Legal

Privacy Policy

In accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), Future Dance School informs you about how your personal data is processed.

1. Data controller

  • Identity: Ariadna Aránega Uyá (Future Dance School)
  • Tax ID (NIF): 53320090H
  • Address: Carrer Arizala 18, 08028 Barcelona, Spain
  • Contact email: info@futuredanceschool.com

2. Data we process and why

2.1 Orientation form

When you fill in the orientation or contact form on the website, we process the following data: reason for your enquiry, full name, date of birth, phone number, email address, whether you have previous dance experience and the message you write to us.

Purpose: to guide you towards the class that best suits you and to contact you to answer your enquiry.

Legal basis: the explicit consent of the data subject or, where the data subject is under 14, of their parent or legal guardian (art. 6.1.a GDPR and art. 7 LOPDGDD). Consent is collected through an unticked checkbox on the form. You can withdraw it at any time without affecting the lawfulness of prior processing.

Data of minors: the form may receive data about minors. If the minor is under 14, the form may only be submitted by the person holding parental authority or guardianship, who confirms having that capacity and consents to the processing for the stated purpose.

2.2 Shop and WhatsApp contact

Shop products are requested via WhatsApp and collected and paid for at the school. We do not take online payments or ship orders. When you write to us on WhatsApp we process your name, phone number and the content of your message. WhatsApp is a service of WhatsApp Ireland Limited (Meta group), which acts as an independent controller of the data you process in its app under its own privacy policy.

Purpose: to answer your enquiry and manage the reservation and collection of your order.

Legal basis: pre-contractual measures and performance of a sales contract (art. 6.1.b GDPR).

2.3 Form spam protection

To prevent automated submissions, the form uses Cloudflare Turnstile, which analyses technical browser and device signals (such as your IP address) without setting advertising cookies. Legal basis: legitimate interest in protecting the form against abuse (art. 6.1.f GDPR).

2.4 Web analytics

If you accept analytics cookies, we use Google Analytics 4 to obtain aggregated statistics about how the site is used (pages visited, traffic source, session time). This analytics data does not identify you individually. The legal basis is your consent (art. 6.1.a GDPR), which you can withdraw at any time through the "Cookie settings" link in the footer.

3. Retention period

  • Orientation form, people who do not become students: up to 12 months from receipt of the form, after which the data is securely deleted.
  • Orientation form, people who start a class: for the duration of the relationship with the school and, once it ends, for as long as required to meet applicable legal obligations.
  • Shop order data: for the period required by tax and commercial law (at least 5 years from the sale).

4. Data processors

Future Dance School works with the following providers, which may process data on its behalf under contract and under the conditions required by the GDPR:

  • Netlify, Inc. (USA): website hosting and delivery. Processes technical connection data (IP address, browser) needed to serve the pages.
  • Supabase, Inc. (USA): database storing orientation form submissions. Servers in the European Union (Ireland).
  • Resend, Inc. (USA): sending the internal email that notifies the school of each new form submission.
  • Cloudflare, Inc. (USA): Turnstile spam protection for the form.
  • Sanity AS (Norway): content management system and image delivery network. It does not receive the data you enter in the form.
  • Google LLC (USA): Google Analytics 4 and the Google Maps map on the home page, only if you accept them. Google's privacy policy: policies.google.com/privacy.

International transfers of data to providers located in the USA rely on the EU-US Data Privacy Framework or, failing that, on the standard contractual clauses approved by the European Commission. We do not share your data with any third parties other than those listed, except where required by law.

5. Your rights

You can exercise the following rights at any time by writing to info@futuredanceschool.com and stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it.

  • Access: find out what personal data we hold about you.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion of your data when it is no longer needed or you withdraw consent.
  • Objection: object to processing in the cases provided for by law.
  • Portability: receive your data in a structured, commonly used format.
  • Restriction: request that processing be restricted in certain circumstances.

If you believe your data is not being processed in accordance with the law, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

6. Security

Future Dance School applies technical and organisational measures to protect your personal data against unauthorised access, loss or alteration, including role-based database access (Row Level Security), encrypted data transmission (HTTPS/TLS), spam protection on the form and access to management systems limited to authorised people.

In the event of any discrepancy between language versions, the Spanish version shall prevail.

Last updated: September 2026