Privacy Notes

Here you will find important information on how we use your data when you navigate our
website or when you buy our products. Please read it carefully and contact us if you have any
further question.

Here you will find information regarding:

1. Who are we?
2. How you can contact us
3. • What personal data we collect from you, for what purpose and what is the legal ground
     for collecting your data:
   • a)When you access and navigate the website
   • b)When you order a product from our website
   • c)When you subscribe to our e-mail newsletter or to our WhatsApp newsletter
4. For how long we keep your data
5. Who has access to your data?
6. Information about transferring your data outside the EU
7. What are your legal rights?
8. Changes to our privacy policy

1) Who are we?

Howpeoplelearnbook.com website is operated by INSTRUCTIONAL DESIGN SRL, a
Romanian company based in Sacele, Brasov, 251 Brasovului Boulevard, 505600, registered at
the Registry of Commerce under no. J08/964/2011, Fiscal Identification Number RO28579833,
legally represented by Meșa Olimpia.

INSTRUCTIONAL DESIGN SRL collects and processes personal data in conformity the EU
Regulation 2016/679, also known as GDPR, applicable since 25 of May 2018.

2)How you can contact us

For any question regarding the processing of your personal data or your legal rights, you can
contact us at: olimpia@instructionaldesign.ro

3)What personal data we collect from you, the purpose and the legal ground for
collecting your data

We collect personal data from you when you access and navigate the website, when you order a
product from us and when you give us your data for marketing purpose when we have your
consent.

A.When you access and navigate the website:

We collect data about your IP and your behavior on our website – which we need in
order to see how our website is performing, which are the pages that are the most
interesting to, which are the countries from where our visitors are coming, what is your
browser and whether you access our website from a PC or a mobile device in order to
offer you the best information and products. To do all this, we use Google Analytics, and
your data will be stored on the Google servers in Ireland.

However, in order to protect your privacy, we will use the Google tools for the anonymization of
your IP. In this way, Google cannot identify you for other purpose than reports for the
way our website works.

We also use cookies. Please see our cookie policy here.

The purpose for collecting your data when you access and navigate the website is our
legitimate interest in knowing how our website performs, to observe how we can offer
better information and products to our customers, to observe trends and to identify
problems with our navigation system, our pages or our server.

The legal ground for collecting your data when you access and navigate the website
is article 6 (1) point f) GDPR, which establishes the right of the controller (us) to process
personal data based on its legitimate interest.

B.When you order a product from our website:

We collect the following data:

Your full name;
Your e-mail address;
Your home address.

The purpose for collecting your data when you order a product from our website is
for performing our contract, for delivering the product you ordered and for sending you
the invoice.

The legal ground for collecting your data when you order a product from our
website is article 6 (1) point b) GDPR, which establishes the right of the controller (us) to
process personal data when the data is needed for performing a contract you are part of
when you order our product, and article 6 (1) point c) GDPR, which establishes the right
of the controller (us) to process personal data when the data is needed in order to comply
with a legal requirement. As regards your full name and home address, we need this data
because the Romanian Fiscal Code requires us to have this data on the invoice.

Your refuse to give us the data we need for sending you the product you ordered, and
our invoice will lead to us being unable to provide you with our product.

C.When you subscribe to our e-mail newsletter or to our WhatsApp newsletter:

We collect the following data:

Your e-mail address (when you subscribe to our e-mail newsletter);
Your telephone number (when you subscribe to our WhatsApp newsletter).

The purpose for collecting your data when you subscribe to our e-mail newsletter or
our WhatsApp newsletter is for us to send you our newsletter when you consent to it.

The legal ground for collecting your data when you subscribe to our e-mail
newsletter or our WhatsApp newsletter is article 6 (1) point a) GDPR, which
establishes the right of the controller (us) to process personal data when you consent to it.

Please note that you can take back your consent at any time, by unsubscribing from our
newsletter at any time, by clicking the unsubscribe button available in our newsletter or
sending an e-mail at olimpia@instructionaldesign.ro.

4.For how long we keep your data

When you access and navigate the website: we keep your data for maximum 5 years.

When you order a product from our website: we keep your data for a period between 5
years and 50 years (the period for which invoices must be archived according to the
Romanian law)

When you subscribe to our e-mail newsletter or to our WhatsApp newsletter: we
keep your data until you unsubscribe.

5.Who has access to your data?

