This privacy policy applies to the processing of personal data of customers and/or users of https://teachersaraenglishbusybees.com, hereinafter referred to as the WEBSITE, owned by Sara Louise Roden-Scott, hereinafter referred to as the CONTROLLER OF THE PROCESSING.
Applicable regulations
Our Privacy Policy has been designed in accordance with REGULATION (EU) 2016/679 of the EUROPEAN PARLIAMENT and of the COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter GDPR EU 2016/679, and insofar as it does not contradict the aforementioned Regulation, by the provisions of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights, hereinafter LOPDGDD 3/2018.
By providing us with their data, the client and/or user declares that they have read and are aware of this Privacy Policy, giving their unequivocal and express consent to the processing of their personal data in accordance with the purposes and terms expressed herein.
Basic information on data protection
BASIC INFORMATION ON DATA PROTECTION
Responsible Sara Louise Roden-Scott
Purpose Responding to requests for information received and queries raised, providing the services requested, as well as sending commercial communications about our services by letter, telephone, email, SMS/MMS, WhatsApp, Telegram or by other equivalent means of electronic communication, provided that the data subject has consented to the processing of his or her personal data for this purpose.
Legitimation Execution of a contract to which the data subject is a party or for the implementation of pre-contractual measures at the request of the data subject. Legitimate interest of the controller. Consent of the data subject.
Recipients No data will be passed on to third parties, unless legally obliged to do so.
Rights You have the right to access, rectify and delete the data, as well as other rights, indicated in the additional information, which can be exercised by contacting the address of the data controller at info@teachersaraenglishbusybees.com.
Additional information You can consult the additional and detailed information on Data Protection in the attached clauses found at https://teachersaraenglishbusybees.com/es/politica-de-privacidad.
Información básica sobre protección de datos
| BASIC INFORMATION ON DATA PROTECTION | |
| Responsible | Sara Louise Roden-Scott |
| Purpose | Respond to requests for information received and queries raised, provide the services requested, as well as send commercial communications about our services by letter, telephone, email, SMS/MMS, WhatsApp, Telegram or other equivalent means of electronic communication, provided that the interested party has consented to the processing of their personal data for this purpose. |
| Legitimation | Performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures at the request of the data subject. Legitimate interest of the controller. Consent of the data subject. |
| Addressees | No data will be passed on to third parties, unless legally obliged to do so. |
| Rights | You have the right to access, rectify and delete the data, as well as other rights, indicated in the additional information, which you can exercise by contacting the address of the data controller at info@teachersaraenglishbusybees.com |
| Additional information | Additional and detailed information on Data Protection can be found in the attached clauses at https://teachersaraenglishbusybees.com/es/politica-de-privacidad |
Additional information on data protection
The data controller is:
- Identity: Sara Louise Roden-Scott
- VAT ID: Y3432115T
- Address: Calle Teja 20 – 29018 Guaro Málaga (Spain)
- Telephone number: (+34) 674 541 588
- E-mail: info@teachersaraenglishbusybees.com
Purposes and legal basis for processing
a) In general
The PERSON RESPONSIBLE FOR THE PROCESSING processes the personal data provided by its customers and/or users for the following purposes:
- Purpose: To respond to requests for information received and queries raised, provide the services requested, carry out administrative, commercial, accounting and tax management, as well as send commercial communications about our services by letter, telephone, email, SMS/MMS, WhatsApp, Telegram or other equivalent means of electronic communication, provided that the interested party has consented to the processing of their personal data for this purpose.
- Legal basis for this processing: Execution of a contract to which the data subject is a party or for the implementation of pre-contractual measures at the request of the data subject. Legitimate interest. The data subject’s consent, which may be withdrawn at any time.
b) Electronic forms WEBSITE
The CONTROLLER OF THE PROCESSING processes the personal data provided by customers and/or users through the electronic forms for collecting personal data existing on the WEBSITE for the purposes identified below:
In relation to the “Contact Form” and with other queries (those that may be addressed through the e-mail accounts that appear on the WEBSITE):
- Purpose: To contact the interested party, deal with requests for information received and answer the queries raised, as well as to send commercial communications about our services by letter, telephone, email, SMS/MMS, WhatsApp, Telegram or other equivalent means of electronic communication, provided that the interested party has consented to the processing of their personal data for this purpose.
- Legal basis for this processing: The data subject’s consent, which may be withdrawn at any time.
In relation to the “I want my class form”:
- Purpose: Allows the user to contact the PROVIDER to indicate the steps to follow in order to carry out the contracting of online classes or class packages.
- Legal basis legitimising this processing: Execution of a contract to which the data subject is a party or for the implementation of pre-contractual measures at the request of the data subject. The data subject’s consent, which may be withdrawn at any time.
When the data requested in the electronic forms are necessary, the CONTROLLER OF THE PROCESSING will indicate this mandatory nature at the time of collecting data from customers and/or users and failure to provide them will mean that the corresponding request cannot be dealt with.
