Privacy Policy

Who We Are & Data Controller

Where to dance Salsa helps dancers find social dance events around the world. The controller responsible for the processing of personal data, together with the full provider identification (name and postal address), is set out in our Legal Notice. Because our site addresses users in the European Union, we apply GDPR standards to our processing regardless of where the operator is based.

For any privacy-related questions, contact us at [email protected].

What Data We Collect

We only collect data that is necessary to provide our services:

• Contact form: Your name, email address, and message, so we can respond to your inquiry.
• Event submissions: Event details (name, city, date, venue, dance styles, link) and optionally your contact email, so we can review and publish events.
• User accounts: If you create an account (for example as an organizer), we process your email address, login credentials and the profile data you provide (such as display name, organizer name, website, social links and avatar), so we can operate your account and, where you choose, publish your public organizer profile.
• Technical data: When you visit the site, our hosting provider processes technical data such as your IP address and request metadata to deliver the site securely (see Third-Party Services below).

How We Use Your Data

• To respond to your contact form messages
• To review and publish dance events you submit
• To understand how visitors use our site (via analytics) so we can improve it

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Legal Basis for Processing (GDPR Art. 6)

Where the GDPR applies, we rely on the following legal bases:

• Consent (Art. 6(1)(a)): for analytics, which run only after you accept them via our cookie banner. You can withdraw consent at any time with effect for the future.
• Contract / pre-contract (Art. 6(1)(b)): to operate user accounts and organizer profiles you sign up for.
• Legitimate interests (Art. 6(1)(f)): to respond to contact-form messages, review and publish submitted events, and keep the site secure and functional.

Cookies & Analytics

We use the following technologies that may store data on your device:

• Cloudflare Zaraz: Helps us understand how visitors interact with our site. Analytics data is only collected after you consent via our cookie banner and is processed at the edge by Cloudflare for better performance and privacy. We track: page views, search queries (to understand which cities are in demand), filter usage (day-of-week and city filters), event link clicks, venue outbound link clicks (website, Instagram, Facebook), map marker interactions, content section visibility (scroll depth), share button usage, and form submissions. We do not track personal identifiers, only aggregated interaction data to improve the event discovery experience.
• Functional cookies: We store your sidebar preference so the site remembers your layout choice.

For more details, see our Cookie Policy.

Third-Party Services

We use the following third-party services to operate our site:

• Supabase: Our database provider, which stores event data and user submissions. Supabase Privacy Policy
• Cloudflare: Our hosting provider, which delivers our website to you. Cloudflare may process certain technical data (like IP addresses) for security and performance. Cloudflare Privacy Policy
• Cloudflare Zaraz: Analytics management, loading Google Analytics 4 at the edge for better performance and privacy. Cloudflare Privacy Policy

International Data Transfers

Some of our providers (including Supabase, Cloudflare and Google Analytics via Cloudflare Zaraz) may process data on servers outside the European Economic Area, including in the United States. Where that happens, the transfer is safeguarded by the appropriate mechanisms under the GDPR, such as the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework. You can request more information about these safeguards using the contact details above.

Data Retention

We keep your data only as long as necessary:

• Contact messages: Delivered via email and not stored in our database.
• Event submissions: Kept as long as the event is active or relevant.

Your Rights

Depending on your location, and under the GDPR, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Request restriction of processing
• Object to the processing of your data
• Data portability (receive your data in a portable format)
• Withdraw consent at any time, with effect for the future, where processing is based on consent

To exercise any of these rights, email us at [email protected].

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence, place of work or the place of the alleged infringement.

Children's Privacy

Our site is not directed at children under the age of 16. We do not knowingly collect personal data from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.