personal data protection in accordance with the GDPR, data subjects will be informed whether an EU adequacy decision exists and about the possible risks that may arise for them in the absence of such a decision.

Personal Data Processing Period

We process personal data for the period necessary to fulfill the purpose for which the personal data was collected.

Source of Personal Data

Personal data may be obtained directly from the data subject whose personal data we process (e.g., the Client), from public registers, and/or from other sources (e.g., websites).

Personal Data Processing Method

Personal data is processed electronically via automated systems or in printed format manually. We do not carry out systematic and/or extensive processing of personal data, nor automated individual decision-making with legal or similar effects, including profiling, within the meaning of Article 22 of the GDPR.

Data Subject's Rights

• the right to information and access to personal data (Article 15 of the GDPR);
• the right to rectification or completion of personal data (Article 16 of the GDPR);
• the right to erasure of personal data (Article 17 of the GDPR);
• the right to transfer personal data to another data controller (Article 20 of the GDPR);
• the right to restrict the processing of personal data (Article 18 of the GDPR);
• the right to object to processing (Article 21 of the GDPR);
• the right to lodge a complaint with the relevant data protection authority;
• the right not to be subject to automated individual decision-making with legal or similar effects, including profiling (Article 22 of the GDPR);
• consent given by a data subject can be withdrawn at any time in writing at our address or by e-mail at [email protected] (in whole or in part) – this will not affect the lawfulness of processing based on consent given prior to its withdrawal.

Voluntary Provision of Personal Data

Where personal data processing is based on consent, the provision of such data is entirely voluntary; data subjects who refuse to provide their personal data will not suffer any legal harm, but they will not be able to use our services. Otherwise, the processing of personal data is only possible on the basis of a legal and/or contractual requirement (e.g., if personal data must be included in a contract).