This is the privacy policy (“policy”) for the website http://www.onestopenglish.com which is run and provided by Macmillan Education Limited, The Campus, 4 Crinan Street, London N1 9XW (we, us and our).

We will only use the personal data gathered over this website as set out in this policy. Below you will find information on how we use your personal data, for which purposes your personal data is used, with whom it is shared and what control and information rights you may have.

Click on one of the links below to jump to the listed section:

I. Summary of our processing activities / II. Definitions/ III. Informational use of the website/ IV. Registration for our services / V. Information about the specific uses that require registration / VI. Newsletter/ VII. Analysis/ VIII. Third party content and social media plug-ins/ IX. Information sharing/ X. Cross border data transfers/ XI. Security/ XII. Data retention/ XIII. Your rights / XIV. Contacting us/ XV. Amendments to this policy

I. Summary of our processing activities

The following summary provides you with a quick overview of the processing activities that are undertaken on our website. You will find more detailed information under the indicated sections below.

  • When you visit our website for informational reasons without setting up an account, only limited personal data will be processed to provide you with the website itself (see section III).
  • In case you register for one our services or for a free account or subscribe to our newsletter, further personal data will be processed in the scope of such services (see sections IV, V and VI).
  • Furthermore, your personal data will be used for statistical analysis that helps us to improve our website (see section VII). Additionally, we improve your website experience with third party content (see section VIII).
  • Your personal data may be disclosed to third parties (see section IX) that might be located outside your country of residence; potentially, different data protection standards may apply (see section X).
  • We have implemented appropriate safeguards to secure your personal data (see section XI) and retain your personal data only as long as necessary (see section XII).
  • Under the legislation applicable to you, you may be entitled to exercise certain rights with regard to the processing of your personal data (see section XIII).

II. Definitions

  • Personal data: means any information relating to a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, or an online identifier.
  • Processing:means any operation which is performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation or any kind of disclosure or other use.

III. Informational use of the website

When you visit our website for informational reasons, i.e. without registering for any of our provided services listed under IV and without providing us with personal data in any other form, we may automatically collect additional information about you which will contain personal data only in limited cases and which is automatically recognised by our server, such as:

  • the website from which you have been directed to our offer
  • the date and time of your requests
  • your device type, screen resolution and browser version
  • your internet service provider
  • information on your operating system, including language settings
  • information on the pages you have visited on our website and the actions you have taken
  • IP address

One of the methods we use to collect this information is via cookies. A “cookie” is a text file that websites send to a visitor’s computer or other Internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. On this Site, we use two kinds of cookies: session cookies and persistent cookies. Session cookies exist only for as long as your browser remains open. Once you close your browser, they are deleted. Persistent cookies, in contrast, last beyond each visit to the Site and remain on your hard drive after you close your browser. The cookies used on the Site include those that are strictly necessary cookies for access and navigation, and cookies that track usage (performance cookies) and remember your choices (functionality cookies). Your browser may tell you how to be notified when you receive certain types of cookies or how to restrict or disable certain types of cookies. Please note, however, that without cookies you may not be able to use all of the features of our Site.

We use such information only to assist us in providing an effective service (e.g. to recognise your computer when you visit the Site, adapt our website to the needs of your device and improve usability, help diagnose technical and service problems, or to allow you to log in to our website), and to collect broad demographic information for anonymised, aggregated use (e.g. in market and consumer research, trend analysis, and developing new products and services. We use clickstream data to determine how much time users spend on web pages of our Site, how users navigate through our site, and how we may tailor our Site to better meet the needs of users.)

The personal data automatically collected is necessary for us to provide the website, Article 6 sec. 1 sent. 1 lit. b GDPR, and for our legitimate interest to guarantee the website’s stability and security, Article 6 sec. 1 sent. 1 lit. f GDPR.

IV. Registration for our services

Our website offers downloadable and online teaching resources (both free and subscription-only), as well as services including a learning calendar and events calendar. In order to use some of the aforementioned services you have to set up an account. With regard to the registration of an account and its subsequent use, we process:

  • Information (such as your title, full name, address and country, email address, job role, place of work, age of students, and marketing preferences) that is provided by registration
  • Information in connection with an account sign-in facility (e.g. log-in and password details)
  • Communications sent by you (e.g. via e-mail or website communication forms)

Whenever you complete transactions using our website, e.g. purchasing a subscription, further data processing processes may take place, of which you will of course be separately informed.