What type of data do we process?
For the purposes set out in the previous section, we process all the Client’s data, which can be divided into the following sources and categories:
a) Data provided directly by the customer and/or user: data provided directly by the customer and/or user, either at the time of requesting the service through the completion of electronic forms for the collection of personal data or in paper format provided for this purpose or those provided throughout the contractual relationship through various means such as, for example, requests for information or complaints filed. The customer and/or user is responsible for its veracity and updating.
b) Data obtained from sources other than the customer and/or user: data obtained from sources other than the customer and/or user, either with their consent or by any other legal authorisation (legitimate interest, compliance with a legal obligation, etc.).
c) Data derived from the development of the commercial relationship: data provided indirectly by the customer and/or user as a result of the provision of the contracted service and the maintenance of this activity. This category includes traffic data, browsing data through the public website or access to the private area or others of a similar nature.
Recording of processing activities
We inform you that the personal data obtained from the client and/or user as a result of filling in the electronic forms on the WEBSITE form part of the Register of Processing Activities (RAT) of the CONTROLLER OF THE PROCESSING, which will be updated periodically in accordance with the provisions of the RGPD EU 2016/679 and the LOPDGDD 3/2018.
Addressees
The personal data of data subjects will be communicated to the recipients listed below:
a) On a general basis:
- The TREATMENT CONTROLLER’s suppliers as data processors, as part of the corresponding provision of services (lawyers, accounting, tax and labour consultancy, consultants and IT service providers – website hosting and email service).
- Competent authorities and bodies, to the extent necessary for the fulfilment of legal obligations.
b) In relation to the “Contact Form” and other queries (those that can be addressed through the e-mail accounts that appear on the WEBSITE) and the “I want my class form”:
- Koala Go, e-learning platform.
- No data will be transferred to third parties, unless legally obliged to do so.
Transfers to third countries
- There are no plans to transfer data to third countries without an adequate level of protection.
Retention periods
Personal data will be kept
a) In general:
- The data will be kept as long as you do not request their deletion, and, in any case, for the years necessary to comply with legal obligations.
b) In relation to the “Contact Form” and other queries (those that can be addressed through the e-mail accounts that appear on the WEBSITE) and the “I want my class form”:
- The personal data will be kept until the end of the relationship between the CONTROLLER OF THE PROCESSING and the client and/or user, unless the latter previously requests the deletion of the same, or until the interested party withdraws the consent granted at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
For these purposes, the data subject is reminded that he/she must inform the CONTROLLER OF THE PROCESSING as the recipient to whom he/she communicates personal data, of any rectification or deletion of the data of his/her representatives, authorised persons and other contact persons.
Once the relationship has ended, insofar as the personal data of the data subjects are relevant for the purposes of the TREATMENT CONTROLLER’s liability vis-à-vis customers and/or users, such data shall be kept, duly blocked, at the disposal of the competent judicial authorities or public administrations, for the enforcement of the liabilities arising from the processing for the period of limitation of such liabilities.
Rights of interested parties
The clients and/or users of the WEBSITE or their legal representative, in the case of minors, may exercise the following rights before the CONTROLLER OF THE PROCESSING, insofar as applicable: access to personal data, rectification, erasure (right to be forgotten), limitation of processing, data portability, opposition to processing and not to be subject to automated individual decisions and, when the processing is based on consent, the right to withdraw it at any time.
Customers and/or users or their legal representative, in the case of minors, may exercise these rights by means of a written and signed request sent to the postal address of the CONTROLLER OF THE PROCESSING located at Calle Teja 20 – 29018 Guaro Málaga (Spain) or through the e-mail address info@teachersaraenglishbusybees.com, attaching, in both cases, the interested party or their legal representative, a legally valid proof of identity, such as a photocopy of the DNI/NIE or equivalent document, and clearly indicating the right they wish to exercise.
Clients and/or users or their legal representative, in the case of minors, will also have the right to file a complaint before the competent Supervisory Authority (Spanish Data Protection Agency) if they observe that the processing does not comply with the regulations in force or if they consider that their rights have been violated with regard to the protection of their personal data, especially when they have not obtained satisfaction in the exercise of their rights, through the WEBSITE https://www.aepd.es.
These rights will be dealt with by the CONTROLLER OF THE PROCESSING within 1 month, which may be extended to 2 months if the complexity of the request or the number of requests received so requires. This is without prejudice to the duty to keep certain data under the legal terms and until the possible liabilities arising from a possible processing, or, where appropriate, from a contractual relationship, expire.
In addition to the above, and in relation to data protection regulations, Users who so request, have the possibility of organising the destination of their data after their death.
Sending of commercial communications
In compliance with the provisions of the Second Final Provision of Law 9/2014, of 9 May, on Telecommunications, which amends Law 34/2002, of 11 July, on information society services and electronic commerce, commercial communications sent by electronic means must be clearly identifiable as such, and the individual or legal entity on behalf of which they are sent must also be clearly identifiable, without prejudice to the provisions of the regulations issued by the Autonomous Communities with exclusive powers over consumption.
