At Your Spanish Teacher, we are committed to maintaining the trust and confidence of visitors to our SITE and to protect your privacy and any data that you share with us. This statement describes what information we collect from you, what we do with it, whether we share it with others and what your rights are in this.
This privacy policy is adapted to current European regulations on the protection of personal data on the internet. Specifically, to the General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR), regarding the protection of natural persons with regard to the processing of personal data and the free movement of these data.
Identity of the person responsible for the treatment of personal data
The person responsible for the treatment of the personal data collected in Your Spanish Teacher is: Sonia Casado García (hereinafter, CONTROLLER). Our identification details are as follows:
Registered address: Musicallaan 351, 3543ED Utrech, The Netherlands
Email: contact@yourspanishteacher.nl
Phone: +31 (0)6 11457698
Website: https://yourspanishteacher.nl
KVK-number: 77217284
Why we collect personal data and how we process it
The personal data is collected and managed by the CONTROLLER in order to be able to fulfill the commitments established between the SITE and the USER and/or for the maintenance of the commercial relationship with the USER.
The operations planned to carry out the treatment are:
- Remission of commercial advertising communications by email, SMS, MMS, social communities or any other electronic or physical means, present or future, that enables commercial communications. These communications will be made by the CONTROLLER and related to her products and services, or her collaborators or suppliers with whom she has reached a promotion agreement. In this case, third parties will never have access to personal data.
- Make statistical studies.
- Process orders, requests or any type of request that is made by the USER through any of the contact forms that are made available to them.
- Remit communications of our Blog updates, in the case of subscriptions.
In accordance with the provisions of current regulations on the protection of personal data, the CONTROLLER is complying with all the provisions of the GDPR for the treatment of personal data of its responsibility, and manifestly with the principles described in article 5 of the GDPR, by which they are treated in a lawful, loyal and transparent manner in relation to the interested party and, adequate, pertinent and limited to what is necessary in relation to the purposes for which they are treated.
What personal data we collect
We process data that USER have entered themself, data that Cookies collect about them, and data that we add ourself, such as a student number.
Personal data is all data that can be traced back to the USER. For example their name, email address, address details, purchased products. This SITE collects personal data from the USER:
- By registering in the Student Area.
- When the USER perform the level test.
- By signing up for a free trial class.
- When the USER request information using the contact form.
- When ordering via the webshop.
- When booking classes on the calendar.
- When they subscribe to our Blog.
- When making comments on the pages that allow this option.
At any of these points, USERS, by marking the corresponding boxes and entering data in the fields marked with an asterisk (*), expressly and freely and unequivocally accept that their data is necessary for the provider to attend their request, being the inclusion of data in the remaining fields voluntary. USERS guarantee that the personal data provided to the CONTROLLER is truthful and they will be responsible for communicating any modification thereof.
In no case we collect information about the USER’s bank details and/or debit or credit cards when economic transactions are carried out outside the SITE through the PAYPAL platform. When made by providing the credit card within the SITE, this data is sent in encrypted form to the STRIPE platform, which is responsible for managing the payment.
In any case, all communications between the SITE and the USER are secured by an SSL security certificate, so that at any time the USER can confirm that the page visited belongs to the SITE by verifying the URL and the “secure site” symbol placed in front of this URL, which will be of type https.
The mandatory data requested through the SITE are necessary for the provision of an optimal service to the USER. In the event that all the data is not provided, there is no guarantee that the information and services provided are completely adjusted to your needs.
In addition, various data is stored through the use of Cookies. If you want to know more about our Cookie Policy, read the section dedicated to them.
Comments
When USERS leave comments on the SITE, we collect the comment itself and data shown in the comments form: name and email address, and also the USER’s IP address and browser USER agent string to help spam detection.
An anonymized string created from the USER’s email address (also called a hash) may be provided to the Gravatar service to see if they are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of their comment, the USER’s profile picture is visible to the public in the context of their comment.
Contact forms
When USERS send a query throught the form located in our Contact page or ask for a Taster Class throught the corresponding form, we collect their full name, email address, level of Spanish and the message. We collect their age, country and phone number only if USERS opt-in for that option.
Level test
When USERS take our level test, we collect the test result, which translates into the USERS’ level of Spanish language, along with their full name and email address, and optionally, their phone number and country.
Shop
When an USER creates an account in our Shop, we process personal information such as name, email address, and possibly phone number and Company name. We also collect the name and the quantity of the products purchased by the USER.
Embedded content from other websites
Articles on this SITE may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use Cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
These third-party websites have their own, independent privacy rules. We, therefore, take no responsibility for the content and activities of these linked sites. That is why we recommend you to read the privacy policies of these websites.
Analytics!!!!!
Legitimation for the treatment of your data
The legal basis for the treatment of your data is consent. Such consent is express, free, specific, informed and unequivocal.
The USER will have the right to withdraw their consent at any time. Withdrawing consent will be as easy as giving it. As a general rule, the withdrawal of consent will not condition the use of the SITE.