We will process the personal data you provide to:

  • Identify you at sign-in
  • Provide you with the services and information offered through the website or which you request, including newsletters
  • Create and administer your account
  • Communicate with you about, and administer your participation in, special events, programmes, surveys, contests, sweepstakes and other offers and promotions, to the extent permitted by law, if you have opted in to receive such communications
  • Respond to and communicate with you about your requests, questions and comments
  • Profile our customer base
  • Allow you to comment on our website

For this, the legal basis is Article 6 sec. 1 sent. 1 lit. b GDPR. The use of your anonymised personal data for profiling is done for the legitimate interest to improve your experience while using the website and help the editorial team develop resources that meet the needs of teachers using the website, Article 6 sec. 1 sent. 1 lit. f GDPR.]

We use the personal data and contact data you provide by registration to inform you directly about our additional products and services via our opt-in newsletters. The use of your personal data for directly advertising related products and services is a legitimate interest for us as a provider of this website, Article 6 sec. 1 sent. 1 lit. f GDPR.

You can object to the use of your personal data for direct marketing at any time. We will then refrain from any processing to the extent it is related to such purposes. You can inform us about your objection by contacting us at help@macmillaneducation.com.

Your personal data is, in the absence of exceptions within the specific services mentioned below, retained for as long as your user account is used. After deletion of your account, your personal data will be erased 1 month later. Statutory storage obligations or the need for legal actions that may arise from misconduct within the services or payment problems can lead to a longer retention of your personal data. In this case, we will inform you accordingly.

V. Information about the specific uses that require registration

For the use of the following services you have to set up an account as described under IV. Your customer account retains your personal data for future purchases and other activity. You can delete the personal data as well as the account in your account’s settings. This processing is based on Article 6 sec. 1 sent. 1 lit. b.]

1. Use of our comment/discussion feature

Our user comments can be accessed and read without registration. Anything you post on the site will be available to a broader public; you can delete your posts at any point in time. In order to provide content yourself, you will have to register as described in IV. You are not obliged to provide your real name but can use an alias or post as ‘anonymous’. However, onestopenglish staff can see the email address of the user account linked to all comments.

You can delete your free user account by requesting a deletion of your registered account on onestopenglish. In case you decide to delete your user account, all your account data will be deleted. Information posted by you on the site, including your chosen username, may remain visible.

In addition to the extent of processing described under IV, when you post a comment we will retain the email address linked to your account as long as the comment is hosted on the site. This is necessary to defend ourselves from possible liability claims that may arise from unlawful comments posted by you and reflects our legitimate interest with regard to the legal justification of this processing activity in Article 6 sec. 1 sent. 1 lit. f GDPR.

We reserve the right to delete comments that are off-topic, spam, abusive, use excessive foul language, include ad hominem attacks or offend against legal regulations.

Please see our Terms and Conditions for further details on what rights we hold around the user-generated content posted on our Site: http://www.onestopenglish.com/ts-and-cs/

2. Subscription payments

By statutory law we are required to retain the provided financial data in relation to transactions (including address, payment and order information) for ten years. Therefore, if you are or have been a subscriber, we are unable to delete your account and personal details. However, we will make your account inactive, and after 2 years we will restrict the processing of your personal data to comply with the statutory requirements and will not process the personal data any further. Regarding this, the retention of your personal data is based on Article 6 sec. 1 sent. 1 lit. c GDPR.

VI. Newsletter

With your email address you can subscribe to our newsletter that provides you with the latest news about our products and services if you consent to receiving such newsletters and may also contain topic-specific advertisements and invites to market research surveys. The legal basis for this processing is Article 6 sec. 1 sent. 1 lit. a GDPR. Your email address will be retained as long as you subscribe to our newsletter.

You can unsubscribe from this service by opting out via the link provided in each newsletter.

 

VII. Analysis

For statistical analyses we use web analytics services to collect information about the use of this site.

1. General tracking information

The tools collect information such as

  • Device and browser information (operating system information, Mobile device identifier, mobile operating system, etc.)
  • IP address
  • Page accessed, URL click stream (the chronological order of our internet sites you visited)
  • Geographic location
  • Time of visit
  • Referring site, application, or service

We use the information we get from the providers only to determine the most useful information you are looking for, and to improve and optimise this website. We do not combine the information collected through the use of the tools with personal data.

