I. General Information

1. The administrator of personal data is – Marta Zajac-Asllanaj, Marta's Classroom, Flat 30, 42 Mollison Drive, SM6 9BY, info@martasclassroom.co.uk.
2. We undertake to comply with the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/ EC) and the Personal Data Protection Act 2018, after enactment.
3. The Administrator reserves the right to change this Privacy Policy. Any changes or new terms will be made available through our Site www.martasclassroom.co.uk .

II. Personal data

1. According to the EU General Data Protection Regulation ("GDPR"): Personal data is defined as "any information relating to an identified or identifiable natural person ("data subject"); by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
2. The Administrator collects information provided voluntarily by the Customers of the Online Store. However, the condition for placing an order is to provide marked personal data.
3. The Administrator will make every effort to protect the privacy and information provided to him about the Customers of the Online Store. The Administrator exercises due diligence in the selection and application of appropriate technical measures, including those of a programming and organizational nature, in order to protect the processed data, and in particular protects data against unauthorized access, disclosure, loss and destruction, unauthorized modification, as well as against their processing with in violation of applicable law.
4. Personal data will be processed in accordance with the rules of art. 5 GDPR.
Personal data will be:
a) processed lawfully, fairly and in a transparent manner in relation to the data subject ("lawfulness, fairness and transparency");
b) collected for specific, explicit and lawful purposes and not further processed in a manner incompatible with those purposes; ("purpose limitation");
c) adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed ("data minimization");
d) accurate and, where necessary, updated ("accuracy");
e) kept in a form that allows identification of data subjects for no longer than is necessary for the purposes for which personal data are processed; ("storage limitation");
f) processed in a manner that ensures adequate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures ("integrity and confidentiality").

III. Legal basis

1. The basis for the processing of the Customer's Personal Data is primarily the necessity to perform the contract to which he is a party or the need to take action at his request before its conclusion (Article 6(1)(b) of the GDPR).
2. After expressing a separate consent, in accordance with art. According to Art. 6 sec. 1 lit. a GDPR, data may also be processed for the purpose of sending commercial information by electronic means.
3. If the Customer subscribes to the newsletter, the Administrator will send to the e-mail address provided by the Customer messages containing information about products and services available in the Online Store, as well as information about organized competitions, promotions (Article 6(1)(a) of the GDPR). ).
4. For other purposes, the Customer's Personal Data may be processed on the basis of:
a) applicable law, when processing is necessary to fulfill the legal obligation of the Administrator, e.g. when, on the basis of tax or accounting regulations, the Administrator settles concluded sales contracts (Article 6(1)(c) of the GDPR);
b) necessary for purposes other than those listed above, resulting from legitimate interests pursued by the Administrator or by a third party, in particular to establish, pursue or defend claims, market and statistical analyzes (Article 6(1)(f) of the GDPR).

IV. Personal information we collect and use

1. We ensure that the collection and use of your personal data is lawful. Therefore, for the purposes listed below, we only use your personal data if one of the following conditions is met:
a) You have consented to this.
b) We need your personal data to perform the contract you enter into with us, for example when purchasing a product via the website.
c) We must comply with legal obligations.
d) We must protect your vital interests.
e) Your data is necessary for the public interest.
f) We have a legitimate interest in the processing of personal data.

2. We may collect and process your data when you visit our website and when you use our website to make a purchase.
3. By visiting and using our website, you consent to us obtaining and processing the following information about you:
a) Location data and online identifiers, including details of your visit to our site and the resources you access;
b) Information about your computer, including IP address, operating system and browser.
c) Cookies and other information about general internet use.
d) This information is used to administer the system and ensure full optimization of the use of the system. This information is statistical, aggregated and does not identify any specific person. We may provide reports using this information to our advertisers.
4. By providing us with information via our website, you also consent to the processing of this data and its use for the purposes specified by you. This may include:
a) Information you provide by filling out forms on our website www.martasclassroom.co.ukincluding information you provide when registering an account with us, subscribing to any of our services, contacting us.
b) When you write to us, we may keep a copy of your correspondence and contact details.
5. When you make a purchase through our website, it is necessary for us to obtain and process the following data in order to fulfill your order with us:
a) Your name, address, billing information and contact details.
b) A record of your transactions with us and purchase history.

