Privacy Policy
Endo-Gym®
​
PLEASE READ CAREFULLY, IF YOU DO NOT ACCEPT THESE TERMS, YOU ARE ADVISED NOT TO USE THE SERVICES of THIS WEBSITE
Use of this website, www.endo-gym.com, and its contents. The website is owned by Katalin Csehek, a registered independent in Belgium under registration number 0644668037. Constitutes your legal agreement to the terms within this policy and your acceptance of this policy is deemed to occur upon your first use of the website.
Katalin Csehek may change this policy from time to time by updating this page. You should check this page before using the website to ensure that you are aware of and accept any changes.
Policy Statement

Katalin Csehek takes a proactive approach to user privacy and we take all reasonable steps to ensure that personal data is safeguarded and kept in accordance with the law. Our use of data and how we process it is outlined in this Policy. This Policy applies to users of the website, our clients and customers. By providing us with your data, you warrant that you are over 13 years of age.
​
About Us

Katalin Csehek is a registered independent in Belgium under registration number 0644668037.
She is the data controller for this website on behalf of Endo-Gym®.
What personal data do we collect?

Information that you provide to us is retained and processed in accordance with EU data protection legislation. This includes information you provide when you purchase a course, a class, an event ticket, a book, workshop or training, sign up to our newsletter or submit a contact form or email to us.
​
Contact:
We have Contact Forms which are used to collect your name, email maybe your phone number as well as your message, or other information so that we can contact you and provide details of our services to you, make bookings, confirm bookings and deal with general company enquiries. Data is held on the grounds of being legitimate to our business interests and in order to provide our services to you.
​
Emails:
We retain copies of emails sent to us on our servers. Your personal information will be held by us in accordance with this Privacy Policy and will be on the basis of being legitimate to our business interests and in order to provide our services to you.
​
Email marketing:
We will record your communication preferences when you sign up to our email newsletters and may monitor whether you open our emails and which links you click on. We will also log your Internet Protocol (IP) address, and the type of web browser used. Data is held on the grounds of being legitimate to our business interests so that we can provide our services to you. Data is processed on the basis of valid consent obtained from you.
​
Email newsletter:
This website operates an email newsletter programme with email newsletter provider – Constant Contact, used to inform visitors about products and services supplied by the Institute for Endocrine Gymnastics or Katalin Csehek. Users can subscribe through an online automated process. Subscriptions may also be manually processed through prior written agreement with the user. Data is only processed with your consent and you have the right to withdraw from further communications at any time.
​
Phone calls:
Phone calls to us may be recorded and any data relating to the call may be retained by us. The data will be held on the basis of being for our legitimate business needs or in order to fulfil our contractual obligations if you are a client of ours.
​
Social media:
We use social media to engage with users and link to our pages on Facebook, Whats App, Instagram and YouTube. We do not keep any specific data that identifies you as an individual user but hold details of our followers on these platforms. You should refer to the Privacy Policies of these channels to understand how they treat your data in relation to linking to our site.
Facebook: https://www.facebook.com/privacy/explanation Whats app: https://www.whatsapp.com/legal/
Instagram: http://instagram.com/legal/privacy/
YouTube: https://policies.google.com/privacy
If you send us a direct message via social media, the details may be retained by us only as relevant to any ongoing contract or to further our legitimate business interests or as required for legal purposes. The third-party provider may also retain details in accordance with their Privacy Policy.
Special categories of data

Some of the information you provide to us may be considered sensitive personal data which includes information about the data subjects’ ethnic or racial origin, political opinions, religious beliefs, trade union membership, physical or mental health, sexual life or criminal record.
You may also wish to provide us with sensitive information affecting the data subject’s ability to participate in a training (this may be about a participant's health for example). We would advise users of this website to send such information by a more secure system such as encrypted email. Sensitive (i.e. special categories of data) personal data will only be processed following your explicit consent.
​
How do we use your data?

We may use the information we collect from you when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, view our website, or use certain other site features in the following ways:
To personalise your experience and to allow us to deliver the type of content and product offerings in which you are most interested.
To improve our website in order to better serve you.
To register for our classes, courses, workshops, events, training (in person or online).
To administer our classes, courses, workshops, events, training (in person or online) including registers.
To administer a contest, promotion, survey or other site feature.
To quickly process your transactions including purchases made online.
To ask for ratings and reviews of services or products.
To follow up with you after correspondence (email, social media or phone enquiries).
Users contacting this website and/or its owners do so at their own discretion and provide any such personal details requested at their own risk.
Your personal information is kept private and stored securely until a time it is no longer required or has no use. Every effort has been made to ensure a safe and secure email submission process, but we advise users using such forms that they do so at their own risk.
​
Email marketing campaigns published by this website or its owners may contain tracking facilities within the actual email. Subscriber activity is tracked and stored in a database for future analysis and evaluation. Such tracked activity may include; the opening of emails, forwarding of emails, the clicking of links within the email content, times, dates and frequency of activity. This is by no means a comprehensive list.
​
This information is used to refine future email campaigns and supply the user with more relevant content based around their activity.
To comply with EU legislation, subscribers are able to unsubscribe from receiving marketing communications from us at any time.
You can refer to the Constant Contact full privacy policy here.
​
Online Payments
This website operates payment methods, which allows visitors to buy books, tickets to events, online trainings provided by the Institute for Endocrine Gymnastics or Katalin Csehek. Bookings can be made through an online automated process, or may be manually processed through prior written agreement.
This booking system may collect personal identification information from a booking made for an event. You may be asked for, as appropriate, your name, email address, mailing address, phone number, and credit card information. The Institute for Endocrine Gymnastics or Katalin Csehek will collect personal identification information from you only if you voluntarily submit such information to them.
​
Payment processing