Depending on the provider the information generated about your use of the website may be transferred to and processed in third countries, e.g. the United States. For further information about the potential risks of a cross border data transfer please refer to section X. The tools collect only the IP address assigned to you on the date you visit this site, rather than your name or any other identifying information. The provider will use this information in order to evaluate your use of the website, to compile reports on website activities and to provide other services relating to website and internet use to us.

The legal basis for this processing is Art. 6 sec. 1 sent. 1 lit. f GDPR and represents our legitimate interest to analyse our website’s traffic to improve the user’s experience and to optimise the website in general.

2. Google Analytics / Google Tag Manager

We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). On our behalf Google will use the information generated by a cookie for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet activity in connection with the use of the website.

We have activated the IP-anonymisation within the Google Analytics service, and your IP address will be truncated within the area of member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transferred to a Google server in the USA and truncated there. The IP-address your browser conveys within the scope of Google Analytics will not be associated with any other data held by Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser; however please note that if you do this you may not be able to use the full functionality of this website. In addition to that you may prevent the collection of the information generated by the cookie about your use of the website (including you IP address) and the processing of this data by Google if you download and install the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout

VIII. Third party content and social media plug-ins

1. Social media plug-ins

We use the AddThis service to provide a comprehensive range of social media plug-ins: this includes Facebook, Google+, Twitter, Tumblr, Pinterest, Gmail and LinkedIn. This allows you to communicate with such services and share and bookmark from our website. Social media plug-ins enable a direct communication between your device and the servers of the social media provider, allowing the social media provider to communicate with you and collect information about you browsing our website. This processing is based on Article 6 sec. 1 sent. 1 lit. f GDPR and represents our legitimate interest to improve your website experience and to optimise our services.

In case of third country transfer: Your personal data will be transferred to and processed in another country, e.g. the United States, if you choose to use a plug-in provided by AddThis that is based outside of the UK. For further information about the potential risks of a cross border data transfer refer to X.

Transfer of personal data takes places whether you have an account with the provider or not.

Please note that we neither have the control of the extent of personal data that is collected by the respective plug-in provider nor do we know the processing’s purpose or the period your personal data will be retained.

Further information about the processing of your personal data in the provider’s course of operation is provided via their respective privacy policy. Moreover, you will be provided with further information with regard to your rights and setting concerning privacy.

a) Facebook Social Plugins

We use so-called social plugins („plugins“) of the social networking site facebook.com provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins can be identified by one of Facebook’s logos (white “f” on blue tile or a “thumps-up”-sign) or by the additional text “Facebook Social Plugin”. The list of Facebook Social Plugins and their appearance can be accessed via: http://developers.facebook.com/plugins.

If a user visits one of the websites using such a plugin, the user’s browser directly connects to Facebook’s servers. The plugin and its content are made available directly on Facebook’s servers and included in the website by the user’s browser.

Due to the integration of the plugin Facebook collects the information that a user is visiting the corresponding website. If the user is logged in on Facebook at the moment he or she visits the website, Facebook may be able to connect the visit on the website to the user’s Facebook account. If the user interacts with the plugin – for example if he or she presses the like button or comments on something – the user’s browser transmits this information to Facebook. Facebook stores this information. If a user is not a member of Facebook, Facebook may collect and store the user’s IP-address. Facebook states that it only collects anonymized IP-addresses in Germany.

The reason for and scope of the data acquisition and information about the way in which the data is processed and used by Facebook, as well as the user’s rights in this respect and settings options for protecting the users privacy can be found under: http://www.facebook.com/policy.php.

If the user is a member of Facebook and does not wish Facebook to collect personal data via this homepage and to link this with his data stored on Facebook, the user needs to log off from Facebook before going to this homepage.

The user may also block Facebook’s plugins using add-ons for the user’s browser, for example the „Facebook Blocker“.

b) Twitter

We use the twitter-button. The button is provided by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. (“Twitter”) The buttons are marked using the text “Twitter” or “Follow” and a stylized blue bird. The button enables the user to share an article or a website of this homepage on Twitter or to follow the provider on Twitter.

If a user visits one of the websites using such a button, the user’s browser directly connects to Twitter’s servers. The Twitter-button and its content are loaded directly from Twitter’s servers and included in the website by the user’s browser. According to the provider’s knowledge, Twitter collects the user IP-address and the website’s URL when the button is loaded from Twitter’s servers. However, this data is only be used for loading and displaying the Twitter-button.

