Privacy Policy

Last Update: May 25, 2018

Welcome to EXFINSIS Privacy Policy!

This website is owned and its services are provided by Diego Fernandez Garcia who is also responsible for processing data about you. He is based in Madrid, Spain (European Union). If you have any questions, please Contact Him.

1. Introduction

This Privacy Policy covers how he collects, uses, shares, stores, protects, discloses data about you and your rights to it. Any changes made to it will be posted on this page. By using his website, you agree to his Privacy Policy, Terms of Use, Cookies Policy and Disclaimer.

He processes data about you on a lawful basis and following these principles.

  • Transparency. Before collecting data about you, he informs of its specific use with absolute transparency.
  • Consent. He only collects data about you when having your explicit consent.
  • Minimization. He only collects data about you when necessary for its specific use.
  • Privacy. He only shares data about you with his third-party service providers and when having your explicit consent.
  • Limitation. He only stores data about you for amount of time necessary for its specific use.
  • Security. He takes all precautions to keep data about you safe.
  • Rights. He recognizes your rights to access, modify, carry, delete data about you or revoke consent to its processing.

2. Data Types

He collects certain data provided by you and automatically when you visit his website.

  • Provided by You. He collects certain data provided by you such as name and email address.
  • Automatically Collected. His website also collects certain data automatically such as system data and usage data. System data consists of technical data such as IP address, cookie ID, browser type, device type, operating system and approximate geographical location based on IP address. Usage data consists of your interactions with his website such as number of visits, pages visited and time spent.

3. Data Collection

He collects certain data provided by you through forms and his website automatically collects certain system data and usage data through cookies.

  • Forms. He collects certain data provided by you such as name and email address when you subscribe to his newsletter, contact him or book an online tutorial.
  • Cookies. His website automatically collects system data and usage data when you visit it, subscribe to his newsletter, contact him or book an online tutorial. For more details, visit his Cookies Policy.

4. Data Usage

He uses data about you to communicate content updates, email marketing, answer previous requests, confirm online tutorial booking, analyze your interaction with his website content and interact with his online tutorial payment processing third-party service provider.

  • Newsletter. He uses your email address to communicate content updates and email marketing. His website also uses automatically collected system data and usage data for newsletter functionality such as remembering if you have already subscribed.
  • Contact Form. He uses your name and email address to answer your previous requests. His website also uses automatically collected system data and usage data for contact form necessary functionality such as tracking which fields you have already filled.
  • Booking Calendar. He uses your name and email address to confirm online tutorial booking request. His website also uses automatically collected system data and usage data for booking calendar necessary functionality such as tracking which fields you have already filled.
  • Website Analytics. He uses automatically collected system data and usage data to analyze your interaction with his website content and make any improvements.
  • Payment Processing. He uses third-party service provider payment confirmation email with your contact data such as name and email address for his accounting records. As payment processing is done at third-party service provider website, he does not collect or use payment processing data provided by you such as card number or bank account number.

5. Data Sharing

He only shares data about you with his third-party service providers and with your explicit consent when you visit his website, subscribe to his newsletter, contact him, book or pay for an online tutorial.

  • Google Analytics. He uses this third-party service provider to analyze his website usage analytics. Automatically collected system data and usage data is shared with them when you visit his website. For more information, visit Google Privacy Policy website.
  • Sumo Me. He uses this third-party service provider for newsletter subscription and email list management. Your email address and automatically collected system data and usage data is shared with them when you subscribe to his newsletter. For more information, visit Sumo Me Privacy Policy website.
  • PayPal. He uses this third-party service provider for payments processing. Your contact data such as name and email address from payment confirmation email is shared with him when you pay for an online tutorial. As payment is done at third-party service provider website, your card number or bank account number payment processing data is not shared with him. For more information, visit PayPal Privacy Policy website.
  • 1&1. He uses this third-party provider for his website hosting and email services. Your name and email address are shared with them when you contact him or book an online tutorial as these website services automatically send request to his email account. For more information, visit 1&1 Privacy Policy website.

6. Data Storage

He stores data about you within the E.U. and his third-party service providers store it in the E.U., the U.S. or depending on your location.

  • First-Party Website. He stores data about you within the E.U.
  • Third-Party Service Providers. 1&1 website hosting third-party service provider stores data about you within the E.U., Google Analytics website analytics and Sumo Me newsletter subscription third-party service providers store data about you within the U.S., PayPal third-party payment processing service provider stores data about you depending on your location. For more information, visit PayPal Privacy Policy website.

He also stores data about you for amount of time needed for its specific use.

  • Newsletter. He stores your email address for 5 years to communicate content updates and email marketing. Functional and persistent cookies placed on your web browser expire after 1 month.
  • Contact Form. He stores your name and email address for 2 years to provide case history about your request. Necessary and session cookies placed on your web browser expire after you stop browsing.
  • Booking Calendar. He stores your name and email address for 2 years to provide booking history about your online tutorials. Necessary and persistent cookies placed on your web browser expire after 2 months.
  • Website Analytics. He stores automatically collected system data and usage data for 26 months to analyze your interaction with his website content and make any improvements. Performance and persistent cookies placed on your web browser expire after 2 years.
  • Payment Processing. He stores third-party service provider payment confirmation email with your contact data such as name and email address for 7 years after you pay for an online tutorial to comply with regulation. As payment is done at third-party service provider, he does not store your card number or bank account number payment processing data.

7. Data Security

He protects data about you by having appropriate technical and administrative security measures in place to help ensure its protection against unauthorized or accidental access, use, modification or loss. Among these measure, his website includes Secure Sockets Layer SSL Certificate which consists of cryptographic protocol for providing communication security within a computer network. He will also communicate with you if there is any issue with data security within 72 hours after the incident.

8. Data Privacy

He does not sell or rent data about you to others and only share it with his third-party service providers when having your explicit consent as described previously. He also recognizes children privacy and his website should not be used if you are 16 years old or younger without explicit consent from your parent or guardian.

9. Data Rights

He recognizes your rights to access, modify, carry, delete data about you or revoke consent to its processing. All of these can be exercised by Contacting Him.

  • Access. You have the right to access data about you he has processed.
  • Modify. You have the right to modify data provided by you he has processed.
  • Carry. You have the right to carry data about you he has processed or request a copy of it.
  • Delete. You have the right to request deletion of data about you he has processed.
  • Revoke. You have the right to revoke consent to data about you processing.

10. Legal Notice

This Website and its Privacy Policy have been modified to comply with E.U. General Data Protection Regulation (GDPR) (EU) 2016/679 from the European Parliament and Council of April 27 of 2016.