We can send your data to:
(a) The companies that offer us different services:
(i) The companies offering us marketing and PR services;
(ii) The companies that administer the e-mail newsletter and WhatsApp newsletter:
(iii) The companies where we store our website and that provide us with security services
(the server providers, back-ul services, security services);
(iv) The companies offering us accounting services;
(v) The companies offering us legal services;
(b) Other parties, such as legal authorities and public institutions, when their activities oblige
us to offer your personal data.

6.Information about transferring your data outside the EU

Most our service providers are in the EU and we do not transfer data outside the EU on a regular
basis. When we do transfer your personal data outside the EU, we do so with your consent or
when the transfer is necessary for us to perform our contract with you.

When we transfer data outside the EU, we we will take appropriate steps to ensure that the
recipient protects your personal information in accordance with this information notice. These
measures include:

● In the case of service providers based in the US, we will conclude with them standard
contract agreements approved by the European Commission or we will verify that they
have signed up for the Privacy Shield program (learn more about the program at
https://www.privacyshield.gov/Welcome);
or
● In the case of service providers based in other countries outside of the EEA, we will
conclude with them standard contract agreements approved by the European
Commission.

7.What are your legal rights?

● The right to be informed (Article 15 of Regulation (EU) No 2016/679) – means that you
have the right to know who, how and in what way you process your personal data.
● Right of access to data Article 15 of Regulation (EU) No 2016/679) – means that you
have the right to obtain confirmation from us that we process or not your personal data
and, if so, you have access to that data and information on how we process your data.
● The right to rectification (Article 16 of Regulation (EU) No 2016/679) – means that you
have the right to obtain from us, without undue delay, the correction of inaccurate
personal data. The rectification will be communicated to each recipient to whom the data
were transmitted, unless this proves impossible or involves disproportionate efforts.
● The right to delete the data ("right to be forgotten") (Article 17 of Regulation (EU)
No 2016/679) – means that you have the right to ask us to delete your personal data
without unjustified delay.

You have this right when 

(a) the data are no longer required for the purposes for which
the data was collected and processed,

 (b) you have withdrawn your consent and there is
no longer any other legal basis for processing, 

(c) you oppose the processing, and there
are legitimate reasons to prevail in order to continue processing or 

(d) your data has been
processed illegally.

So, please note that there are exceptions to the right to delete the data. These exceptions
relate, for example, to situations in which your data is processed to meet a legal
obligation (for example, when we are required to retain billing data) or when processing
it for the purpose of establishing or defending a right in court.

● The right to restrict the processing (Article 18 of Regulation (EU) No 2016/679) –
means that you have the right to obtain from us the restriction on processing when one of
the following cases applies: 

(a) you contest the accuracy of the data for a period that
allows us to verify the correctness of the data; 

(b) the processing is illegal, and you are
opposed to deletion of your personal data, requesting instead the restriction; 

(c) if we no
longer need your personal data for processing, but you request them to defend a right in
court;

 (d) if you oppose the processing for the length of time that it is necessary to
evaluate whether our legitimate rights overweigh your rights.

● The right to data portability (Article 20 of Regulation (EU) No 2016/679) – means that
you have the right to receive the personal data you have provided to us and which we
process under a contract or based on your consent. You have the right to receive this
information in a structured format, currently used and readable automatically, and you
have the right to transmit this information to another operator without any barriers on our
part.
● The right to object (Article 21 of Regulation (EU) No 2016/679) – means that you have
the right to oppose the processing of your personal data, for example when we use it for
direct marketing purposes.
● The right not to be the subject of a decision based solely on automatic processing,
including profile creation, which produces legal effects that affect you or affect you to a
significant extent.
● The right to file a complaint with the National Supervisory Authority for Personal
Data Processing. The address of the Romanian authority is 28-30 G-ral. Gheorghe
Magheru Boulevard, District 1, postal code 010336, Bucharest, Romania, e-mail:
anspdcp@dataprotection.ro, tel: +40.318.059.211 or +40.318.059.212.

Please note the following:

Time period: We will try to respond to your request within 30 days. However, the deadline
may be extended for specific reasons related to the complexity of your application. When this
period is extended, we'll let you know about the extension and why we've extended the
deadline.

Access restriction: In some situations, we may not be able to give you access to all or some
of your personal data because of legal provisions. If we refuse your access request, we will
inform you of the reason of this refusal.

Failure to identify: In some cases, we may not be able to search for your personal
information because of the identifiers you provided in your request. We'll let you know about
this situation and we'll give you the opportunity to provide additional information to identify
you, if necessary.

8.Changes to our privacy policy

We may update our policy from time to time, to better comply with the legal requirements and to
offer you the best data protection. Therefore, please visit this Privacy Notice every time you visit
our website.