Privacy Policy (GDPR)

1. Purposes of processing

Personal data is processed for the purpose of: a) registration for and participation in dance classes and dance events (offline); b) organizational communication (e.g., schedule, changes, technical information), including contact via social media; c) processing orders for the online course, i.e., entering into and performing the agreement, handling payments, and providing access to digital content (the course); d) handling inquiries, customer support, and complaints; e) accounting and tax settlements (if applicable); f) ensuring the security of services, preventing abuse, and establishing, pursuing, or defending claims; g) website analytics — measuring visits and interactions on the website and, with your consent, privacy-masked session recordings, in order to improve its content, navigation, and purchase flow.

2. Legal basis for processing

Processing is carried out on the basis of: a) Article 6(1)(b) GDPR — performance of a contract (classes/events and purchase and access to the online course); b) Article 6(1)(c) GDPR — compliance with legal obligations (e.g., accounting and tax obligations, if applicable); c) Article 6(1)(f) GDPR — legitimate interests of the controller (handling claims, security, preventing abuse); d) Article 6(1)(a) GDPR — consent, only where required: for analytics cookies and similar technologies (in conjunction with the rules on storing information on the user's device — the ePrivacy rules) and for newsletter/marketing communication. Consent is voluntary and can be withdrawn at any time — for analytics via “Cookie settings” in the website footer — without affecting the lawfulness of processing carried out before withdrawal.

3. Scope of collected data

Collected data may include: first and last name, phone number, email address, usernames on social media platforms, as well as data necessary to process orders and communicate. In the case of purchasing an online course, additional data may be processed: order-related data (course name, purchase date, payment status), technical and usage data (IP address, system logs), and — if applicable — data required for accounting documents (VAT ID / invoicing details). As a rule, payment data is processed by the payment provider — the controller may only receive information about the payment status. If you consent to analytics, pseudonymous usage data is additionally processed: a random identifier stored in your browser, information about your device, browser, operating system, screen size and language, approximate location (country/city) determined from the IP address, the domain of the referring website and campaign (UTM) parameters, pages viewed and interactions on the website (e.g., clicks, scroll depth, use of the checkout form — without the data you enter), page performance measurements, and session recordings in which all text and form fields are masked. On the checkout and payment result pages only the page path and purchase-step events with public product data (product, price, currency) are collected, and no session recordings are made there. Analytics data is not linked to your name, email address, or order details.

4. Data recipients / processors

Data may be transferred to entities supporting the controller in providing services, in particular: - payment system providers (Stripe), - hosting / course delivery platform (Telegram) / tools used to provide access to materials, - website and product analytics provider with EU data residency (Mixpanel), - email, communication, and customer support tools (Gmail, Telegram), - accounting services (if applicable), - IT support. Data is not sold or shared with third parties for their own marketing purposes. It may also be disclosed to public authorities only where required by law.

5. Transfers of data outside the EEA

If you use providers based outside the European Economic Area (e.g., certain cloud services), personal data may be transferred outside the EEA only in accordance with the GDPR (e.g., based on Standard Contractual Clauses) and with appropriate safeguards in place.

6. Data retention

Personal data will be stored: a) for the period necessary to perform the agreement (classes/events or access to the online course); b) thereafter for the period required by law (in particular accounting/tax regulations, if applicable) or until the limitation period for claims expires; c) where processing is based on consent — until the consent is withdrawn (without affecting the lawfulness of processing before withdrawal).

7. Rights of the data subject

You have the right to access your data, rectify it, erase it, restrict processing, object to processing, data portability, and to lodge a complaint with the President of the Personal Data Protection Office (PUODO). Where processing is based on consent, you have the right to withdraw your consent at any time.

8. Voluntary provision of data

Providing personal data is voluntary; however, it is necessary to participate in classes or events and to process an order for the online course and provide access to digital content.

9. Automated decision-making / profiling

We do not make automated decisions that produce legal or similarly significant effects. With your analytics consent, pseudonymous usage events may be segmented to understand how groups of visitors use the website; these segments are used only to improve the website, content, and purchase flow.