Person responsible and general information
Your data will be processed by Taliha Quadri (Sole Trader).
Should you have questions or wish to contact me, please use the contact form provided.
Collection and processing of personal data
As a rule, you can use online services for which no payment is required without providing personal data. In certain cases, however, I process the personal data listed below. As a matter of principle, this is only done to the extent that it is necessary for the provision of a functioning website as well as my content and services.
Furthermore, I process personal data in connection with the use of taliha.co.uk if you provide it of your own accord, e.g. as part of an enquiry or when booking a service, or because there is another legal basis for doing so. If you do not wish to provide data where necessary for the use of my services, you will unfortunately not be able to use my services or not to the full extent.
Categories of processed data
As soon as you use taliha.co.uk, my system automatically collects information from the computer system of the calling computer. The following data, among others, may be collected in the process:
- Information about the type of browser and the version used
- Operating system of the user
- Date and time of access
- Web analytics data / pseudonymous usage profiles (cookie ID, ad ID, etc.)
- Websites from which the user accesses our website
- Websites that the user accesses via our website.
In addition, I process the following personal data if a contractual relationship exists between us or if you have otherwise transmitted the data to me:
- Personal master data (full name)
- Communication data (email address)
- Data for invoicing purposes (telephone number, email address)
- Contractual master data (contractual relationship, product or contractual interest, order history)
- Personal data as far as necessary for the fulfilment of the contract.
Legal basis and purposes of processing
I process your data exclusively on the basis of one or more of the possible legal bases:
Personal data may be processed in particular on the basis of a contract or for the performance of pre-contractual measures, where consent has been given, on the basis of a legitimate interest or a law and for the protection of vital or public interests.
When booking services
When booking editorial services or when obtaining other services requiring payment, I use your contract master data including contact data for the execution and performance of the contract, as is the case, for example, with processing operations necessary for a delivery of goods or the provision of another service or consideration, as well as the enforcement of legal claims or receivables.
The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, for example in cases of enquiries about my services. In the case of paid services, I process certain data because I am subject to a legal obligation by which the processing of personal data becomes necessary, such as for the fulfilment of tax obligations.
I also use your email address collected in the performance of the contract to inform you by email about similar services offered by me as well as about existing services you have booked. In this case, the email address is processed on the basis of my legitimate interest in advertising my services.
IP addresses and metadata
On the Internet, every device needs a unique address, the so-called IP address, to transmit data. The at least temporary storage of the IP address is technically necessary to enable delivery of the website to the user’s computer. Your IP address is shortened before any processing, and it is processed anonymously. The untruncated IP addresses are not stored or further processed. My servers also store your IP address for 14 days for security purposes.
Other processing operations
In the case of processing operations that are not covered by one or more of the aforementioned legal bases, processing is carried out if it is necessary for the protection of a legitimate interest and if, based on a comprehensive weighing of interests, your interests, fundamental rights and freedoms are not overridden. A legitimate interest can be assumed if the data subject is a customer of the controller. If the processing of personal data is based on this, the legitimate interest is in particular the conduct of my business for the benefit of the security of the operation.
My legitimate interest in being able to offer you services that are geared to your needs, to inform you about new services as well as to continuously improve my services and thereby also increase sales is the legal basis for the processing for usage-based online advertising and web analytics. You can object to processing on the basis of a legitimate interest at any time. Further processing is then only permitted if the original purpose is compatible with the new purpose, or it is permitted on the basis of a separate legal basis. Recognised compatible purposes include the assertion, exercise or defence of civil claims, provided that there is no overriding interest of the data subject. In this case, I will inform you about the change of purpose. If the new purpose is not compatible with the purpose stated at the time of collection, a new collection will take place on the basis of a new legal basis. Here too, I will inform you of the change of purpose.
I process data of contractual and business partners, e.g. customers and interested parties in the context of contractual and comparable legal relationships as well as related measures and in the context of communication with contractual partners (or pre-contractual), to answer enquiries.
I process this data to fulfil my contractual obligations, to secure my rights and for the purposes of the administrative tasks associated with this information as well as for business organisation. I only disclose the data of the contractual partners to third parties within the scope of the applicable law to the extent that this is necessary for the aforementioned purposes or for the fulfilment of legal obligations or with the consent of the contractual partners (e.g. to participating telecommunications, transport and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities).
