Privacy Policy

At KARINA WOSZCZYNA GONZALEZ, we understand that it is essential to maintain a transparent relationship with you. Therefore, below, we present our Privacy Policy so that you are always duly informed about how we collect and securely process any data you provide us.

Your data will be processed in accordance with current legislation, specifically in compliance with Regulation (EU) 2016/679 of April 27, 2016 (GDPR) concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data. Also, in line with Organic Law 3/2018 of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights.

A careful reading of our Privacy Policy will provide you with the necessary information to understand how we will handle the data you provide.

1. WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

If you or an authorized person have provided us with your data, we inform you that KARINA WOSZCZYNA GONZALEZ, with Tax ID: Y2610251H, is responsible for processing your data. These data will be treated in accordance with current regulations on personal data protection.

There may be other data controllers for specific processing activities. In such cases, we will always inform you of who is responsible for the processing, along with their identification details.

The Website may include hyperlinks or links that allow access to third-party websites distinct from www.nextstepfluency.es, which are not operated by KARINA WOSZCZYNA GONZALEZ. The owners of these websites will have their own data protection policies and will be responsible for their processing and privacy practices.

At KARINA WOSZCZYNA GONZALEZ, we are committed to upholding the obligation of confidentiality regarding personal data and to safeguarding it. We adopt the necessary measures to prevent unauthorized alteration, loss, or processing, as well as unauthorized access in accordance with the GDPR.

2. WHERE DO WE INFORM YOU?

At KARINA WOSZCZYNA GONZALEZ, we inform you through the website www.nextstepfluency.es, in the relevant section for the privacy policy. More information can be found in the “Legal Notice.”

3. WHAT PERSONAL DATA DO WE PROCESS?

The personal data we process are:

• Those you voluntarily provide to us.
• Data derived from the communications you maintain with us.
• Information related to your navigation when using online services, such as IP address or information from cookies or similar devices (you can view our Cookie Policy on the website).
• Information available from publicly accessible sources to which we may lawfully have access.
• Data derived from the contractual or pre-contractual relationship you have with us, including your image, which we will inform you about when applicable.
• Data provided by third parties about you, provided there is a legitimate basis for it or you have given your consent.
• Data from third parties that you provide to us, with the prior consent of the third party.

You can find more information in the activity records section of this privacy policy.

4. HOW DO WE PROCESS THE DATA?

At KARINA WOSZCZYNA GONZALEZ, we process your personal data always in strict compliance with current legislation. Moreover, we inform you that we have appropriate technical and organizational measures in place to ensure an optimal level of security, ensuring that only authorized individuals have access to your data, that we keep the data intact, avoiding any intentional or accidental loss, and that we have reinforced our data processing systems and services.

However, since KARINA WOSZCZYNA GONZALEZ cannot guarantee the invulnerability of the internet or the absence of hackers or others who may fraudulently access personal data, we commit to notifying you without undue delay when a personal data breach occurs that is likely to result in a high risk to the rights and freedoms of natural persons. As defined in Article 4 of the GDPR, a personal data breach is any breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored, or otherwise processed.

The operations, procedures, and technical processes we carry out, whether automated or not, that enable the collection, storage, modification, transfer, and other actions related to personal data are considered data processing.

5. WHAT IS THE LEGITIMACY OF THE PROCESSING?

The legal basis for processing personal data will be determined by the contractual or pre-contractual relationship, the employment relationship, or any other requirement for data processing, such as express consent.

6. HOW DO WE MANAGE ELECTRONIC COMMUNICATIONS?

In accordance with the provisions of Law 34/2002 of July 11, on Information Society Services and Electronic Commerce, and Directive 2002/58/EC, we inform you that you may receive communications and information of a commercial nature through electronic communication systems (emails, automated form responses, and other communication systems) when you have granted us your consent or when these communications refer to products or services similar to those previously provided by the data controller.

If you do not wish to receive such communications, you can notify us via the same channel by indicating “UNSUBSCRIBE FROM COMMERCIAL COMMUNICATIONS” in the subject line, and your personal data will be removed from our database. Your request will be processed within one month from its submission. If we do not receive an explicit response from you, we will assume that you accept and authorize our entity to continue with such communications.

In the event that you receive such communications through these means, we inform you that the messages are directed exclusively to their intended recipient and may contain privileged or confidential information. If you are not the intended recipient, we notify you that the unauthorized use, disclosure, and/or copying of the message is prohibited under current legislation.

7. HOW LONG DO WE KEEP YOUR DATA?

Personal data related to individuals that we collect at KARINA WOSZCZYNA GONZALEZ through any means will be kept as long as the data subject does not request their deletion. Likewise, the data will be kept while the relationship that originated the processing of the data remains in place, always respecting the legally established retention periods. Once this period is over, the personal data will be deleted from all systems of KARINA WOSZCZYNA GONZALEZ.

8. WILL YOUR DATA BE COMMUNICATED TO THIRD PARTIES?

There will be no assignment, transmission, or transfer of personal data, except as required by law. If a request is made by a Public Administration or Regional Institutions within the scope of their legally attributed functions, your data will be transmitted.

