# Privacy Policy

> URL: https://www.tanzmitderschwester.de/en/privacy/
> Language: en
> Site: Tanz mit der Schwester — Dance classes in Munich with Rahel: contemporary dance, jazz dance, modern dance for kids, and private lessons in Schwabing and near Gasteig.

> Note: Translation for reference only. The German original is the legally binding version.

We are very pleased about your interest in our company. Data protection is of particularly high priority for the management of Tanz mit der Schwester. Use of the Tanz mit der Schwester websites is generally possible without providing any personal data. However, if a data subject wishes to use special services of our company via our website, processing of personal data may become necessary. If processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the data subject's consent.

The processing of personal data — for example a data subject's name, address, email address, or telephone number — always takes place in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to Tanz mit der Schwester. By means of this privacy policy, our company wishes to inform the public about the type, scope, and purpose of the personal data we collect, use, and process. Furthermore, data subjects are informed of their rights by means of this privacy policy.

As the controller, Tanz mit der Schwester has implemented numerous technical and organizational measures to ensure the most complete protection possible of the personal data processed via this website. Nevertheless, internet-based data transmissions can in principle have security gaps, so absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us via alternative means, for example by telephone.

## 1. Definitions

The privacy policy is based on the terminology of the General Data Protection Regulation (GDPR). Defined terms:

- **a) Personal data** — any information relating to an identified or identifiable natural person ("data subject").
- **b) Data subject** — any identified or identifiable natural person whose personal data is processed.
- **c) Processing** — any operation performed on personal data (collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, alignment, combination, restriction, erasure, destruction).
- **d) Restriction of processing** — marking stored personal data with the aim of limiting its future processing.
- **e) Profiling** — automated processing of personal data to evaluate personal aspects of a natural person.
- **f) Pseudonymization** — processing in such a way that data can no longer be attributed to a person without additional information.
- **g) Controller** — the entity that decides on the purposes and means of processing.
- **h) Processor** — an entity that processes data on behalf of the controller.
- **i) Recipient** — an entity to which data is disclosed (excluding authorities acting under an investigative mandate).
- **j) Third party** — an entity other than the data subject, controller, processor, and their authorized persons.
- **k) Consent** — a freely given, informed, and unambiguous indication of the data subject's wishes.

## 2. Name and Address of the Controller

Tanz mit der Schwester
Rahel Zelenkowits
Hörwarthstraße 92
80804 Munich
Germany
Phone: +49 175 9646927
Email: info@tanzmitderschwester.de
Website: www.tanzmitderschwester.de

## 3. Cookies

This website does not use cookies. No files enabling recognition of visitors are stored on their devices. Only the language setting (German/English) chosen by the data subject is stored locally in the browser (localStorage) so that the site is displayed in the desired language on the next visit. This storage is necessary for the service explicitly requested by the data subject (Section 25 (2) No. 2 TDDDG) and contains no personal data.

## 4. Collection of General Data and Information

Each page visit stores general data in the server log files: (1) browser types and versions, (2) operating system, (3) referrer, (4) sub-pages accessed, (5) date and time, (6) IP address, (7) internet service provider, (8) other similar data for threat prevention. No conclusions are drawn about the data subject. The data serves the correct delivery and optimization of content, the ongoing functioning of the systems, and, if necessary, law enforcement in the event of cyberattacks. The anonymous log file data is stored separately from personal data.

## 5. Contact via the Website

When contacting us by email or contact form, the personal data transmitted is automatically stored — exclusively for processing or contacting the data subject. This data is not passed on to third parties.

## 6. Routine Erasure and Blocking of Personal Data

Personal data is stored only for the period necessary to achieve the purpose, or as prescribed by statutory retention periods. Afterwards, the data is routinely blocked or erased.

## 7. Rights of the Data Subject

- **a) Right to confirmation** — whether personal data is being processed.
- **b) Right of access** — free information about stored data and a copy; includes, among other things, processing purposes, data categories, recipients, planned storage period, rights to rectification/erasure/restriction/objection, right to lodge a complaint, origin of the data, existence of automated decision-making, and transfers to third countries.
- **c) Right to rectification** — immediate correction of inaccurate data and completion of incomplete data.
- **d) Right to erasure (right to be forgotten)** — erasure where, among other things: the purpose no longer applies, consent is withdrawn, an objection under Art. 21 GDPR is lodged, processing is unlawful, a legal obligation requires erasure, or data was collected under Art. 8 (1) GDPR. For published data, the company takes appropriate measures to inform other controllers.
- **e) Right to restriction of processing** — where, among other things, accuracy is contested, processing is unlawful, the data is needed for legal claims, or an objection is being reviewed.
- **f) Right to data portability** — receipt of the data in a structured, commonly used, machine-readable format and transmission to another controller where technically feasible.
- **g) Right to object** — at any time, against processing based on Art. 6 (1) lit. e or f GDPR, against direct marketing, and against processing for research/statistical purposes.
- **h) Automated individual decision-making, including profiling** — right not to be subject to a decision based solely on automated processing (with the exceptions specified in the GDPR).
- **i) Right to withdraw data protection consent** — at any time.

To exercise these rights, the data subject may contact an employee of the controller at any time.

## 8. Anonymous Reach Measurement (cookie-free)

To improve our services, we collect anonymous visit statistics on our own server. Only aggregated daily counters are stored: number of page views per page, language version (German/English), traffic source (e.g. search engine or direct visit), device category (mobile/tablet/desktop), operating system category (e.g. iOS/Android), average time spent per page, country of origin, and the number of clicks on contact and sign-up links. No cookies are set, no IP addresses are stored, no individual usage profiles are created, and no data is transferred to third parties; identifying individual persons is not possible. The legal basis is our legitimate interest in the statistical analysis of the use of our services (Art. 6 (1) (f) GDPR).

## 9. Instagram

This website contains a simple link to our Instagram profile. No Instagram components (e.g. embedded content or plugins) are integrated; merely visiting our website therefore does not transfer any data to Instagram. Only when the data subject clicks the link do they reach Instagram's pages (operator: Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland); from that point on, Instagram's privacy policy applies: https://privacycenter.instagram.com/policy.

## 10. Legal Basis for Processing

Art. 6 (1) lit. a GDPR (consent), lit. b (contract performance and pre-contractual measures), lit. c (legal obligation, e.g., tax obligations), lit. d (vital interests), lit. f (legitimate interest, provided the interests and fundamental rights of the data subject do not prevail; cf. Recital 47 sentence 2 GDPR).

## 11. Legitimate Interests in Processing

Where processing is based on Art. 6 (1) lit. f GDPR, the legitimate interest is the conduct of business for the benefit of all employees and shareholders.

## 12. Storage Period

The criterion is the respective statutory retention period. After expiry, the data is routinely erased, unless it is still required for contract performance or initiation.

## 13. Provisions on the Provision of Personal Data

Provision is partly required by law (e.g., tax regulations) or may result from contractual provisions. For a contract to be concluded, provision may be necessary; failure to provide would mean the contract could not be concluded. Before providing personal data, the data subject may contact an employee, who will clarify the situation on a case-by-case basis.

## 14. Automated Decision-Making

No automated decision-making or profiling is used.

---

This privacy policy was created by the privacy policy generator of DGD Deutsche Gesellschaft für Datenschutz GmbH (external data protection officer, Aschaffenburg) in cooperation with IT and data protection lawyer Christian Solmecke.
