Tanzschule Cuban Salsa Graz
Privacy Policy
Privacy policy of Tanzschule Cuban Salsa
This page explains which personal data we process when you visit this website and in connection with our dance classes and events, for what purposes, on what legal basis and for how long. It is based on the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021). The German version is authoritative.
Contents: Controller · Website · Videos and maps · Class booking · WhatsApp groups · Photos and videos · Newsletter · Contact · Social networks · Your rights
Controller
The controller is Tanzschule Cuban Salsa Iacobucci Jean-Quartier Mayer OG, Waltendorfer Hauptstraße 18a, 8010 Graz, Austria, e-mail
A data protection officer is not required by law and has not been appointed. For any questions about data protection, please use the contact details above.
Visiting this website
Hosting and server logs: This website is hosted by helloly GmbH in Linz, Austria. When a page is accessed, the server processes technically necessary data: IP address, date and time, page accessed, amount of data transferred, browser and operating system, and the previously visited page. This data is used to operate the website securely and reliably and to fend off attacks (Art. 6 (1) (f) GDPR). We do not use it for any other purpose and do not combine it with other data.
Cookies: Without your consent we only set technically necessary cookies: a session cookie that is deleted when you close your browser, and cookies that store your choice in the cookie notice with a random identifier for 12 months (§ 165 (3) TKG 2021, Art. 6 (1) (f) GDPR). We also keep your choice (selected categories, time and this identifier) for up to three years as proof of your consent (Art. 7 (1) and Art. 6 (1) (c) GDPR); we also count how often the cookie notice was shown, accepted or declined, without reference to you personally. We do not use analytics, tracking or advertising cookies or any web analytics service.
Fonts: The fonts of this website are embedded in the page. No connection to Google Fonts or other providers is made for them.
Search: Search terms you enter are only processed to show you the results.
Links: Links to other websites, for example to Facebook, Instagram, WhatsApp or Google Maps route planning, are plain links. Data is only transferred to the respective provider when you click such a link; the pages open in a new window. The respective operator is responsible for the data processing there.
Embedded content: YouTube videos and maps
On several pages we show videos from YouTube (for example on the Dances and Music pages) and maps from OpenStreetMap (for example on the Dates page). This content is only loaded once you consent: in the cookie notice with “Accept all”, or with “Save selection” for the category “Videos” (YouTube) or “Maps” (OpenStreetMap); the two categories can be chosen separately and are not pre-ticked. With “Necessary only” you decline; the website then blocks any connection to these providers and no data is transferred to them. In place of every video and map you will then see a box. Clicking it is not yet consent: it opens the cookie notice right there, and the content only loads once you consent to the respective category there.
By giving your consent you agree to your browser connecting to the respective provider and transmitting in particular your IP address, browser data and the page accessed; the provider may use cookies or similar technologies (Art. 6 (1) (a) GDPR, § 165 (3) TKG 2021). Your consent applies to the selected category across the whole website for 12 months. You can change or withdraw it at any time via “Cookie settings” with the cookie symbol at the bottom of every page or here: open cookie settings.
YouTube: We embed the videos in privacy-enhanced mode (youtube-nocookie.com). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission). Privacy policy: policies.google.com/privacy
OpenStreetMap: OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. There is an adequacy decision of the European Commission for the United Kingdom. Privacy policy: osmfoundation.org/wiki/Privacy_Policy
Class booking and participation
You book a class by transferring the class fee and sending us an e-mail with the details of all participants. For this we process first and last name, mobile number, e-mail address, the classes you would like to attend, for your first booking the person who recommended us, and the payment details of your transfer (name, amount, date, bank account). The purpose is to run your classes and events, including participant lists, payment control and referral benefits (Art. 6 (1) (b) GDPR), and to comply with tax and commercial law obligations (Art. 6 (1) (c) GDPR). Without this information we cannot process your booking.
We keep participant lists and contact details in our own administration software on a server in our office and in Microsoft 365 (see “Contact”). Recipients are our bank, as far as payments are concerned, and our tax advisor. Your data is not sold or passed on for third-party advertising.
Retention: We store contact and booking data for as long as you dance with us and for up to three years afterwards, so that we can settle questions and claims arising from your bookings (§ 1486 ABGB). Accounting records are kept for seven years (§ 132 BAO, § 212 UGB). The data is then deleted.
WhatsApp groups
There is an announcement group for news about classes and parties, and a separate group for each class with class information and class videos. Joining is voluntary (Art. 6 (1) (a) GDPR) and you can leave a group at any time. In a group, the other members can see your phone number, profile name and profile picture. If you do not want to use WhatsApp, please let us know.
The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland. Data may be transferred to Meta Platforms Inc. in the USA; Meta is certified under the EU-US Data Privacy Framework. WhatsApp’s own privacy policy applies to its processing.
Photos and videos
Photos and videos are taken in classes, workshops and at parties, for example class videos of the figures learned. We only share class videos in the WhatsApp group of the respective class. We only publish recordings in which you can be recognised on this website, on YouTube or in social networks with your consent (Art. 6 (1) (a) GDPR). You can withdraw your consent at any time; we will then remove the recording from our publications.
Newsletter
With every class booking we add the e-mail address given in the booking to our newsletter; we point this out when you book. We use the newsletter to announce short-notice changes to the class schedule, such as cancelled or rescheduled lessons (Art. 6 (1) (b) GDPR, performance of your booking), and our own classes, workshops and parties (§ 174 (4) TKG 2021, Art. 6 (1) (f) GDPR). Anyone who subscribes without a booking receives it on the basis of their consent (Art. 6 (1) (a) GDPR, § 174 TKG 2021). For this we process your e-mail address and name.
We use Brevo (Sendinblue SAS, 17 rue de Salneuve, 75017 Paris, France) as a processor for sending it. Brevo technically records whether a newsletter was delivered and opened and which links were clicked.
You can object when booking and unsubscribe free of charge at any time via the unsubscribe link in every newsletter or by e-mail to
Contact by e-mail, phone and messenger
If you contact us by e-mail, phone or messenger, we process your details to answer your request (Art. 6 (1) (b) GDPR for requests about a booking, otherwise Art. 6 (1) (f) GDPR).
Our e-mail is operated by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, as a processor (Microsoft 365). A transfer to Microsoft Corporation in the USA is possible; Microsoft is certified under the EU-US Data Privacy Framework, and standard contractual clauses also apply.
Requests that do not lead to a booking are deleted no later than twelve months after the last message.
Our presence on social networks
We run pages on Facebook and Instagram and a YouTube channel. When you visit them or interact with us there, the operators process your data under their own privacy policies. For the page statistics (“Insights”) on Facebook and Instagram we are joint controllers with Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland (Art. 26 GDPR); Meta has taken on primary responsibility for this. We only receive aggregated statistics.
No automated decisions
We do not make decisions based solely on automated processing and do not carry out profiling within the meaning of Art. 22 GDPR.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7 (3) GDPR). Simply contact us at
If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40 bis 42, 1030 Vienna,
Last updated: 09.2026