The client and/or user, who provides their contact details to the PERSON RESPONSIBLE FOR THE PROCESSING by clicking on the “SEND” button on the electronic forms for collecting personal data on the website and affirmatively ticking the two existing consent boxes, “I accept the processing of my data for the purposes indicated in the basic information on data protection” and “I give my consent to receive commercial communications about your services”, you expressly authorise and give your express, free and unequivocal consent to the CONTROLLER OF THE PROCESSING to process your personal data for the purpose of sending you commercial communications about its services by letter, telephone, e-mail, SMS/MMS, WhatsApp, Telegram or other equivalent electronic means of communication.
The legal basis that legitimises this processing is the consent of the data subject, which may be revoked at any time.
In compliance with the provisions of articles 21 and 22 of Law 34/2002, of 11 July, on information society services and electronic commerce, users may oppose the processing of their data for promotional purposes and revoke their consent to receive commercial communications via email by simply notifying the PROVIDER of their wish by means of a simple and free procedure, consisting of sending an email to the email address info@teachersaraenglishbusybees.com, indicating “UNSEND” or “DO NOT SEND” in the subject line of the message.
The data provided will be kept for as long as the commercial relationship is maintained or for the years necessary to comply with legal obligations.
Social media policy
The TREATMENT CONTROLLER has profiles on the main social networks on the Internet.
In this case it is considered responsible for the processing of the data of its users, including followers, subscribers, fans, or simply people who make comments or queries through these channels.
In this sense, the TREATMENT CONTROLLER could use this profile to inform its users of news that it considers appropriate for the purpose of the services offered, or perhaps it could also share information or current articles published by other users of the social networks.
In no case will it use personal information of users without their consent to have relationships other than those expected in the aforementioned social network, requesting, where appropriate, the user’s own consent.
Accuracy of the data provided by the interested parties
The client and/or user is responsible for the accuracy of the information provided by filling in the electronic forms made available on the WEBSITE or by sending e-mails to the different accounts under the Internet domain teachersaraenglishbusybees.com, and is responsible for the accuracy of all the data provided and will keep it updated to reflect a real situation, being responsible for false or inaccurate information provided and for any damage, inconvenience and problems that may be caused to the TREATMENT CONTROLLER or third parties.
Security measures
The TREATMENT CONTROLLER guarantees that it has implemented on the WEBSITE the appropriate technical and organisational policies to apply the security measures established by the RGPD EU 2016/679 and the LOPDGDD 3/2018 in order to protect the rights and freedoms of customers and/or users and has provided them with the appropriate information so that they can exercise them.
The CONTROLLER OF THE PROCESSING in order to protect individual rights, especially in relation to automated processing and in order to be transparent with customers and/or users, has established a policy that covers all such processing, the purposes pursued by the latter, the legitimacy of such processing and also the tools available to the customer and/or user so that they can exercise their rights.
The WEBSITE is created with the WordPress content management system using the Elementor Pro visual builder, has an SSL encryption certificate activated for the entire domain and the Complianz cookie consent plugin for compliance with the RGPD EU 2016/679.
The WEBSITE is hosted on the servers that IONOS CLOUD, S.L., with N.I.F.: B85049435 and address in Avenida de la Vega, 1 5ª – Puerta C – 28108 Alcobendas, Madrid (Spain), offers to the TREATMENT CONTROLLER, located in its data centre in France, being the assigned IP of Spanish rank.
All information will be stored and managed with due confidentiality, applying the necessary computer security measures to prevent access or misuse of your data, its manipulation, deterioration or loss.
However, the customer and/or user must bear in mind that the security of computer systems is never absolute. When personal data is provided over the Internet, such information could be collected without your consent and processed by unauthorised third parties. The CONTROLLER OF THE PROCESSING declines any kind of responsibility for the consequences of these acts for the User, if he/she voluntarily published the information.
Acceptance and consent
The client and/or user declares to have been informed of the conditions on personal data protection, accepting and consenting to the automated processing of the same by the CONTROLLER OF THE PROCESSING in the manner and for the purposes indicated in this Privacy Policy. Certain services provided on the WEBSITE may contain special conditions with specific provisions on personal data protection.
Changes in the present privacy policy
THE CONTROLLER OF THE PROCESSING reserves the right to modify the present Privacy Policy in order to adapt it to new legislation, jurisprudence, interpretation of the Spanish Data Protection Agency, as well as to industry practices.
In such cases, the CONTROLLER OF THE PROCESSING will announce on the websites the changes introduced with reasonable notice before their implementation.
This privacy policy may be complemented by the Legal Notice, Cookies Policy and the General Conditions of Contract that, where appropriate, are collected for certain products or services, if such access involves any speciality in terms of personal data protection.
