Privacy Policy

Last Updated: June 29, 2025

This Privacy Policy explains how Maygoli Music Academy (“we”) collects, uses, processes, and protects your personal data when you visit our website www.maygoli.com, use our services, or interact with us. We are committed to protecting your privacy and handling your data responsibly and in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and Spanish data protection laws.

Please read this Privacy Policy carefully to understand our practices regarding your personal data and how we will treat it.

1. Who We Are (Data Controller)

The data controller responsible for your data is: T. Maygoli

Maygoli Music Academy – Valencia, Valencia, 46009, Spain – Email: [email protected] Phone: +34 – 630139162 (WhatsApp)

2. What Personal Data We Collect and Why (Legal Basis)

We collect various types of personal data for specific purposes. The legal basis for processing your data is identified for each category.

a) Data You Provide Directly to Us:

  • Contact Information:
    • Data Collected: Name, email address, phone number.
    • Purpose: To respond to your inquiries, provide information about our services, schedule lessons, and send essential communications related to your bookings.
    • Legal Basis: Performance of a contract (when you book services), or legitimate interest (responding to inquiries prior to a contract), or your consent.
  • Booking and Enrollment Information:
    • Data Collected: Student’s name, age (for minors), parent/guardian’s name and contact information (if applicable), preferred instruments/styles, availability, payment details (processed securely by third-party payment processors).
    • Purpose: To process your lesson bookings, manage your schedule, facilitate payment for services, and tailor lessons to your needs.
    • Legal Basis: Performance of a contract (for delivering teaching services) and legitimate interest (managing business operations).
  • Lesson-Related Information:
    • Data Collected: Notes on student progress, lesson content (e.g., specific songs, theory topics covered), assigned homework.
    • Purpose: To track student progress, prepare for future lessons, and ensure effective teaching.
    • Legal Basis: Performance of a contract (delivering effective teaching services) and legitimate interest (maintaining teaching records).
  • Communication Content:
    • Data Collected: Content of emails, messages via contact forms, or other communications.
    • Purpose: To address your specific requests, provide support, and improve our services based on your feedback.
    • Legal Basis: Legitimate interest (responding to your communications) or performance of a contract (if related to an ongoing service).

b) Data Collected Automatically (through Website Usage):

  • Usage Data:
    • Data Collected: IP address, browser type, operating system, pages visited, time spent on pages, referral source, device identifiers.
    • Purpose: To analyze website traffic, understand user behavior, improve website functionality, and ensure security.
    • Legal Basis: Legitimate interest (website optimization, security, and analytics).
  • Cookies and Similar Technologies:
    • Data Collected: Information collected via cookies, web beacons, and similar technologies (e.g., session IDs, preferences).
    • Purpose: To remember your preferences, track website usage, facilitate login, and provide a personalized experience. We use essential cookies for website functionality and may use analytical/performance cookies (with your consent, where required) to understand how you use our site.
    • Legal Basis: Consent (for non-essential cookies) and legitimate interest (for essential cookies necessary for site operation).

c) Data from Other Sources (if applicable):

  • In certain cases, we might receive information from third-party services (e.g., if you sign up through a third-party booking platform we integrate with). We will only collect and use such data in accordance with this Privacy Policy and the terms of the third-party service.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

  • To provide and maintain our music teaching services, both online and in-person.
  • To process your bookings and payments.
  • To communicate with you regarding your lessons, schedule changes, and other service-related matters.
  • To personalize your learning experience and tailor lessons to your needs.
  • To respond to your inquiries and provide customer support.
  • To improve our website, services, and educational materials.
  • To monitor and analyze usage and trends to enhance your experience.
  • To ensure the security and integrity of our website and services.
  • To comply with legal obligations, enforce our Terms & Conditions, and protect our rights and the rights of our users.
  • For marketing purposes, with your explicit consent (e.g., newsletters, promotions about new courses).

