Privacy policy
We take the protection of your personal data seriously. This policy explains which data we process when you visit our website or use its forms, for what purpose, on which legal basis, for how long, and which rights you have under the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Greek Law 4624/2019.
1. Controller
Πολιτιστικός Σύλλογος χορού
Just Dance School
Δημοσθένους & Σπετσών, 24100 Καλαμάτα, Greece
Tel. +30 2721 550156
Email: justdanceacademyklmt@gmail.com
Our business is not required to appoint a data protection officer. For any matter concerning your personal data, please use the contact details above.
2. Visiting the website – hosting and technical data
This website is hosted and delivered through the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (EU group company: Cloudflare Portugal, Unipessoal Lda., Largo Rafael Bordalo Pinheiro 29, 1200-369 Lisboa, Portugal), which acts as a processor on our behalf. To display the pages and to protect against attacks and abuse, Cloudflare automatically processes technical data about your visit: IP address, date and time, requested page, browser and operating system type, and the referring website.
The legal basis is our legitimate interest in a secure, stable and fast website (Article 6(1)(f) GDPR). Cloudflare keeps this data in its logs for a limited period; our business has no access to individual log entries and does not combine them with other data. Cloudflare may process data in data centres inside and outside the EU, in particular in the USA; the transfer is based on Cloudflare’s certification under the EU-U.S. Data Privacy Framework and, as a fallback, on the European Commission’s standard contractual clauses (Articles 45 and 46 GDPR). More: Cloudflare privacy policy.
3. Cookies and third-party tools
This website does not use cookies, web analytics or advertising trackers. Fonts and all files of the site are served from our own hosting. A cookie banner and your consent are therefore not required. Only the embedded third-party content described below connects to external servers.
YouTube videos: this website embeds videos via the domain youtube-nocookie.com (privacy-enhanced mode) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4. The player is loaded only when a video comes into view or you start it. Your browser then connects to Google servers and technical data is transmitted (IP address, date and time, referring page, device details). In this mode Google does not set cookies for personalised advertising; if you are signed in to your Google account, Google may link the visit to your account. The legal basis is our legitimate interest in presenting our work with video (Article 6(1)(f) GDPR). Google may also process data in the USA; the transfer is based on the EU-U.S. Data Privacy Framework and standard contractual clauses. More: Google privacy policy.
4. Appointment form
You can use the appointment form to send us a request for an appointment. We process the details you enter: date, time, the service you would like, name, phone number and/or email address and, optionally, your preferred team member and your notes. The purpose is to review your request, confirm or decline it, and contact you about the appointment. A request is not a confirmed appointment; your appointment is booked only once we have confirmed it.
Legal basis: the processing is necessary to take steps at your request prior to entering into a contract and to carry it out (Article 6(1)(b) GDPR). By ticking the box in the form you confirm that you have read this policy. If your notes contain health-related information (for example allergies or skin sensitivities), we process it solely to handle your request, based on the explicit consent you give by entering it (Article 9(2)(a) GDPR); providing it is optional.
Retention: appointment requests are deleted no later than 3 months after the appointment date, unless the law requires longer retention.
5. Contact form, email and phone
When you send us a message through the contact form or by email, or call us, we process your name, the contact details you provide (email and/or phone) and the content of your message in order to answer your request. Legal basis: handling your request where it concerns an appointment or another transaction with us (Article 6(1)(b) GDPR) and otherwise our legitimate interest in replying to people who contact us (Article 6(1)(f) GDPR). Retention: messages are deleted no later than 6 months after the matter has been dealt with, unless the law requires longer retention.
6. How we receive form messages
Form messages are processed directly by our website, which runs on the network of Cloudflare, Inc. (see the hosting section; Cloudflare acts as a processor under a data processing agreement, Article 28 GDPR). When you submit a form, its contents are transmitted in encrypted form, forwarded immediately to our business by email and not stored permanently on the website. To prevent spam we use Cloudflare Turnstile, which processes technical data about the submission (IP address, browser characteristics) without tracking cookies, based on our legitimate interest in a secure website (Article 6(1)(f) GDPR). For transfers outside the EU, the information given for Cloudflare in the hosting section applies. More: Cloudflare privacy policy.
7. Links to other websites
This website contains links to Instagram, Facebook and Google Maps, for example for directions or photos. We do not embed content from these services, and no data is passed to them before you click a link. Once you leave our site, the terms and privacy policy of the respective provider apply.
8. Recipients, transfers and automated decisions
The only recipients of your data are the providers named above (hosting, form delivery) and our email provider, all of which are processors bound by contract. We do not sell your data or share it for advertising purposes. We make no decisions based solely on automated processing and do not create profiles.
9. Security
The connection to this website and the submission of forms are encrypted (HTTPS/TLS). We take reasonable technical and organisational measures to protect data against loss, misuse and unauthorised access.
10. Your rights
You have the right of access to your data (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and the right to object to processing based on legitimate interests (Article 21). Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal. To exercise your rights, contact us using the details in section 1.
You also have the right to lodge a complaint with the supervisory authority: Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), 1-3 Kifisias Avenue, 115 23 Athens, Greece, tel. +30 210 6475600, email contact@dpa.gr, www.dpa.gr.
11. Provision of data and minors
Providing your data is voluntary; without the necessary details, however, we cannot review an appointment request or answer a message. The forms are intended for adults. We do not knowingly collect data from children under 15; if we become aware of such data, we delete it.
12. Changes
This policy may be updated, for example when the services we use or the law change. The version published on this page always applies. In case of discrepancies between language versions, the Greek version prevails.
Last updated: