DATA PROTECTION STATEMENT ON THE WEBSITE
Version 1, September 2024

ESRA - Psychic Medium Teacher (hereinafter referred to as "ESRA" or "we") processes the personal data of visitors to the ESRA website, www.psychic-medium-teacher.com, in accordance with applicable data protection regulations. We respect your privacy and process personal data fairly and lawfully, solely based on valid legal grounds or in accordance with your consent for data processing.

This Data Protection Statement applies solely to the operation of the website owned by ESRA and the site that directly links to this Statement when you click on "Privacy Policy" in the footer of the website.

The purpose of this Statement is to clearly explain how we collect and what personal data we gather about you, on what grounds and for what purposes we process it, how we store and transfer it, your options regarding managing your privacy settings, and your rights concerning personal data.

This Data Protection Statement on the website provides you with basic information regarding the processing of your personal data. Please read the following carefully, and if you have any questions or need additional information regarding the processing of personal data, do not hesitate to contact us.

ESRA’s data protection policy complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and the free movement of such data, repealing Directive 95/46/EC (hereinafter: "General Regulation") and the legislation of the European Union.

1. DATA CONTROLLER DETAILS

The data controller is ESRA - Psychic Medium Teacher. The company is not subject to the mandatory appointment of a data protection officer. The company has not voluntarily appointed a data protection officer.

2. DATA COLLECTION AND PROCESSING

We may collect your personal data in the following ways:

• We may collect and store personal data you provide when filling out forms on our website, such as submitting inquiries. When you contact us through available forms on our website, the data you provide (name, surname, email address, phone number) is processed solely to provide the requested information.
• We may collect and store personal data you provide when signing up for our newsletter. If you choose to, we will use your contact details (email address) to send periodic updates about new offers, special deals, and news or events related to ESRA. You can withdraw your consent for receiving marketing messages at any time by selecting the unsubscribe option in any received message.
• If you contact us, we may collect and store records of such correspondence, including any personal data you provide during the communication.
• We may collect and store personal data related to your visit to our website, such as traffic data, location data, and other communication data, for our security, diagnostic purposes, and authentication.

Personal data collected is processed within the European Union and stored in systems within the European Union. Exceptionally, where necessary to provide specific services, this data may be shared with third parties we cooperate with for service provision under contract with you.

In certain cases, when we use tools and services from service providers or social media outside the European Union, your personal data may be transferred outside the European Economic Area. Third parties managing these social networks may transfer your data to the United States. By sending your personal data, you give consent for its processing.

We will take all necessary steps to ensure that all personal data, regardless of where it is processed, is secure and treated in accordance with this Data Protection Statement and the General Regulation.

3. LEGAL BASIS FOR COLLECTION AND PROCESSING

Data protection regulations specify the conditions under which personal data may be collected and which we use as legal grounds for collection and processing. These legal bases are as follows:

• Fulfilling contractual obligations:
  When you contract our services, we must collect personal data to fulfill our contractual obligations.
• Compliance with legal obligations:
  European Union regulations impose obligations on us to collect and process data for certain purposes, such as tax and accounting purposes or to comply with requests from judicial authorities.
• Legitimate interests:
  As part of our daily operations, we collect data for legitimate interests, such as recording IP addresses for fraud prevention, security protection, and analyzing website usage.
• Consent:
  In some cases, we may collect and process personal data based on your consent, such as for sending newsletters and promotional email messages. You can withdraw your consent for receiving such messages at any time.

4. HANDLING PERSONAL DATA

We place the highest possible importance on data security and take all appropriate steps in compliance with data protection regulations in force within the European Union.

The collection of all personal data is carried out through an encrypted connection (HTTPS). Physical access to all personal data is protected following appropriate standards.