This website uses PayPal, and Stripe to process customer payments for our services. You may be asked for, as appropriate, name, email address, mailing address, phone number and credit/debit card information. PayPal and Stripe will collect personal identification information from users on behalf of Embodiment Courses Limited only if they voluntarily submit such information to them. You should refer to the Paypal or Stripe privacy policy for further information.
Paypal privacy policy Stripe privacy policy
​
Third-party disclosure

We do not sell, trade, or otherwise transfer to outside parties your personal data unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. It also does not include institutions that require attendance registers for courses, events, training held at their premises or which use their facilities. We may also release information when it’s release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property or safety.
Non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
​
External Links

Occasionally, at our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
​
Social Media Platforms

Communication, engagement and actions taken through external social media platforms that this website and its owners participate on are subject to the terms and conditions as well as the privacy policies held with each social media platform respectively.
Users are advised to use social media platforms wisely and communicate/engage upon them with due care and caution in regard to their own privacy and personal details. Neither this website nor its owners will ever ask for personal or sensitive information through social media platforms.
Users wishing to discuss sensitive details should do so through primary communication channels such as by telephone or email.
This website may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Use of social sharing buttons is at the users own discretion. Social media platforms may track and save your request to share a web page through your social media platform account.
​
Shortened Links in Social Media

Through their social media platform accounts, this website and its owners may share web links to relevant web pages. By default, some social media platforms shorten lengthy URLs (web addresses).
Users are advised to take caution and use good judgement before clicking any shortened URLs published on social media platforms by this website and its owners. Despite the best efforts to ensure only genuine URLs are published, many social media platforms are prone to spam and hacking and therefore this website and its owners cannot be held liable for any damages or implications caused by visiting any shortened links.
​
Data Security

Our website is scanned on a regular basis for security holes and known vulnerabilities in order to make your visit as safe as possible. However, the internet is not completely secure and we cannot guarantee the security of your personal data transmitted through our website or by email. Any transmission is at your own risk.
Your personal data is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology.
We implement a variety of security measures when a user places an order enters, submits, or accesses their information to maintain the safety of your personal data. We regularly carry out back ups of our data which is stored securely.
All transactions are processed through a gateway provider and are not stored or processed on our servers. See ‘payment processing‘ section above for further information on our gateway providers.
​
Your legal rights

Institute for Endocrine Gymnastics or Katalin Csehek recognise a data subjects rights and will uphold these in accordance with data protection laws. You are entitled to see the information held about you and you may ask us about any of the following:
Subject access requests

Data subjects (i.e. individuals) have the right to access personal data that is held by submitting a subject access request (SAR) to Institute for Endocrine Gymnastics or Katalin Csehek. We will endeavour to respond quickly to any such requests, which legally require us to respond within one month of receiving the request and necessary information. A subject access request can be made by emailing us at company email address.
Right to rectification

Data subjects have the right to request that we amend or change personal information that is inaccurate or incorrect.
​
Right to erasure

Data subjects have the right to ask us to delete personal information from our systems without giving any reason and at any time. We will act on any such request without delay.
​
Right to restrict processing

Data subjects have the right to rectification or erasure of personal data in the following circumstances:
Personal data is not accurate;
The processing of data is unlawful – data subjects may request that processing is restricted;
Data is required to exercise legal rights or defend legal claims;
Data is unlawful but there may be lawful grounds for processing, which override this right.
​
Right to data portability

Data subjects have the right to obtain and request the transfer of their data to different service providers.
​
Right to object

Data subjects have the right to object to the processing of data at any time based on their particular situation. This includes objecting to profiling unless it is in the ‘public interest’ or exercised lawfully by an official authority. We will only process data under lawful grounds.
Right not to be subject to decisions based on automated processing

We do not use any automated processing that results in any automated decision based on a data subject’s personal information.
​
Using your rights

If you wish to invoke any of these rights, you should contact the person responsible for data protection by emailing us at company email address.
​
Important Information
Questions and queries

If you have any concerns about how we handle your data, you can contact the Data Controller by email to company email address.
​
Changes to this policy
We reserve the right to change this Privacy Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. You will be deemed to have accepted any changes to the terms of the privacy policy on your next visit of the website following the amendment.
​
Complaints

If you want to raise a concern about the use of your data, you can contact us by email to
contact@endo-gym.com. Alternatively, you can formally raise a concern or complaint to the Information Commissioner’s Office (ICO) directly, or see the options for reporting issues on https://ico.org.be/concerns/
​
No Waiver

No failure or delay by us in exercising any of our rights in accordance with this Privacy Policy or our terms and conditions shall be deemed to be a waiver of that right, and no waiver of a breach of any provision of the Agreement shall be deemed to be a waiver of any subsequent breach of the same or any other provision.
​
Severance

If one or more of the provisions of this Privacy Policy or our terms and conditions is found to be unlawful, invalid or otherwise unenforceable, those provision(s) shall be deemed severed from the remainder of these terms and conditions and shall remain enforceable.
​
Third Party Rights

The terms of this Privacy Policy shall not confer rights on any third parties and accordingly the Contracts (Rights of Third Parties) Act shall not apply.
​
Jurisdiction and Governing Law

The terms of this Privacy Policy and all disputes, whether contractual or otherwise, arising out of or in connection with the policy are governed by and shall be construed in accordance with the laws of England and Wales and each party submits to the exclusive jurisdiction of the Belgian courts.