On the occasions when the USER must or can provide their data through forms to make inquiries, request information or for reasons related to the content of the SITE, they will be informed in the event that the completion of any of them is mandatory because they are essential for the proper development of the operation carried out.
Who we share your data with
The data will not be communicated to third parties, except legal obligation.
The CONTROLLER expressly informs and guarantees USERS that their personal data will not be transferred in any case to third parties, and that whenever they make any type of transfer of personal data, the express, informed and unequivocal consent of the USERS will be requested in advance.
How long we retain your data
The data will be kept as long as there is a mutual interest to maintain the purpose of the treatment, and when they are no longer necessary for that purpose, will be deleted with adequate security measures to guarantee the pseudonymisation of the data or their total destruction.
If the USER leaves a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For USERS that register on the SITE, we also store the personal information they provide in their USER profile. All USERS can see, edit, or delete their personal information at any time (except they cannot change their username). SITE administrators can also see and edit that information.
What rights you have over your data
If you have an account on this SITE, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
In general, the rights that assist you are as follows:
Right of access: It is the right of the USER to obtain confirmation of whether or not their personal data is being processed and, if so, to obtain information about their specific personal data and the treatment that has been or is being carried out.
Right of rectification: It is the right of the USER to modify their personal data that turns out to be inaccurate or, taking into account the purposes of the treatment, incomplete.
Right of deletion (“right to be forgotten”): It is the right of the USER, provided that the current legislation does not establish otherwise, to obtain the deletion of their personal data when it is no longer necessary for the purposes for which it was collected or treated; the USER have withdrawn their consent to the treatment and have no other legal basis; the USER oppose the treatment and there is no other legitimate reason to continue with it; the personal data has been illicitly processed; or personal data must be deleted in compliance with a legal obligation.
Right to limitation of treatment: It is the right of the USER to limit the treatment of their personal data. The USER have the right to obtain the limitation of the treatment when they challenge the accuracy of their personal data; the treatment is unlawful; the CONTROLLER for the treatment no longer needs the personal data, but the USER needs it to make claims; and when the USER have opposed the treatment.
Right to data portability: In the event that the treatment is carried out by automated means, the USER will have the right to receive from the CONTROLLER for the treatment their personal data in a structured format, of common use and mechanical reading, and to transmit them to another responsible in charge of treatment.
Right of opposition: It is the right of the USER to not carry out the treatment of their personal data or to cease the treatment thereof by the CONTROLLER.
Right not to be subject to a decision based solely on automated processing, including profiling: It is the right of the USER not to be subject to an individualized decision based solely on automated processing of their personal data, including profiling, existing unless the current legislation establishes otherwise.
How you can exercise your rights
The USER may exercise their rights by means of a written communication addressed to the CONTROLLER for the treatment with the reference “GDPR”, specifying:
- Name and surname(s) of the USER.
- Address for notification purposes.
- Petition with the specific reasons for the request or information that they want to access.
- Any document that accredits the request they make.
- Date and signature of the applicant.
This request and any other attached document may be sent to the email address contacto@yourspanishteacher.nl.
Where we send your data
Visitor comments may be checked through an automated spam detection service. Specifically, this SITE uses Akismet to reduce spam. Learn more about how your comment data is processed here: https://akismet.com/privacy/.
How we protect your data
The CONTROLLER guarantees that appropriate technical and organizational policies have been implemented to apply the security measures established by the GDPR in order to protect the rights and freedoms of USERS, and has communicated the appropriate information so that they can exercise them.
The SITE has adopted all the necessary technical measures to prevent the loss, misuse, alteration, unauthorized access or theft of the personal data provided. We guarantee that we will always do our best to protect our system with the technology at our disposal to prevent such violations. However, the USER must be aware that Internet security measures are not impregnable and that the total absence of hackers or others who fraudulently access personal data cannot be guaranteed, so if any of these cases occurs, no responsibility is assumed by the SITE.
In this way, the CONTROLLER for the treatment undertakes to communicate to the USER without delay when a violation of the security of personal data occurs (or is suspected) that is likely to entail a high risk for the rights and freedoms of natural persons. In accordance with the provisions of article 4 of the GDPR, a violation of the security of personal data is understood to be any violation of security caused by the accidental or unlawful destruction, loss or alteration of personal data transmitted, preserved or otherwise processed, or unauthorized communication or access to such data.
Acceptance and modification of the Privacy Policy
It is necessary that the USER has read and agrees with the conditions on the protection of personal data contained in this Privacy Policy, as well as that they accept the treatment of their personal data so that the CONTROLLER can proceed to it for the indicated purposes. The use of the SITE will imply the acceptance of its Privacy Policy.
Your Spanish Teacher may modify this Privacy Policy at any time, with successive versions being published on the SITE. In any case, it will communicate with prior notice the modifications of this policy that affect USERS so that they can accept them.
This Privacy Policy was reviewed on 5th August 2020.