We use personal data to:

• Verify your identity
• Provide services you have contracted
• Fulfill our contractual obligations
• Display website content effectively on your device
• Respond to your inquiries
• Provide information or services you request from us, with your consent to contact you
• Send notifications about changes to our services
• Send promotional emails, with your express consent
• Prevent fraud
• Detect, prevent, and diagnose potential security breaches

We retain your data only as long as necessary to fulfill the purpose for which it was collected. At the end of the retention period, we will either delete or anonymize your personal data so that it can no longer be associated with any individual.

To allow you to interact with other websites where you may have accounts (such as Facebook and other social media sites) or join communities on such sites, we may provide links or embed third-party applications that enable log-ins, content posting, or community engagement via our website. Additionally, we may place general links to non-ESRA websites.

Your use of these links and applications is subject to the privacy policies of third parties, which you should review before using these links or applications. ESRA is not responsible for the privacy policies or content of these other websites.

Please review such rules before entering or submitting your personal data to these websites.

You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects on you or similarly significantly affects you. Currently, we do not use automated individual decision-making on our websites or in the services we provide.

5. COOKIES AND IP ADDRESSES

ESRA's website uses cookies—text files placed on users' devices by a web server (server), through which the service provider accesses the Internet (ISP) and displays the website.

Cookies are created when a user's browser loads the visited destination, which then sends data to the browser and creates a text file (cookie). The browser retrieves and sends the cookie to the website server upon the user's return.

We use cookies for:

• Authenticating users when they log in or log out from services related to our services
• Tracking preferences related to the website

For more information, please refer to ESRA's Cookie Policy.

You can block cookies by activating settings in your web browser that allow you to refuse the setting of all or some cookies. However, if you set your browser to block all cookies, you may not be able to access all or parts of our website. If you do not adjust your browser settings to refuse cookies, our system will send cookies as soon as you visit our website.

We collect IP address data for security reasons (to prevent DDoS attacks, hacking, fraud, etc.), for diagnostic purposes, and for traffic analysis to improve the quality and usability of our services. These data are collected for our legitimate interests as the data controller.

6. YOUR RIGHTS REGARDING PERSONAL DATA PROCESSING

To exercise your rights, please contact us at mediumesra@gmail.com.

Your rights include:

6.1. Right to access personal information
You have the right to access your personal data that we process, including detailed information about the purpose of processing, the type/categories of personal data processed, including access to your data, recipients or categories of recipients, and the expected retention period. Access to personal data may be limited only in cases prescribed by Union law or our national legislation, or where such restriction respects the essence of the fundamental rights and freedoms of others.

6.2. Right to rectification or completion of personal data
You have the right to request the rectification or completion of personal data if your data is not accurate, complete, or up to date. To do so, send your request to us in writing, including electronically.

Please note that the request must specify what is inaccurate, incomplete, or outdated, and how it should be rectified, along with any necessary supporting documentation.

6.3. Right to erasure
You have the right to request the deletion of personal data concerning you if any of the following conditions are met:

• Your personal data is no longer necessary for the purpose for which it was collected or processed
• You have withdrawn your consent on which the processing is based, and there is no other legal basis for the processing
• You object to the processing of your personal data, and there are no overriding legitimate grounds for processing
• The personal data was unlawfully processed
• The personal data must be erased to comply with a legal obligation under Union law

6.4. Right to restrict the processing of personal data
You have the right to obtain restriction of processing if:

• You contest the accuracy of the data
• The processing is unlawful, but you oppose the deletion of the data
• The data controller no longer needs the personal data, but you request it for the establishment, exercise, or defense of legal claims
• You have objected to the processing of your personal data

6.5. Right to object
If we process your personal data for direct marketing purposes, you have the right to object to such processing at any time. You also have the right to object to any processing based on legitimate interests.

7. FINAL PROVISIONS

For more information about your rights or if you wish to submit a complaint, contact us at mediumesra@gmail.com. Additionally, you have the right to lodge a complaint with a supervisory authority within the EU if you believe your rights have been violated.

This Privacy Statement is subject to change at any time. We will notify you of any updates on this page or via other appropriate communication channels. By continuing to use the website after such changes are implemented, you accept the updated version of this Statement.