Further information can be found in Twitter’s privacy statement under: https://twitter.com/privacy.

c) Tumblr

We use Tumblr button. The button is provided by Tumblr, Inc. 35 E. 21st St., 9th Floor, New York, NY 10010 USA. The button is marked using the text ‘Tumblr’ and ‘t’.

The button enables the user to share an article or a website of this homepage on Tumblr or to follow the provider on Tumblr.

If a user visits one of the websites using such a button, the user’s browser directly connects to Tumblr’s servers. The Tumblr-button and its content are loaded directly from Tumblr’s servers and included in the website by the user’s browser. According to the provider’s knowledge, Tumblr collects the user IP-address and the website’s URL when the button is loaded from Tumblr’s servers. However, this data is only be used for loading and displaying the Tumblr-button.

Further information can be found in Tumblr’s privacy statement under: https://www.tumblr.com/privacy.

d) Pinterest

We use Pinterest button. The button is provided by Pinterest, Inc. 808 Brannan Street, San Francisco, CA 94 103-4904, USA. The button is marked using the text ‘Pinterest’ and its logo picture.

The button enables the user to share an article or a website of this homepage on Pinterest or to follow the provider on Pinterest.

If a user visits one of the websites using such a button, the user’s browser directly connects to Pinterest’s servers. The Pinterest-button and its content are loaded directly from Pinterest’s servers and included in the website by the user’s browser. According to the provider’s knowledge, Pinterest collects the user IP-address and the website’s URL when the button is loaded from Pinterest’s servers. However, this data is only be used for loading and displaying the Pinterest-button.

Further information can be found in Pinterest’s privacy statement under: https://policy.pinterest.com/en/privacy-policy.

e) Gmail

We use Gmail button. The button is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The button is marked using the text ‘Gmail’ and its ‘M’ logo picture.

If a user visits one of the websites using such a button, the user’s browser directly connects to Gmail’s servers. The Gmail-button and its content are loaded directly from Gmail’s servers and included in the website by the user’s browser. According to the provider’s knowledge, Gmail collects the user IP-address and the website’s URL when the button is loaded from Gmail’s servers. However, this data is only be used for loading and displaying the Gmail-button.

Further information can be found in Google’s privacy statement under: https://policies.google.com/privacy.

f) LinkedIn

We use LinkedIn button. The button is provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. The button is marked using the text ‘LinkedIn’ and its ‘in’ logo picture.

The button enables the user to share an article or a website of this homepage on LinkedIn or to follow the provider on LinkedIn.

If a user visits one of the websites using such a button, the user’s browser directly connects to LinkedIn’s servers. The LinkedIn-button and its content are loaded directly from LinkedIn’s servers and included in the website by the user’s browser. According to the provider’s knowledge, LinkedIn collects the user IP-address and the website’s URL when the button is loaded from LinkedIn’s servers. However, this data is only be used for loading and displaying the LinkedIn-button.

Further information can be found in LinkedIn’s privacy statement under: https://www.linkedin.com/legal/privacy-policy.

Should you have any questions regarding our privacy policy, please contact us via the e-mail address mailto:dataprotection@springernature.com.

2. YouTube

We use YouTube’s service in order to play some videos directly from our website. This processing is based on Article 6 sec. 1 sent. 1 lit. f GDPR and represents our legitimate interest to improve your website experience and to optimise our services.

Your browser will directly communicate with YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066. We do not have any influence on YouTube’s data processing activities. Please check YouTube’s privacy policy for further information: https://support.google.com/youtube/answer/7671399?hl=en Here you can find information about your rights and privacy settings. [Your data will be sent to a country outside the EEA. For further information about the potential risks of a cross border data transfer refer to X.]

3. Links to third party websites

This website contains links to third party websites for your convenience and information. These websites may be operated by companies not affiliated with us. We are not responsible for the content and the data collection on respective third party websites; please check the privacy policy of respective websites for information of respective websites’ data processing activities.


IX. Information sharing

Your personal data will only be disclosed to a third party to the extent necessary to fulfill our contractual relationship. Legal basis for the transfer of your personal data is Article 6 sec. 1 sent. 1 lit. b and f GDPR and represents our legitimate interest to implement our general terms and conditions of business or any other agreements concluded with you.

Some of the recipients mentioned above reside outside the EEA. For further information about cross border transfer in general and transfers outside of the EEA see X.

We may disclose anonymous aggregate statistics about users of the website in order to describe our services to prospective partners, advertisers and other reputable third parties and for other lawful purposes, but these statistics will include no personal data.

