PRIVACY POLICY OF SYLWIAROZ.DANCE

§1. General Provisions

1. The Controller of personal data collected via the website {{WEBSITE_URL}} is Sylwia Rozpierska, residing at Działdowska 8a/506, 00-184 Warsaw, Poland.

2. Contact with the Controller is possible via e-mail: {{EMAIL}}

3. Personal data is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

§2. Purpose and Scope of Data Collection

1. The Controller processes users’ personal data solely for the purpose of:

   • a) Responding to inquiries sent via the contact form or e-mail.
   • b) Scheduling and arranging dance lessons.
   • c) Performing the contract (online sale of lessons) and contacting the customer to arrange the lesson date.

2. Scope of Data Collected:

   • The reservation form and the post-purchase contact form collect: name, e-mail address, phone number, preferred dates, location, and the message content.
   • For online purchases, the Controller receives from Stripe: name, e-mail address, amount, and payment identifier (payment_intent / session).

3. Providing data is voluntary but necessary to establish contact or to perform the service.

4. Legal Basis for Processing:

   • Art. 6(1)(a) GDPR (user consent expressed by checking the checkbox in the contact form)
   • Art. 6(1)(b) GDPR (necessity for the performance of a contract / provision of the service)
   • Art. 6(1)(f) GDPR (legitimate interest in maintaining contact with potential lesson participants)

5. Data Recipients:

   • Stripe (Stripe Payments Europe, Limited (Ireland) and Stripe, Inc. (USA)) – online payment processing. Payment card data is entered directly on Stripe and is not stored on our servers. Data may be transferred in accordance with the safeguards applied by Stripe. More information: Stripe Privacy Policy
   • Netlify, Inc. - website hosting and contact form processing (data transferred to US servers, protected by EU-U.S. Data Privacy Framework agreement)
   • Gmail (Google LLC) - email forwarding from contact form (data transferred to Google servers)
   • YouTube (Google LLC) - the site uses “Click-to-Load” technology and youtube-nocookie.com privacy mode. Connection to YouTube occurs only when you click a video in the performances gallery.
   • Google Analytics (Google Ireland Ltd / Google LLC) - traffic and conversion measurement, only after consent to analytics; data transferred to the US under the EU-U.S. Data Privacy Framework

6. Data Retention Period:

   • Data from the contact form is retained for as long as our contact regarding lessons continues (e.g., until course completion or withdrawal from lessons)
   • Payment-related data is retained only for as long as necessary to provide the service and to fulfill any legal obligations
   • You can request deletion of your data at any time

§3. Cookies and User Consent

3.1 General Information

The website uses cookies, which are saved on the user’s end device. Before saving any cookies that require consent, users are asked to provide their consent via a cookie banner.

3.2 Types of Technologies Used

a) Browser Local Storage (localStorage) - Strictly Necessary

The website uses browser local storage (localStorage) to save your decision regarding cookie consent. This data:

• Is not shared with any third parties
• Is stored only on your device
• Is necessary for the proper functioning of the website
• Expires after 365 days, after which you will be asked for consent again

b) YouTube - “Click-to-Load” Technology

Videos are loaded from YouTube only when you click them. No connection to YouTube occurs while browsing the page—only when you actively click a video thumbnail.

More information: Google Privacy Policy

c) Google Analytics (cookies) - Analytics, with Consent

Google Analytics is loaded only after you give consent. These cookies are used to:

• Visitor statistics and understanding how you use the site and which content and offers interest you
• Conversion measurement – which offers are chosen and paid for (including the selected offer, its value and a Stripe transaction reference) – so we can improve the site and better meet customers’ needs

We apply the following privacy safeguards:

• GA4 does not store your IP address; for EU users the IP is processed only momentarily on EU-based servers to derive approximate location, then discarded
• Data is not used for advertising, ad personalization or remarketing – we grant no advertising consent signals (ad_storage, ad_personalization)
• More information: Google Analytics Privacy Policy

3.3 Managing Consent

Users can at any time:

• Change their decision - by clicking the “Cookie settings” link in the website footer
• Disable cookies - in their web browser settings
• Delete stored data - by clearing the browser cache

§4. User Rights

The user has the right to:

• Access their data - you can request information about what data we process about you
• Rectify their data - if the data is inaccurate or incomplete
• Request deletion of data (“right to be forgotten”)
• Restrict data processing - in specific situations provided by GDPR
• Data portability - you can receive your data in a structured format (e.g., JSON, CSV)
• Lodge a complaint with a supervisory authority - if you believe the processing of your data violates GDPR

Supervisory Authority: President of the Office for Personal Data Protection (PUODO) ul. Stawki 2, 00-193 Warsaw, Poland Phone: +48 22 531 03 00 Website: https://uodo.gov.pl

§5. Changes to the Privacy Policy

The Controller reserves the right to make changes to this Privacy Policy. Users will be informed about significant changes through a notice on the website.

Last updated: June 2026