During your first visit to our site you will be asked to accept the use of our cookies. If you accept, you will not be asked again for a further 90 days, unless you access the site from a different device, or bowser used during the initial request. After 90 days, you will be asked again.
We do not use any 3rd party cookies, only internal cookies to our site for remembering your log in details should you wish (such as the email address used, but not the password).
At BBC Direct, t/a Bodies Beautiful, Czech Direct, Orthopaedic Surgery, Weight Surgery, and Prague Cosmetic, collectively herein referred to as BBC Direct, we understand that we have a responsibility to protect and respect your privacy and look after your personal data.
This Privacy Notice, inclusive of our General Terms of Service, explains what personal data we collect, how we use your personal data, reasons we may need to disclose your personal data to others and how we store your personal data securely.
For clarity, BBC Direct may be both data controller and data processor for your personal data under certain circumstances.
We must advise that this policy is subject to change, so please check our website on a regular basis for any further changes.
Data Protection law will change on 25 May 2018
This Privacy Notice sets out your rights under the new laws.
Who are we?
BBC Direct is a provider of cosmetic, bariatric and orthopaedic surgery.
How the law protects you
Data protection laws state that we are only able to process personal data if we have valid reasons to do so. The basis for processing your personal data includes, but is not limited to, your consent, performance of a contract, to enable your procedure(s) requested to be process accurately with a limited number of surgeons, clinics and hospitals. And remittance, and to contact you for customer service purposes.
How do we collect personal data from you?
We receive information about you from you when you use our website, complete forms on our website, if you contact us by phone, email, live-chat or otherwise in respect of any of our products and services or during the purchasing / quoting of any such product. Additionally, we also collect information from you when you sign up, enter a competition, promotion or survey or when you inform us of any other matter.
If you provide us with personal data about a third party, you warrant that you have obtained the express consent from the third party for the disclosure and use of their personal data.
Your personal data may be automatically collected when you use our services, including but not limited to, your IP address, device-specific information, server logs, device event information, location information and unique application numbers.
What type of data do we collect from you?
How do we use your data?
We use information about you in the following ways:
• To process orders that you have submitted to us;
• To provide you with products and services;
• To comply with our contractual obligations we have with you;
• To help us identify you and any accounts you hold with us;
• To enable us to review, develop and improve the website and services;
• To provide customer care, including responding to your requests if you contact us with a query;
• To administer accounts, process payments and keep track of billing and payments;
• To carry out marketing and statistical analysis;
• To notify you about changes to our website and services;
• To provide you with information about products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes; and
• To inform you of service and price changes
We will keep your personal data for the duration of the period you are a customer of BBC Direct. We shall retain your data only for as long as necessary in accordance with applicable laws.
On the closure of your account, we may keep your data for up to 20 years after you have submitted any information to us. We may not be able to delete your data before this time due to our legal and/or accountancy obligations. We assure you that your personal data shall only be used for these purposes stated herein.
Who has access to your personal data?
Here is a list of all the ways that we may use your personal data and how we share the information with third parties.
We do not share or sell you details with any third party, except specifically:
Surgeons, Medical Practitioners, and Medical Facilities whom we work with directly, and only for the sole purpose to enable your requested procedure to be validated and quoted by such third party.
For the avoidance of doubt, we do not and never shall sell your personal data to third parties for marketing or advertising purposes.
Similarly, we may share your personal data if we are under a duty to disclose data in order to comply with any legal obligation.
In preventing the use or processing of your personal data, it may delay or prevent us from fulfilling our contractual obligations to you. It may also mean that we shall be unable to provide our services or process the cancellation of your service.
You have the right to object to our use of your personal data, or ask us to delete, remove or stop using it if there is no need for us to keep it. This is known as your right to be forgotten. There are legal and accountancy reasons why we will need to keep your data, but please do inform us if you think we are retaining or using your personal data incorrectly.
Our Privacy Notice shall be made clear to you at the point of collection of your personal data.
You have the right to ask us not to process your personal data for marketing purposes. If you choose not to receive marketing communications from us about our products and services, you will have the choice not to choose these.
We will not contact you for marketing purposes unless you have given us your prior consent. You can change your marketing preferences at any time by emailing firstname.lastname@example.org
Accessing and updating your data
You must maintain the accuracy of your information and ensure all your details, including but not limited to, name, address, title, phone number, and e-mail address are kept up to date at all times. You must do this by updating your personal details by time by emailing email@example.com
You have the right to access the information we hold about you. Please email your requests to time by emailing firstname.lastname@example.org so that we can obtain this information for you.
Our cookies policy is available to view https://czechdirect.eu/pp
Links to other sites
BBC Direct may provide links to third party sites. Since we do not control those websites, we encourage you to review the privacy policies of these third party sites. Any information that is supplied on these sites will not be within our control and we cannot be responsible for the privacy policies and practices of these.
Where we store your personal data
We follow accepted ISO standards to store and protect the personal data we collect, including the use of encryption if appropriate.
All information you provide to us is stored on our secured servers within the EEA. From time to time, your information may be transferred to and stored in a country outside the EEA in relation to provision of the services. The laws in these countries may not provide you with the same protection as in the EEA; however, any third party referred to above outside of the EEA has agreed to abide by European levels of data protection in respect of the transfer, processing and storage of any personal data. By providing your data to us, you agree to this transfer and storage. However, we will ensure that reasonable steps are taken to protect your data in accordance with this privacy notice.
As the transmission of information via the internet is not completely secure, we cannot guarantee the security of your data transmitted to our site and any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Any sensitive data (payment details for example) are encrypted and protected.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping the password confidential. We ask you not to share a password with anyone.
We agree to take reasonable measures to protect your data in accordance with applicable laws and in accordance with our General Terms and Conditions.
In the event of a data breach, we shall ensure that our obligations under applicable data protection laws are complied with where necessary.
Please e-mail any questions or comments you have about privacy to us at email@example.com