I inform the contractual partners which data is required for the aforementioned purposes before or in the course of data collection, e.g. in online forms, by means of special labelling (e.g. colours) or symbols (e.g. asterisks or similar), or in person.
Transfer of your data to third parties
I use Geek Storage as a hosting company for my website, which is created on WordPress. I also use the Geek Storage servers for my mail accounts. Geek Storage and WordPress processes data for me in accordance with instructions. Such service providers are contractually bound by me as processors in accordance with the strict requirements of the DPA and the GDPR and are not allowed to further use your data for any other purposes.
Your data is not shared with any other third parties. The only exception is if I am legally obliged to do so or if this is permitted under data protection law or if it is requested by authorities, for example the police or public prosecutor’s offices. The transfer of this data is based on legitimate interest in combating abuse, prosecuting criminal offences and securing, asserting and enforcing claims. Your rights and interests in the protection of your personal data are not overridden.
Links to other sites
This website may contain links to other sites. The external sites are not operated by me. I assume no responsibility for the content, practices and privacy policies of third-party sites.
When you send a data subject access request
If you send a data subject access request, I will tell you whether or not I have processed and stored your personal information and, if I have, I will give you a copy of it. You may not receive all the information if an exemption applies, or if the type of information you have requested is not covered by a subject access request.
In the event that you use a service that requires payment, you will be sent an invoice. Payment is collected via direct bank transfer or PayPal.
Retention of personal data
- HMRC requires me to keep records for ‘at least 5 years after the 31 January submission deadline of the relevant tax year’ (see ‘How long to keep your records‘).
- You can ask me to delete or amend your records. I will action your request immediately – as long as I am complying with HMRC’s legal requirements.
- Dropbox’s servers are based in the US but are registered with the EU–US Privacy Shield.
- My host is Geek Storage and I use their servers for my website and email. Their servers are in Germany.
The website is not intended for children and I do not knowingly collect data relating to children. If you become aware that your child has provided me with personal data, without parental consent, please contact me and I take the necessary steps to remove that information from my server.
You have the right to:
- Information about the processing of your personal data
- Obtain access to the personal data held about you
- Ask for incorrect, inaccurate or incomplete personal data to be corrected
- Request that personal data be erased when it’s no longer needed or if processing it is unlawful
- Object to the processing of your personal data for marketing purposes or on grounds relating to your particular situation
- Request the restriction of the processing of your personal data in specific cases
- Receive your personal data in a machine-readable format and send it to another controller (‘data portability’)
Where the processing of your personal information is based on consent, you have the right to withdraw that consent without detriment at any time by contacting me.
The above rights may be limited in some circumstances, for example, if fulfilling your request would reveal personal information about another person, if you ask me to delete information which I am required to have by law, or if I have compelling legitimate interests to keep it. I will let you know if that is the case and will then only use your information for these purposes. You may also be unable to continue using my services if you want me to stop processing your personal information.
I encourage you to get in touch if you have any concerns with how I collect or use your personal information. You do however also have the right to lodge a complaint directly with the ICO, their contact details can be found on their website.
Please direct all requests for information, requests for information or objections to data processing to me.
It is important that the data I hold about you is accurate and current, therefore please keep me informed of any changes to your personal data.
For security reasons and to protect the transmission of content, that you send to me, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to me cannot be read by third parties.
Obligation to provide personal data
You are not obliged to provide me with personal data. However, depending on the individual case, the provision of certain personal data may be necessary for the provision of editing and proofreading services. If you do not provide me with this personal data, I may not be able to provide the service.
Do not sell my personal information
I do not sell information that directly identifies you, like your name, address or phone number.
Hosting and content delivery network
This website is hosted by an external service provider. The personal data collected on this website is stored on the provider’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contractual data, contact details, names, website accesses and other data generated via a website.
The provider is used for the purpose of contract fulfilment and in the interest of a secure, fast and efficient provision of my online offer by a professional provider. The provider will only process your data insofar as this is necessary for the fulfilment of its service obligations and will follow my instructions with regard to this data. If you have any questions about my service providers and the basis of my cooperation with them, please contact me.
Queries and complaints
Any comments or queries on this policy should be directed to me. If you believe that I have not complied with this policy or acted otherwise than in accordance with data protection law, then you should notify me.
Last updated: 14/09/2021