Privacy policy

1. Controller

The controller for personal data processed on this website is: Wirbelwind Tanzstudio, owner Lena Brandt, Britzer Damm 112, 12347 Berlin, Germany, telephone +49 30 5578 4120, email hallo@wirbelwind-tanzstudio.de.

We are not legally required to appoint a data protection officer. Please direct any data protection enquiry to the address above; we answer within one month.

2. Data minimisation

We collect as little data as we possibly can. This website uses no analytics, tracking or advertising services, embeds no social media plugins and builds no usage profiles. There is no automated decision-making and no profiling within the meaning of Art. 22 GDPR.

3. Hosting and server log files

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. A data processing agreement under Art. 28 GDPR is in place, and the transfer to the USA is covered by the European Commission’s standard contractual clauses under Art. 46 (2) (c) GDPR.

When you open a page, the hosting provider processes automatically transmitted access data (IP address, date and time, the address requested, the volume of data transferred, browser type and operating system). The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the secure and reliable operation of the website. These log entries are deleted after 30 days at the latest.

4. Cookies and local storage

We set no analytics or advertising cookies. Only two strictly necessary values are kept in your browser’s local storage: your language choice and your answer to the cookie notice. Neither leaves your device.

The legal basis is § 25 (2) no. 2 TDDDG, because the storage is strictly necessary to present the website you have asked for. You can clear these entries at any time in your browser settings.

5. The height ruler

On the home page you can drag a marker to your child’s approximate height in order to filter the schedule. This feature runs entirely inside your browser.

The value you set is never transmitted to us or to anyone else, never stored, never logged, never written into a cookie and never copied into a form field. It exists only in the memory of the open page and is gone as soon as you reload. No processing of personal data within the meaning of the GDPR takes place.

We state plainly that height is only a rough indication for choosing an age band. The child’s age is always what decides.

6. Trial class and contact enquiries

If you complete the form on this website or write to us, we process the details you provide in order to answer your enquiry and arrange a trial class.

We process: your name as a parent or guardian, your email address, optionally your telephone number, optionally the child’s first name, the age band you are interested in, a preferred class and your message. We need nothing else for a trial class — in particular no surname for the child, no date of birth, no height and no photograph.

The legal basis is Art. 6 (1) (b) GDPR (steps taken prior to entering into a contract) together with your consent under Art. 6 (1) (a) GDPR, which you give expressly in the form and can withdraw at any time with effect for the future.

We delete trial enquiries six months after the last contact, provided no course contract is concluded and no statutory retention obligation applies.

7. Children’s data (Art. 8 GDPR)

Our courses are for children aged 3 to 14, but this website and every form on it are addressed exclusively to their parents and guardians. We do not invite children to send us their own details and we do not accept registrations from children. Registration, the course contract and the parent area are handled without exception by an adult with parental responsibility.

For a trial class the child’s first name and the age band are enough, and both are optional. If a course contract is concluded we additionally process the child’s first and last name, date of birth (to place them in the correct group), an emergency contact and the names of the people permitted to collect the child. The legal basis is Art. 6 (1) (b) GDPR in conjunction with Art. 8 GDPR.

Health information (allergies, asthma or anything else important for safe participation) is processed only if you choose to tell us, solely on the basis of your explicit consent under Art. 9 (2) (a) GDPR, and only the teacher taking the class is told.

Retention: a child’s contract data is deleted three years after the membership ends, and health information immediately when it ends. Invoices are subject to the ten-year commercial and tax retention period under § 147 AO and § 257 HGB.

Children’s data is never passed to third parties, never used for advertising and never used to build profiles. We send no marketing to children.

8. Photographs and video

Recordings are made in class and at the Sommershow only where a separate, written and freely revocable consent from a parent or guardian exists (Art. 6 (1) (a) GDPR, § 22 KunstUrhG). Consent is never a condition of taking part, and refusing has no disadvantage whatsoever for the child.

A withdrawal takes effect for the future; we then remove the recordings concerned from every channel we control.

The photographs shown on this website were produced with a generative image model. They show no real children.

9. Map (OpenStreetMap)

The contact section can display a map from the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The map loads only after you expressly press “Load the map”. Until then no connection to that provider is made at all.

Loading it transmits your IP address to OpenStreetMap. The legal basis is your consent under Art. 6 (1) (a) GDPR, which you simply do not give by not pressing the button.

10. Fonts

The Sriracha and Nunito typefaces are bundled at build time and served from our own server. Visiting this website makes no connection to Google servers and transmits no IP address to them.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21 GDPR). Any consent given can be withdrawn at any time with effect for the future.

Where the data concerns a child, these rights belong to and are exercised by the parents or guardians.

You also have the right to lodge a complaint with a supervisory authority. The competent authority is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany.

12. Changes to this policy

We update this privacy policy when the legal position or our processing changes. The version published on this page is the one that applies.