4. How We Share Your Personal Data

We do not sell, rent, or trade your personal data to third parties. We may share your personal data only in the following limited circumstances:

  • Service Providers: We may share your data with trusted third-party service providers who perform functions on our behalf, such as:
    • Payment Processors: [e.g., Stripe, PayPal, your bank] to securely process your payments. We do not store full payment card details on our servers.
    • Video Conferencing Platforms: Zoom, Google Meet, Skype, or any other platform that is available for international students for online lessons. Their privacy policies govern their use of your data.
    • Website Hosting Providers: BlueHost company to host our website.
    • Analytics Providers: [e.g., Google Analytics] to help us understand website usage.
    • Email Communication Services: [e.g., Mailchimp, SendGrid] for sending emails.
  • Legal Requirements: We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
  • Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred as part of the business assets. We will notify you if such a transfer occurs and if it results in a change to this Privacy Policy.
  • With Your Consent: We may share your data with other third parties when we have your explicit consent to do so.

5. International Data Transfers

As our service providers may be located outside the European Economic Area (EEA), your personal data may be transferred to, stored, and processed in countries outside the EEA, including the United States.

When we transfer your data outside the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
  • Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe (Standard Contractual Clauses).
  • Where we use providers based in the US, we may transfer data to them if they are part of a framework that ensures adequate protection (e.g., the EU-US Data Privacy Framework, if applicable and they are certified).

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include:

  • Encryption: Using SSL/TLS encryption for data in transit on our website.
  • Access Controls: Restricting access to personal data to authorized personnel only.
  • Data Minimization: Collecting only the data necessary for the stated purposes.
  • Regular Security Audits: Conducting periodic reviews of our security practices.

Despite these measures, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to protect your personal data, we cannot guarantee its absolute security.

7. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Lesson and Client Data: We typically retain client and lesson-related data for 7 years after the last interaction, for accounting and legal purposes.
  • Inquiry Data: If you send an inquiry but do not become a client, we may retain your data for 6 months to 1 year to follow up and for our legitimate interest in understanding demand.
  • Marketing Consent: If you have given consent for marketing, we will retain your data until you withdraw your consent.
  • Usage Data: Automatically collected usage data may be retained for shorter periods, typically 1-2 years for analytical purposes.

When your personal data is no longer required, we will securely delete or anonymize it.

8. Your Data Protection Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

  • The Right to Be Informed: To receive clear, transparent, and easily understandable information about how we use your data and your rights. This is why we provide this Privacy Policy.
  • The Right of Access: To request a copy of the personal data we hold about you.
  • The Right to Rectification: To request that we correct any inaccurate or incomplete personal data we hold about you.
  • The Right to Erasure (“Right to Be Forgotten”): To request the deletion of your personal data under certain conditions (e.g., if the data is no longer necessary for the purposes for which it was collected).
  • The Right to Restriction of Processing: To request that we limit the way we use your data in certain circumstances (e.g., if you dispute the accuracy of the data).
  • The Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
  • The Right to Object: To object to the processing of your personal data where we are relying on a legitimate interest as the legal basis, or for direct marketing purposes.
  • Rights in Relation to Automated Decision-Making and Profiling: To not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. (Note: We do not typically engage in such processing).
  • The Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us using the contact details provided on our website. We will respond to your request within one month (or two months for complex requests).

9. Children’s Privacy

We understand the importance of protecting children’s privacy. While we offer services to students under 18, we do not knowingly collect personal data directly from children without the explicit consent of a parent or legal guardian. If we learn that we have collected personal data from a child without verifiable parental consent, we will take steps to remove that information from our servers promptly and asap. Parents or guardians should supervise their children’s online activities.

10. Third-Party Links

Our website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top. We encourage you to review this Privacy Policy periodically for any changes.

12. How to Lodge a Complaint

If you have concerns about our privacy practices, you have the right to lodge a complaint with the relevant data protection supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

Agencia Española de Protección de Datos (AEPD) Website: www.aepd.es Address: C/ Jorge Juan, 6. 28001 Madrid, Spain Phone: +34 91 399 6200

13. Contact Us

If you have any questions about this Privacy Policy, your personal data, or your rights, please do not hesitate to contact us:

Email: [email protected] Phone: +34 – 630139162 (WhatsApp)