If there is a transfer, transmission, or transfer of personal data beyond the previously outlined cases, you will be informed in advance so that, if necessary, you can provide your consent.

To organize ourselves properly, maintain good operations, and ensure good management procedures, it may be necessary for KARINA WOSZCZYNA GONZALEZ to hire advisors, professionals, or other service companies to process data under our instructions.

This third-party processing is regulated in a contract that is in writing or in another legally accepted form that allows for its conclusion and content to be verified, explicitly stating that the data processor will process the data in accordance with our instructions and will not use or apply the data for any purpose other than that stated in the contract, nor communicate the data, not even for storage, to other persons.

9. WHAT ARE YOUR RIGHTS?

Data protection regulations provide you with the following rights:

• Right of Access: The right to obtain confirmation from KARINA WOSZCZYNA GONZALEZ as to whether or not your personal data is being processed and, if so, to obtain information about your specific personal data and the processing KARINA WOSZCZYNA GONZALEZ has carried out or is carrying out, as well as, among other things, information available on the origin of the data and the recipients of the communications made or planned regarding them.
• Right to Rectification: The right to have your personal data corrected if they are inaccurate or, considering the purposes of the processing, incomplete.
• Right to Erasure (“right to be forgotten”): The right, whenever current legislation does not establish otherwise, to have your personal data deleted when they are no longer necessary for the purposes for which they were collected or processed; you withdraw your consent for the processing and there is no other legal basis for it; you object to the processing, and there is no other legitimate reason to continue with it; the data has been unlawfully processed; the personal data must be deleted in compliance with a legal obligation; or the personal data has been obtained as a result of a direct offer of information society services to a minor under 14 years of age. In addition to deleting the data, the Data Controller must, considering the available technology and the cost of implementation, take reasonable measures to inform data controllers who are processing the personal data of the data subject’s request to delete any links to such personal data.
• Right to Restriction of Processing: The right to restrict the processing of your personal data. You have the right to obtain the restriction of processing when you challenge the accuracy of your personal data; the processing is unlawful; the Data Controller no longer needs the personal data, but you need them to make claims; and when you have objected to the processing.
• Right to Data Portability: When processing is carried out by automated means, you have the right to receive your personal data from the Data Controller in a structured, commonly used, and machine-readable format and to transmit it to another Data Controller. Where technically feasible, the Data Controller will directly transfer the data to that other controller.
• Right to Object: The right to object to the processing of your personal data or to stop the processing by KARINA WOSZCZYNA GONZALEZ.
• Right Not to Be Subject to Automated Decisions, Including Profiling: The right not to be subject to a decision based solely on automated processing of your personal data, including profiling, unless otherwise provided for by law.

If you would like more information regarding the processing of your data, to correct any inaccuracies, to object to or limit any processing you believe is unnecessary, or to request the cancellation of processing when the data is no longer needed, you can write to KARINA WOSZCZYNA GONZALEZ at Calle Camino de Caicena 1, 18008 – Granada (Granada) or via email at karinateachenglish@gmail.com.

The communication should include the following information: the user’s full name, the request being made, address, and supporting data. The exercise of rights must be carried out by the user. However, it may be exercised by a legal representative. In such a case, documentation must be provided proving this representation of the data subject.

Additionally, we inform you that you can withdraw the consent given without affecting the lawfulness of the processing already carried out by sending your request to the same address mentioned above. In this case, you must include a copy of your ID or a document proving your identity with your request.

If you believe there is a problem or violation of current regulations regarding how your personal data is being processed, you have the right to effective judicial protection and to lodge a complaint with a supervisory authority, in particular in the State where you have your habitual residence, place of work, or place of the alleged infringement. In the case of Spain, the supervisory authority is the Spanish Data Protection Agency (https://www.aepd.es/) – C/ Jorge Juan, 6 28001-Madrid – FAX: 914483680 – TEL: 901 100 099 – Email: ciudadano@agpd.es.

10. WHAT IS THE PURPOSE AND LEGAL BASIS FOR PROCESSING DATA, AND HOW LONG WILL DATA BE RETAINED?

We detail below the purposes of the data processing activities carried out by one or all of the Data Controllers previously listed.

11. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

It is necessary that the User has read and agrees to the terms on the protection of personal data contained in this Privacy Policy and consents to the processing of their personal data for the Data Controller to proceed with the processing as indicated, within the timeframes, and for the purposes stated. Use of the Website implies acceptance of its Privacy Policy.

KARINA WOSZCZYNA GONZALEZ reserves the right to modify this Privacy Policy, at its discretion or prompted by a legislative, jurisprudential, or doctrinal change from the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. It is recommended that the User periodically reviews this page to stay informed of the latest changes or updates.

This Privacy Policy has been updated to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons concerning the processing of personal data and the free movement of such data (GDPR), and Organic Law 3/2018 of December 5, on the Protection of Personal Data and the guarantee of digital rights.

This Privacy Policy document was reviewed on: 25/09/24.