PRIVACY POLICY
Martina Flor Academy
(Big Ampersand GmbH)
1. Controller
The controller responsible for data processing is:
Big Ampersand GmbH
Email: academy@martinaflor.com
(hereinafter referred to as “we” or “us”)
2. What Data We Collect
We may collect and process personal data such as your name, email address, billing and payment information, as well as account and course activity (e.g. login data and progress), communication data (such as emails or support requests), and technical information including IP address, browser type, and device details.
You may also browse parts of our website without providing personal data.
3. How We Use Your Data
We use your data to provide access to our products and services, process payments and manage purchases, and communicate with you regarding your account, purchases, or support requests. This includes sending service-related emails such as confirmations and updates.
We also use data to improve our services and user experience.
Where you have given consent, we may use your email address to send marketing communications. You can unsubscribe at any time.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds (Art. 6 GDPR):
- Contract performance (Art. 6(1)(b)), to provide the services you have purchased
- Legal obligations (Art. 6(1)(c)), such as tax and accounting requirements
- Legitimate interests (Art. 6(1)(f)), including improving our services and ensuring security
- Consent (Art. 6(1)(a)), for marketing communications and tracking technologies
5. Data Sharing & Processors
We do not sell your personal data.
We share your data with trusted third-party providers who support the operation of our business, including Teachable (course hosting and user accounts), ConvertKit (email communication), ThriveCart (checkout and transaction management), and Stripe or PayPal (payment processing).
These providers act as data processors and are contractually bound to handle personal data in accordance with applicable data protection laws.
We have concluded data processing agreements (DPAs) with these providers where required.
6. International Data Transfers
Some of our service providers are located outside the European Union.
Where personal data is transferred outside the EU, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent legal mechanisms.
7. Data Storage
We store personal data only as long as necessary to fulfill the purposes outlined in this policy. This includes the duration of your account and access to our services, the fulfillment of contractual obligations, and compliance with legal retention requirements such as tax and accounting regulations.
Where applicable, data will be deleted upon request, unless legal obligations require continued storage.
8. Your Rights
Under the General Data Protection Regulation (GDPR), you have the right to access your personal data, request correction of inaccurate data, request deletion of your data, restrict processing, receive your data in a portable format, object to processing based on legitimate interests, and withdraw consent at any time.
To exercise your rights, you can contact us at:
📧 academy@martinaflor.com
You also have the right to lodge a complaint with a supervisory authority. In Berlin, the responsible authority is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
9. Cookies & Consent Management
We use cookies and similar technologies to ensure the proper functioning of our website and to analyze usage.
For non-essential cookies, such as analytics and marketing tools, we rely on your consent in accordance with Art. 6(1)(a) GDPR. When you visit our website, you are asked to provide or deny this consent via a cookie banner.
You may withdraw or change your consent at any time through the cookie settings available on our website. You can also control cookies through your browser settings.
10. Analytics Tools (Google Analytics)
We use Google Analytics (GA4), a web analytics service provided by Google Ireland Limited.
Google Analytics uses cookies and similar technologies to collect information about how users interact with our website. This may include anonymized IP addresses, device and browser information, and data about pages visited and user behavior.
This processing helps us analyze website usage and improve our services.
The legal basis for this processing is your consent (Art. 6(1)(a) GDPR). Data may be transferred to servers outside the European Union, in which case appropriate safeguards such as Standard Contractual Clauses are applied.
You can withdraw your consent at any time via the cookie settings.
11. Marketing & Tracking Tools (Meta Pixel)
We use the Meta Pixel (Facebook Pixel), a service provided by Meta Platforms Ireland Ltd.
This tool allows us to measure the effectiveness of our advertising, understand user behavior after interacting with ads, and create audiences for marketing purposes. This may include tracking actions such as page visits or purchases.
The legal basis for this processing is your consent (Art. 6(1)(a) GDPR). Data may be transferred outside the European Union, and appropriate safeguards such as Standard Contractual Clauses are applied.
You can withdraw your consent at any time via the cookie settings.
12. Tracking via ThriveCart
We use ThriveCart as our checkout and transaction platform.
ThriveCart may use cookies and similar technologies to process transactions, track purchases, and measure the performance of marketing activities.
Where such tracking goes beyond what is necessary for contract performance, it is based on your consent (Art. 6(1)(a) GDPR).
13. Third-Party Websites
Our Platforms may contain links to third-party websites. We are not responsible for their content or privacy practices.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The version published on our website is the current version.
15. Contact
If you have any questions about this Privacy Policy or the processing of your personal data, please contact us at: