Privacy policy

1. Data controller

• Controller: Escola de Dansa Maribel Bover (Maria Isabel Bover Viñals)
• Tax ID (NIF): 40277730S
• Address: Rda. Pare Claret 30, baixos, 17002 Girona (Spain)
• Authorised school of the Department of Education, Generalitat de Catalunya (code 17006186)
• Phone: +34 647 70 85 62 (mobile and WhatsApp)
• Contact and privacy email: dansamaribelbover@gmail.com (channel to exercise your data protection rights).

2. What data we collect

• Enrolment and contact data: student's and parent/guardian's full name, date of birth, class/group, phone, email, address.
• Bank details: account holder and IBAN (SEPA direct debit mandate).
• Image and voice: photographs and videos of school activities (only for those who ticked YES on Form 2).
• Communications: WhatsApp number and email (only for those who ticked YES on Form 2).
• Browsing data: this website uses no analytics of its own and no measurement cookies. The hosting server (GoDaddy) records technical access data (such as the IP address) for service operation and security purposes. Pages with videos (YouTube) may set third-party Google cookies when played (see section 8).

3. What we use them for and on what legal basis

Purpose	Legal basis (GDPR)
Managing enrolment, the academic relationship, activities and administrative communications	Performance of the educational services contract (art. 6.1.b)
Collecting fees by SEPA direct debit	Performance of the contract + consent to the SEPA mandate (art. 6.1.b and 6.1.a)
Publishing image/voice/work on the school's channels (web, Instagram, YouTube, magazines/posters)	Explicit consent on Form 2 (art. 6.1.a); minors: parental authorisation + co-consent from age 14
Sending notices by WhatsApp/email/phone	Consent on Form 2 (art. 6.1.a), revocable at any time
Meeting tax and administrative obligations	Legal obligation (art. 6.1.c)

Consent for image and communications may be revoked at any time, in writing, at the school office or by email (section 1), attaching an ID copy. Revocation has no retroactive effect.

4. How long we keep it

• For as long as the relationship with the school lasts and, afterwards, the applicable legal periods (tax, banking and potential claims).
• SEPA mandates: while in force; they expire after 36 months without collections.
• Images and videos: until consent is revoked; upon revocation the school removes them from its digital channels within one month (printed publications already distributed cannot be withdrawn).

5. Who we share it with

• Your bank and the creditor's bank (CaixaBank) for collecting SEPA direct debits.
• Google (Gmail) for the school's email, processed in the USA (EU–U.S. Data Privacy Framework, DPF).
• GoDaddy, the website hosting provider : all traffic to this website passes through its systems (see section 2).
• Meta Platforms (WhatsApp), processed in the USA (EU–U.S. Data Privacy Framework, DPF), only for those who accepted the Form 2 communications.
• Google (YouTube), only when you play embedded videos on this website.
• Public authorities where legally required.
• The school does not use an external bookkeeping service: administration is handled directly by the school.
• We never sell data or share it for commercial purposes.

6. Your rights and how to exercise them

You may exercise your rights of access, rectification, erasure, objection, restriction and portability in writing to the address or email in section 1, attaching a copy of your ID. We reply within the legal period of one month.

You may also complain to the Spanish Data Protection Agency (www.aepd.es).

7. Minors

• Under 14: consent is given by the parent or legal guardian.
• 14 to 17: signed by both the minor and the parent/guardian.
• 18 and over: the student signs.
• We never publish photos of minors with full surnames on open channels (initials only, if authorised).

8. Cookies on this website

This website uses no first-party or third-party cookies for analytics or advertising, and its fonts are hosted on the site itself (no external font servers). Only one technical language cookie is set, exempt from consent.

YouTube videos embedded on some pages (press) only load when you click them and may set third-party Google cookies when played. If you prefer not to receive them, you can watch the videos directly on YouTube or block third-party cookies in your browser.

9. Changes to this policy

We will update this policy whenever our processing or the law changes, stating the revision date.

Last reviewed: 5 October 2026.