1. Introduction

This Privacy Policy explains how we collect, use, and protect personal data in connection with ballet and dance classes, our website, and related services. We comply with the EU General Data Protection Regulation (GDPR) and Polish law.

2. Data Controller

The data controller is:
Katerina Kolesnikova Grace Dance School (Eluzea Ballet School)
Form: sole proprietorship (indywidualna działalność gospodarcza)
NIP: 5214084244
Address: al. Niepodległości 165/27, 02-555 Warsaw, Poland
Email: eluzea.info@gmail.com

3. Data We Collect

We process the following categories of personal data:

• From parents/guardians: name, surname, contact details (email, phone, address if provided), and payment details.
• From students: name, surname, age, date of birth, and any relevant health information voluntarily provided for safe participation in classes.
• From website use: technical data such as IP address, browser type, device information, and cookie identifiers (see Section 8).
• From marketing consents: photos, videos, and email addresses for newsletters and promotional materials.

4. Purposes of Processing

We process data for the following purposes:

• Organizing and delivering ballet classes and related activities.
• Managing enrollments, contracts, attendance, and payments.
• Communicating with parents/guardians about schedules, updates, and administration.
• Sending newsletters and marketing communications with your consent.
• Ensuring the security and proper functioning of our website.
  
  
  

5. Legal Bases

Processing is based on:

• Performance of a contract (Art. 6(1)(b) GDPR) – for class enrollment and participation.
• Legal obligation (Art. 6(1)(c) GDPR) – e.g. tax or accounting records.
• Legitimate interests (Art. 6(1)(f) GDPR) – ensuring the security of classes, premises, and website.
• Consent (Art. 6(1)(a) GDPR) – for marketing communications, photography/video, and non-essential cookies.
  
  
  

6. Data Sharing

We may share personal data with trusted service providers such as:

• IT and hosting providers, including Google Workspace.
• Analytics and marketing providers (Google Analytics, Meta, Hotjar, Microsoft Clarity) via cookies.
• Payment service providers and accounting services (where applicable).
  All third parties process data only under our instructions and in compliance with GDPR.
  
  
  

7. Data Transfers Outside the EEA

Some providers (Google, Meta, Hotjar, Microsoft) may process data outside the European Economic Area. In such cases, appropriate safeguards (e.g. EU Standard Contractual Clauses) are applied.

8. Cookies & Tracking Technologies

We use cookies and similar technologies on our website to:

• ensure its proper functioning,
• analyze visitor behavior,
• support marketing activities.

Some cookies are necessary, while others require your consent.
For details about the cookies we use, their purposes, and your rights to manage or withdraw consent, please see our Cookie Policy.

9. Data Retention

• Enrollment and payment records: stored for up to 6 years in line with tax/accounting obligations.
• Contractual agreements: stored for the duration of the contract and up to 3 years after its end (statutory limitation).
• Marketing data: stored until you withdraw consent.
• Cookies: retained according to the periods shown in the Cookie Policy / Cookiebot consent tool.
  
  
  

10. Your Rights

You have the right to:

• access your data,
• correct inaccurate data,
• request deletion,
• restrict or object to processing,
• withdraw consent at any time,
• receive a copy of your data (portability),
• lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.
  
  
  

11. Security

We use appropriate technical and organizational measures to protect your data, including secure systems (Google Workspace), encrypted communications (HTTPS), and restricted access controls.

12. Updates

We may update this Privacy Policy from time to time. The most recent version is always available on our website, with the last updated date shown at the top.

13. Contact

If you have questions about this Privacy Policy or your rights, please contact:
Eluzea Ballet School
Email: eluzea.info@gmail.com

1. Introduction

This Privacy Policy explains how we collect, use, and protect personal data in connection with ballet and dance classes, our website, and related services. We comply with the EU General Data Protection Regulation (GDPR) and Polish law.

2. Data Controller

The data controller is:
Katerina Kolesnikova Grace Dance School (Eluzea Ballet School)
Form: sole proprietorship (indywidualna działalność gospodarcza)
NIP: 5214084244
Address: al. Niepodległości 165/27, 02-555 Warsaw, Poland
Email: eluzea.info@gmail.com

3. Data We Collect

We process the following categories of personal data:

• From parents/guardians: name, surname, contact details (email, phone, address if provided), and payment details.
• From students: name, surname, age, date of birth, and any relevant health information voluntarily provided for safe participation in classes.
• From website use: technical data such as IP address, browser type, device information, and cookie identifiers (see Section 8).
• From marketing consents: photos, videos, and email addresses for newsletters and promotional materials.

4. Purposes of Processing

We process data for the following purposes:

• Organizing and delivering ballet classes and related activities.
• Managing enrollments, contracts, attendance, and payments.
• Communicating with parents/guardians about schedules, updates, and administration.
• Sending newsletters and marketing communications with your consent.
• Ensuring the security and proper functioning of our website.
  
  
  

5. Legal Bases

Processing is based on:

• Performance of a contract (Art. 6(1)(b) GDPR) – for class enrollment and participation.
• Legal obligation (Art. 6(1)(c) GDPR) – e.g. tax or accounting records.
• Legitimate interests (Art. 6(1)(f) GDPR) – ensuring the security of classes, premises, and website.
• Consent (Art. 6(1)(a) GDPR) – for marketing communications, photography/video, and non-essential cookies.
  
  
  

6. Data Sharing

We may share personal data with trusted service providers such as:

• IT and hosting providers, including Google Workspace.
• Analytics and marketing providers (Google Analytics, Meta, Hotjar, Microsoft Clarity) via cookies.
• Payment service providers and accounting services (where applicable).
  All third parties process data only under our instructions and in compliance with GDPR.
  
  
  

7. Data Transfers Outside the EEA

Some providers (Google, Meta, Hotjar, Microsoft) may process data outside the European Economic Area. In such cases, appropriate safeguards (e.g. EU Standard Contractual Clauses) are applied.

8. Cookies & Tracking Technologies

We use cookies and similar technologies on our website to:

• ensure its proper functioning,
• analyze visitor behavior,
• support marketing activities.

Some cookies are necessary, while others require your consent.
For details about the cookies we use, their purposes, and your rights to manage or withdraw consent, please see our Cookie Policy.

9. Data Retention

• Enrollment and payment records: stored for up to 6 years in line with tax/accounting obligations.
• Contractual agreements: stored for the duration of the contract and up to 3 years after its end (statutory limitation).
• Marketing data: stored until you withdraw consent.
• Cookies: retained according to the periods shown in the Cookie Policy / Cookiebot consent tool.
  
  
  

10. Your Rights

You have the right to:

• access your data,
• correct inaccurate data,
• request deletion,
• restrict or object to processing,
• withdraw consent at any time,
• receive a copy of your data (portability),
• lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.
  
  
  

11. Security

We use appropriate technical and organizational measures to protect your data, including secure systems (Google Workspace), encrypted communications (HTTPS), and restricted access controls.

12. Updates

We may update this Privacy Policy from time to time. The most recent version is always available on our website, with the last updated date shown at the top.

13. Contact

If you have questions about this Privacy Policy or your rights, please contact:
Eluzea Ballet School
Email: eluzea.info@gmail.com