Privacy Policy

How we handle your data

1. Data Protection at a Glance

We take the protection of your personal data very seriously. This statement informs you about what data is collected when visiting this website, what we use it for, and what rights you have.

The most important thing first: We do not use advertising or analytics services. There is no access analysis and no profiling. Fonts and symbols are hosted on our own server; when calling up the page, no data is transferred to Google Fonts or similar providers. External content such as maps is only loaded after your explicit consent.

2. Responsible Body

The body responsible for data processing on this website is:

RITMICA DENA
Estibaliz Delgado Romera
[Street and House Number]
20253 Hamburg
Germany
Phone: +49 170 1406192
E-Mail: info@ritmicadena.de

We are not required to appoint a data protection officer according to § 38 BDSG. If you have any questions regarding data protection, please contact the address mentioned above.

3. Your Rights

You have the following rights regarding us:

  • Information (Art. 15 GDPR) — which data of yours we have stored
  • Rectification (Art. 16 GDPR) — to have incorrect data corrected
  • Erasure (Art. 17 GDPR) — as long as no retention obligation prevents it
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR) — handing over in a common format
  • Objection (Art. 21 GDPR) — against processing based on legitimate interests
  • Revocation of consent (Art. 7 para. 3 GDPR) — at any time with effect for the future

An informal e-mail to info@ritmicadena.de is sufficient. You can also change or withdraw your given consent for cookies and external content at any time via the Cookie Settings link at the end of each page.

Regardless of this, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), particularly in the Member State of your habitual residence. The authority responsible for us is:

The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Straße 22, 20459 Hamburg
datenschutz-hamburg.de

4. Visiting the Website and Server Logs

Each time the website is accessed, your browser transmits technically necessary information which our hoster stores in log files:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the retrieved file
  • Data volume transferred and success status message
  • Previously visited page (referrer), if transmitted
  • Browser type, version, and operating system

Purpose and legal basis: Processing serves the technical operation, stability, and security of the website. It is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR. Combining these data with other data sources or evaluating them for advertising purposes does not take place.

Storage duration: [Add hoster specification, typically 7 to 14 days.]

5. Hosting

This website is operated by an external service provider who provides the servers and processes data on our behalf:

[Add name and full address of the hoster]

A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider. The server is located in Germany or within the European Union. The legal basis is Art. 6 para. 1 lit. f GDPR — our legitimate interest in a secure and reliable operation.

6. Cookies and Consent

Cookies are small files stored on your device. We exclusively use the following:

  • Session cookie (PHPSESSID) — keeps your inputs together during a visit and protects forms against misuse. It is deleted as soon as you close your browser.
  • Consent cookie (rcms_consent) — saves your decision regarding external content so you are not asked again on every visit. Duration: 182 days.

Both cookies are strictly necessary for the operation of the website and therefore do not require consent pursuant to § 25 para. 2 TDDDG. The legal basis for the associated data processing is Art. 6 para. 1 lit. f GDPR.

Proof of your consent: If you grant or revoke consent for external content, we log the time, selected categories, a random identifier, and your IP address in shortened and encrypted form. This serves solely as proof pursuant to Art. 7 para. 1 GDPR. We delete these proofs after three years.

No cookies are used for analytics, advertising, or recognition purposes.

7. Maps (Google Maps)

On individual pages, we embed a map to show you our training locations. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The map is not loaded unasked. Until you give your consent, you will only see a placeholder with the address and a link for route planning; there is no connection to Google whatsoever. The map is only loaded when you click on "Load content". In doing so, Google receives your IP address and other browser details and may set cookies. Transmission to the USA is possible; Google relies on standard contractual clauses and is certified under the EU-US Data Privacy Framework.

Legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. You can revoke it at any time via the cookie settings at the bottom of the page. Further information: policies.google.com/privacy.

8. Contact and Forms

This website provides a contact form and a trial training registration form. The information entered there is transmitted to us and saved for the purpose of processing your request.

Processed data: the fields filled out by you — depending on the form, this may include name, e-mail address, phone number, child's name and age, prior experience, and your message. Mandatory fields are marked; all other details are voluntary.

Purpose and legal basis: Processing of your request is based on Art. 6 para. 1 lit. b GDPR if it is directed at the conclusion or performance of a contract — such as registration for trial training. In all other cases, we base it on our legitimate interest in answering inquiries pursuant to Art. 6 para. 1 lit. f GDPR.

Protection against misuse: To detect automated submissions, each form contains a field invisible to you and a check of the completion time. Both work without a captcha and without integrating third-party services.

Storage duration: We automatically delete form submissions after 180 days, unless there is a statutory retention obligation or a contractual relationship has arisen from it. Of course, you can also request deletion earlier.

If you contact us via e-mail, phone, or WhatsApp, the corresponding rules apply to the data generated in the process.

9. Contact via WhatsApp

On our website you will find a link to WhatsApp. If you click on it, you will leave our website; processing is then subject to the terms of WhatsApp Ireland Limited. We have no influence on this and recommend transmitting sensitive information exclusively via e-mail or phone. Further information: whatsapp.com/legal/privacy-policy-eea.

10. E-Mail Dispatch

To deliver form inquiries and system messages, we use our own mail server or the outgoing mail server of our provider. The contents transmitted in the process do not leave the data processing framework. Please note that the transmission of unencrypted e-mails may generally exhibit security gaps.

11. Photos and Videos

On this website we publish recordings from training, performances, and competitions. Individuals are shown only with consent, and in the case of minors, with the consent of their legal guardians. The legal basis is Art. 6 para. 1 lit. a GDPR in conjunction with §§ 22, 23 KunstUrhG.

You can revoke given consent at any time for the future. To do so, send an informal message to info@ritmicadena.de; we will then remove the relevant recordings from the website promptly.

12. Data Security

This website is delivered exclusively via an encrypted connection (TLS/HTTPS), recognizable by the lock symbol in your browser. Access to the administrative area is secured with strongly hashed passwords; failed login attempts are logged for a maximum of seven days to make attacks more difficult. We record changes in the administrative area in a log for half a year.

13. No Automated Decision-Making

Automated decision-making including profiling according to Art. 22 GDPR does not take place.

14. Changes to This Statement

We will adapt this privacy policy as soon as changes to the website or legal requirements make it necessary. The version published here applies in each case.

Status: August 2026