V. Storage period

1. We store your data as long as it is necessary to provide our online offer and related services or as long as we have a legitimate interest in further storage. In all other cases, we delete your personal data, except for data that we are obliged to retain for contractual or statutory purposes (e.g. tax or commercial law), retention periods (e.g. invoices). At this point, contractual retention periods may also result from agreements with third parties (e.g. holders of copyright or intellectual property rights). Data that is only stored because it is subject to a retention period is restricted to processing until the expiration of that period, after which it will be deleted.
2. If the processing of the User's/Client's personal data is based on the User's/Client's consent, the User/Client may withdraw the consent at any time, without prejudice to the processing of personal data prior to the withdrawal of consent.

VI. Recipients of personal data

1. The recipients of the Customer's personal data may be entities implementing the order at the Seller's request and servicing it, such as: accounting companies, IT solution providers, payment processing companies, banks, companies providing marketing services, telecommunications service providers, law firms, authorized state authorities.
2. We do not allow third party providers to use your personal data for their own purposes and allow them to process your personal data only for specified purposes and in accordance with our instructions.
3. To process your personal data for the purposes set out in this Privacy Policy, we may transfer your personal data to third parties based outside the EEA or the UK. When transferring personal data to the EEA, we will continue to comply with all regulatory and legal requirements set out in the EU-UK Trade and Cooperation Agreement and any subsequent arrangements.
4. Whenever we transfer your personal data outside the EEA, we attach a similar level of protection to it (as it would receive in the EEA), ensuring that at least one of the following safeguards is implemented:
a) We will only transfer your personal data to countries, territories or sectors within the country that have been recognized by the European Commission as providing an adequate level of protection for personal data.
b) The transfer is subject to the recipient's legally binding and enforceable obligation to protect personal data (e.g. through the use of standard contractual clauses approved by the European Commission).
c) The transfer is subject to Binding Corporate Rules.
d) The transfer is based on a derogation from the restrictions on the transfer of personal data outside the EEA (e.g. if you consent, the transfer is necessary to perform a contract with you or the transfer is necessary to establish, exercise or defend legal claims).

VII. Your rights regarding personal data concerning you

Right of access:
You have the right to access the data we hold about you. If you would like to receive the data we hold about you, please contact us using the contact details below.
Marta Zajac-Asllanaj, Marta's Classroom, Flat 30, 42 Mollison Drive, SM6 9BY, info@martasclassroom.co.uk.

Right to be forgotten:
You have the right to request the deletion of all data we hold about you. Upon request, we will delete all your data within 30 days.
Right to object:
You have the right to prohibit the use of your data for certain purposes.
Right to rectification:
You have the right to correct inaccurate data we hold about you and incomplete data.
Right to Portability:
You have the right to request the personal data we hold about you in a format that you can transfer, copy or transfer to another IT environment, e.g. in csv format.
If you would like a copy of the personal information we hold about you, please write to us at info@martasclassroom.co.uk .


There are several situations where you can ask us to delete your personal information, including (but not limited to):
a) we no longer need to store your personal data;
b) You have successfully raised a general objection;
c) you have withdrawn your consent to us using your personal information (and we have no other grounds to use it);
d) we have processed your personal data unlawfully.
We would like to be able to resolve any complaints you have, but you also have the right to lodge a complaint with the UK Data Protection Regulatory Authority ("ICO") about how we have used your personal information. Their website is https://ico.org.uk/. Their website also has useful information about your privacy rights https://ico.org.uk/.

21.08.2023