Acerca de
Privacy Policy
Ethel AnimA Dance School
NIP: 6772500680
Contact email: ethel.anima@gmail.com
Location: Kraków
1. Who Is the Data Controller
The controller of your personal data is Ethel AnimA / Natalia Senkevich, operating Ethel AnimA Dance School in Kraków, Poland.
For any questions regarding your personal data or this Privacy Policy, please contact:
2. What Personal Data We May Process
Depending on the service you use, we may process the following personal data:
- name and surname;
- email address;
- phone number;
- billing or address details where required;
- information related to your booking and payment;
- selected workshops, programs, or events;
- dance level or previous experience where relevant;
- information voluntarily provided in connection with participation;
- social media username or content where you tag, mention, or contact Ethel AnimA;
- photographs, videos, recordings, testimonials, or other content where a valid legal basis applies.
We only process personal data that is necessary for the relevant purpose.
3. Health-Related Information
Information concerning health is considered special category personal data under GDPR.
Health-related information will only be processed where it is necessary for participation or training safety and where a valid legal basis under GDPR applies.
Where required, such information will be processed on the basis of explicit consent.
Participants are encouraged to provide only information that is genuinely relevant to safe participation.
4. Why We Process Personal Data
Personal data may be processed for the following purposes:
- registration and booking;
- payment administration;
- delivery of workshops, training programs, performance projects, and events;
- communication with participants;
- sending organizational information, reminders, and updates related to a booking;
- administration and accounting;
- responding to questions or complaints;
- managing participant transfers or changes;
- documenting classes, projects, or events where permitted;
- publishing promotional content where valid consent or another lawful basis applies;
- protecting legal claims and complying with legal obligations.
5. Legal Bases for Processing
We process personal data under one or more of the following legal bases:
Contractual necessity – Art. 6(1)(b) GDPR
For example, registration, booking, payment, event participation, and delivery of purchased services.
Legal obligation – Art. 6(1)(c) GDPR
For example, accounting, tax, and record-keeping obligations.
Consent – Art. 6(1)(a) GDPR
For example, where consent is required for marketing, testimonials, identifiable promotional images, or videos.
Legitimate interests – Art. 6(1)(f) GDPR
For example, administration, communication concerning an existing booking, prevention of misuse, documentation, and establishment or defense of legal claims.
Where special category data is processed, an appropriate legal basis under Article 9 GDPR will also apply.
6. Data Required to Provide the Service
Some personal data is necessary in order to process a booking or provide the purchased service.
If required information is not provided, it may not be possible to complete the registration, process payment, or provide participation in the relevant program or event.
7. Photographs and Video Recordings
Photography and video recording may take place during workshops, rehearsals, performances, festivals, and other events.
Where the use of an identifiable individual image requires consent, such consent will be obtained separately.
General event photographs or recordings in which a person appears only as part of a group, audience, background, or wider scene may be processed where permitted by applicable law.
Consent to the use of an identifiable image may be withdrawn at any time where consent is the legal basis for processing.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
8. Testimonials, Messages and Reviews
Feedback, testimonials, messages, or reviews may be used for promotional purposes where there is an appropriate legal basis.
Where a testimonial is used without separate permission, identifying details such as:
- name;
- username;
- profile photograph;
- email address;
- other identifying information
will be removed or anonymized where appropriate.
If a testimonial is published together with identifying information, separate permission will be obtained where required.
Screenshots may be cropped or anonymized before publication.
9. Social Media Content
If you publicly tag or mention Ethel AnimA on social media, your content may be viewed and interacted with through the relevant platform.
Publicly shared content may be reposted using the platform’s native sharing or reposting functions where permitted by the platform and applicable law.
Use of such content outside the original platform, for example on a website or in separate advertising materials, may require additional permission.
Content from private accounts will not be republished unless you send it directly or otherwise give permission.
10. Marketing Communications
Marketing communications will only be sent where there is an appropriate legal basis.
Where consent is required, you may withdraw that consent at any time.
Transactional or organizational messages related to an existing booking are not considered marketing and may still be sent where necessary to provide the purchased service.
11. Data Recipients
Personal data may be shared with service providers where necessary to operate the business and provide the purchased service.
These may include:
- payment processors such as Stripe or PayPal;
- accounting and tax service providers;
- booking or registration platforms;
- website hosting providers;
- email and communication service providers;
- instructors or assistants where necessary for the delivery of a program;
- IT or technical service providers;
- legal or professional advisers where necessary;
- public authorities where disclosure is required by law.
Only data necessary for the relevant purpose will be shared.
12. International Data Transfers
Some service providers may process personal data outside the European Economic Area.
Where personal data is transferred outside the EEA, appropriate safeguards required under GDPR will be used, such as:
- an adequacy decision issued by the European Commission;
- Standard Contractual Clauses;
- another lawful transfer mechanism permitted under GDPR.
13. Data Retention
Personal data is kept only for as long as necessary for the purpose for which it was collected.
Typical retention periods may include:
Booking and contractual data:
For the duration of the contract and afterwards for as long as necessary to comply with legal obligations or to establish, exercise, or defend legal claims.
Accounting and transaction data:
For the period required by applicable tax and accounting law.
Correspondence and complaints:
For as long as reasonably necessary to resolve the matter and protect legal claims.
Marketing data:
Until consent is withdrawn or another applicable legal basis no longer exists.
Photographs, videos, and testimonials:
For as long as the relevant legal basis remains valid or until consent is withdrawn, where consent is the applicable basis.
14. Your GDPR Rights
Depending on the circumstances, you have the right to:
- access your personal data;
- request correction of inaccurate data;
- request deletion of your data;
- request restriction of processing;
- object to certain processing;
- withdraw consent at any time;
- request data portability where applicable;
- lodge a complaint with a supervisory authority.
In Poland, the relevant supervisory authority is the President of the Personal Data Protection Office (UODO).
15. Withdrawing Consent
Where processing is based on consent, you may withdraw your consent at any time by contacting:
Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
16. Automated Decision-Making
We do not use automated decision-making, including profiling, that produces legal effects or similarly significant effects concerning participants.
17. Data Security
Reasonable technical and organizational measures are used to protect personal data against:
- unauthorized access;
- accidental loss;
- misuse;
- alteration;
- disclosure.
Access to personal data is limited to persons who require it for legitimate business purposes.
18. Third-Party Platforms
Bookings, payments, communication, or content may be processed through third-party platforms.
Where you use an external platform, its own privacy policy may also apply to the processing it performs independently.
19. Children and Minors
If participation by a minor is permitted for a particular program or event, additional information or consent from a parent or legal guardian may be required where applicable.
The specific requirements will be communicated during registration.
20. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time.
The current version will be published on the website or otherwise made available to participants.
For processing connected with a specific purchase, the version applicable at the relevant time will be used, subject to any changes required by law.