We may disclose your personal data to following contractors who assist us in providing the services we offer through the website. For example, when you make a purchase we may share information about you and your transaction with other companies for the purpose of processing your transaction. In addition, we may retain third party service providers to manage our customer databases or distribute e-mail offerings. Such data transfers will be based on data processing agreements. Therefore, our contractors will only use your personal data to the extent necessary to perform their functions and will be contractually bound to process your personal data only on our behalf and in compliance with our requests.

In the event that we undergo re-organisation or are sold to a third party, any personal data we hold about you may be transferred to that re-organised entity or third party in compliance with applicable law.

We may disclose your personal data if legally entitled or required to do so (for example if required by law or by a court order).

X. Cross border data transfers

Within the scope of our information sharing activities set out above, your personal data may be transferred to other countries (including countries outside the EEA) which may have different data protection standards from your country of residence. Please note that data processed in a foreign country may be subject to foreign laws and accessible to foreign governments, courts, law enforcement, and regulatory agencies. However, we will endeavour to take reasonable measures to maintain an adequate level of data protection when sharing your personal data with such countries.

In the case of a transfer to a country outside of the EEA, this transfer is safeguarded by EU Standard Contractual Clauses. You can find further information about the aforementioned safeguards under: https://ec.europa.eu/info/law/law-topic/data-protection_en.You can find further information about the aforementioned safeguards by contacting the Group Data Protection Officer via dataprotection@springernature.com.

XI. Security

We have reasonable state of the art security measures in place to protect against the loss, misuse and alteration of personal data under our control. For example, our security and privacy policies are periodically reviewed and enhanced as necessary and only authorised personnel have access to personal data. Whilst we cannot ensure or guarantee that loss, misuse or alteration of information will never occur, we use all reasonable efforts to prevent it.

You should bear in mind that submission of information over the internet is never entirely secure. We cannot guarantee the security of information you submit via our website whilst it is in transit over the internet and any such submission is at your own risk.

XII. Data retention

We strive to keep our processing activities with respect to your personal data as limited as possible. In the absence of specific retention periods set out in this policy, your personal data will be retained only for as long as we need it to fulfil the purpose for which we have collected it and, if applicable, as long as required by statutory retention requirements.

XIII. Your rights

Under the legislation applicable to you, you may be entitled to exercise some or all of the following rights:

  1. require (i) information as to whether your personal data is retained and (ii) access to and/or duplicates of your personal data retained, including the purposes of the processing, the categories of personal data concerned, and the data recipients as well as potential retention periods;
  2. request rectification, removal or restriction of your personal data, e.g. because (i) it is incomplete or inaccurate, (ii) it is no longer needed for the purposes for which it was collected, or (iii) the consent on which the processing was based has been withdrawn;
  3. refuse to provide and – without impact to data processing activities that have taken place before such withdrawal – withdraw your consent to processing of your personal data at any time;
  4. object, on grounds relating to your particular situation, that your personal data shall be subject to a processing. In this case, please provide us with information about your particular situation. After the assessment of the facts presented by you we will either stop processing your personal data or present you our compelling legitimate grounds for an ongoing processing;
  5. take legal actions in relation to any potential breach of your rights regarding the processing of your personal data, as well as to lodge complaints before the competent data protection regulators;
  6. require (i) to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and (ii) to transmit those data to another controller without hindrance from our side; where technically feasible you shall have the right to have the personal data transmitted directly from us to another controller; and/or
  7. not to be subject to any automated decision making, including profiling (automatic decisions based on data processing by automatic means, for the purpose of assessing several personal aspects) which produce legal effects on you or affects you with similar significance.

You may (i) exercise the rights referred to above or (ii) pose any questions or (iii) make any complaints regarding our data processing by contacting us using the contact details set out below.

XIV. Contacting us

Please submit any questions, concerns or comments you have about this privacy policy or any requests concerning your personal data by email to our Group Data Protection Officer. You can contact our Group Data Protection Officer via dataprotection@springernature.com.

The information you provide when contacting us by email will be processed to handle your request and will be erased when your request is completed. Alternatively, we will restrict the processing of the respective information in accordance with statutory retention requirements.

XV. Amendments to this policy

We reserve the right to change this policy from time to time by updating our website respectively. Please visit the website regularly and check our respective current privacy policy. This policy was last updated on 07 January 2020.