Privacy Policy

Last Updated / Effective Date: August 3, 2025

This Privacy Policy describes how I, Maria Alfonsina Sorrentino, operating the website "https://learnwithmaria.com/ ("Site"), collect, use, and protect your personal data. This policy is an integral part of the Site's Terms and Conditions.

The protection of your data is of utmost importance to me. I am committed to being fully transparent about the data I collect and how I process it in accordance with the General Data Protection Regulation (GDPR) and Bulgarian law.

  • 1. Data Controller
    • Name: Maria Alfonsina Sorrentino
    • Status: Natural person providing educational services
    • Correspondence Address: 58 Nikola Vaptsarov St, Plovdiv, Bulgaria
    • Contact: Email: info@learnwithmaria.com, Phone: +359 895 318463
    Supervisory Authorities:
  • 2. What Personal Data I Collect and Why
    I collect different types of information for the following purposes:

    2.1. Data Provided Directly by You:
    • When you inquire or conclude a contract: Name, email address, phone number. I need this data to respond to your inquiry, communicate with you, and enter into a contract for language services.
    • During the provision of services: For training purposes and to track progress, you may voluntarily provide me with educational materials containing your personal data. This includes, but is not limited to:
    • Completed tests and assignments;
    • Written works, essays, and homework;
    • Audio or video recordings for pronunciation practice (only with your explicit consent).
    These educational materials are collected solely for the purpose of assessing progress, providing personalized feedback, and adapting the learning process to your individual needs.

    2.2. Automatically Collected Data (Technical Data):
    • When visiting the Site: I may collect anonymous technical information through cookies, such as IP address, device type, browser type, and operating system. For more information on the types of cookies I use and how to manage them, please see my Cookie Policy.
  • 3. Legal Basis for Processing Data
    I process your personal data on the following legal bases under GDPR:
    • Art. 6(1)(b) – for the performance of a contract to which you are a party (the provision of language lessons).
    • Art. 6(1)(a) – your explicit consent (e.g., for sending a newsletter or collecting specific educational materials).
    • Art. 6(1)(f) – for the purposes of my legitimate interests (e.g., for improving my services and site security).
  • 4. Sharing Data with Third Parties (Data Processors)
    I do not sell or rent your personal data to third parties. I may share data with trusted partners (data processors) who help me provide my services, such as:
    • Hosting providers;
    • Communication platform providers (e.g., Zoom, Google Meet, Skype) for conducting online lessons;
    • Cloud service providers (e.g., Google Drive) for storing educational materials.
    All these partners are obliged to comply with GDPR rules and use your data only for the purposes for which I have provided it.
  • 5. Data Transfer Outside the European Union
    In connection with the use of third-party services, such as communication platforms (e.g., Zoom, Google Meet) and cloud services (e.g., Google Drive), it is possible that your personal data may be transferred and stored on servers outside the European Economic Area (EEA). In such cases, I take all necessary measures to ensure that the transfer is carried out with adequate safeguards, such as the Standard Contractual Clauses approved by the European Commission.
  • 6. Data Retention Period
    I store your personal data for a period no longer than necessary to achieve the purposes for which it was collected:
    • Data related to contractual relationships – for the term of the contract and for an additional period required by accounting and tax legislation.
    • Educational materials – for the period of the training and up to 1 year after its completion, unless you request their earlier deletion.
    • Data collected based on consent – until the consent is withdrawn.
  • 7. Your Rights under GDPR
    You have the following rights regarding your personal data:
    • Right of access: To request a copy of the data I hold about you.
    • Right to rectification: To request the correction of inaccurate or incomplete data.
    • Right to erasure (‘right to be forgotten’): To request the deletion of your data under certain circumstances.
    • Right to restriction of processing: To request a limitation on how I process your data.
    • Right to data portability: To receive your data in a structured, machine-readable format.
    • Right to object: To object to the processing of your data for direct marketing purposes or based on legitimate interest.
    • Right to withdraw consent at any time.
    • Right to lodge a complaint with a supervisory authority: If you believe your rights have been violated, you have the right to file a complaint with the Commission for Personal Data Protection (CPDP).
  • 8. Automated Decision-Making
    I do not use your personal data for automated decision-making, including profiling, within the meaning of the GDPR.
  • 9. Data Security
    I apply appropriate technical and organizational measures to protect your personal data from accidental loss, unauthorized access, alteration, or disclosure.
  • 10. Changes to the Privacy Policy
    I reserve the right to update this Privacy Policy. All changes will be published on this page, with the date of the last update noted.
  • 11. Contact
    If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact me at: info@learnwithmaria.com.
Scroll to Top