Privacy Policy

Who handles your data

Use this email for privacy questions or requests to exercise your rights. Include enough information to identify your booking; do not send card details.

Data we handle

• Registration: name, surname, email, dance role (leader or follower), preferred dance (salsa or bachata) and language. Your phone number is optional. Dance role is not a question about your sex or gender.
• Tickets and payments: booking reference, pass type, recorded price and any discount, payment method and status, promoter attribution, refund records, confirmations and wristband issue time.
• Communication and technical data: enquiries, email delivery status and information needed to secure and resume an unfinished payment. Hosting and payment providers may process IP addresses, device information and technical logs to operate and protect their services.
• Staff: account details, role and permissions, access invitations and records of actions involving bookings, payments and admission.

You usually provide data directly through a form or communication with us. We may also receive it from a promoter assigning your ticket, an imported ticket record or a payment provider. You do not need a customer account to buy a pass. Card details are entered on a separate Stripe page; this application does not store full card numbers or security codes.

Purposes and legal bases

We use your email address to deliver your ticket and important information about the congress you registered for, such as a change of date or venue. Where we have permission or another applicable basis to send promotional emails, we may also send congress news and ticket price reminders. You can unsubscribe free of charge in every such email. We keep a record of your unsubscribe so we can respect your choice at future congresses.

Data needed for registration, payment, ticket delivery, booking communications and admission is processed to enter into and perform the contract. You may optionally provide a phone number for booking-related contact. Records needed for accounting and statutory requests are processed to meet applicable legal obligations.

Fraud prevention, staff access controls, action records and planning for dance roles and preferences support legitimate interests in running a safe, well-organized event. Your rights must be considered in this processing, and you may object. Optional browser preferences require permission, which you can withdraw on the cookie page. Event registration does not constitute consent to marketing messages.

Without the required details we cannot process your registration and issue a ticket. Payment and pass validity are checked electronically; contact the organizer for review if you believe your status is incorrect.

Who may receive data

Authorized organizers and entrance staff use data to manage bookings and validate tickets. Promoters can access bookings assigned to them. The application uses:

• Supabase — database storage and staff authentication.
• Vercel — hosting and website delivery.
• Resend — transactional messages, confirmations and PDF tickets with QR codes.
• Stripe — online payments, transaction verification, refunds and fraud prevention. Depending on the activity, Stripe acts as a processor or as a separate controller under its own privacy policy.

Records relevant to legal obligations or claims may be disclosed to competent authorities and authorized professional advisers where there is a legal basis. Service providers operate internationally: processing or access may involve countries outside the European Economic Area. Their processing terms address safeguards, including EU standard contractual clauses where applicable. Contact us for information about transfers affecting your booking and how to obtain a copy of relevant safeguards.

Keeping data

Retention depends on the record and its purpose. For bookings and tickets, relevant criteria are completion of the event, payment reconciliation and resolution of ticket-related requests. Documents subject to accounting, tax or other legal retention duties are kept for the applicable statutory period. Where a complaint or legal claim is unresolved, relevant records are retained for its resolution and applicable periods for bringing or defending claims. You can contact us for the period applying to a particular record.

Cancelling a registration or clearing cookies does not automatically erase ticket records, payment records or backups. Browser-storage lifetimes and withdrawal of permission are described in the Cookie Policy.

Your rights

Subject to the applicable conditions, you may request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. You can withdraw permission for optional preferences at any time without affecting the lawfulness of earlier processing. Erasure is not unconditional where legal retention duties or legal claims require records to be kept. Proportionate identity verification may be needed to protect your data.

You may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or another competent supervisory authority. Send questions and requests to the organizer using the contact details above.