Privacy Policy

1. Who processes your data

Aleks & Dasha, a dance school with a studio at R. de Nossa Sra. de Fátima 104, 4050-425 Porto, Portugal.

For any privacy question, write to us@aleksydasha.com.

2. What we collect

Through the contact form, we receive what you type into it: your name, email address, the subject you pick and the text of your message. If you book a trial class, also the style and the class you prefer.

If you log in to the student area, we receive from Telegram your numeric identifier, your name and your username. We also keep the classes you book, the attendance the school records in each class, the events you went to with the school, the level we assign you in each style and the school's internal notes about your progress. Your Telegram profile photo is not stored.

The student area also holds the videos recorded in class, which used to be shared in the school's Telegram group. You may appear in them dancing.

If you were in the Telegram group of an event we went to with the school, such as a trip to a congress, we keep your numeric Telegram identifier in that group's list, even if you never logged in to the student area. We keep no names in that list, and we do not keep who posted each video. The student area holds the videos shared in those groups, where you may also appear dancing, and records the school's decisions to give an account access to an event's videos or remove it.

If you reacted in the school's Telegram group to the daily class announcements posted between 1 October 2025 and 11 October 2026, we keep your numeric Telegram identifier and the days you reacted, even if you never logged in to the student area. We keep neither your name, nor the reaction you chose, nor the text of the announcement.

If you sign up for the school's trip to an event, or the school signs you up, we keep that sign-up: the amount you owe, the payments the school records by hand (amount, date and method, such as MB WAY or bank transfer), whether you already have the festival ticket, whether you dropped out, and an internal note from the school. The student area does not take payments or store bank details.

We do not ask for a postal address, phone number, date of birth or payment details. We do not collect health data or any other special category of data.

3. What it is used for

Form messages are used solely to reply to you. We do not use this data for advertising, we do not add you to any newsletter and we do not build profiles.

The legal basis is your consent, given by ticking the box on the form, under Article 6(1)(a) GDPR. You can withdraw it at any time, without giving a reason, by writing to us@aleksydasha.com.

Student area data is used to manage your classes: confirming you are a student at the school, knowing who is coming to each class and giving you access to content for your level. The legal basis is the performance of the agreement between you and the school, under Article 6(1)(b) GDPR.

From your attendance, your bookings and the events you went to with the school we work out three numbers: the classes you attended, your attendance rate and your points. Only you can see them, on your dashboard, and the school, on your record. There is no ranking between students and the numbers are not shown to anyone else. Nor are they stored separately: they are calculated on the spot from those records. The legal basis is the same as for the rest of the student area data.

Before 12 October 2026 the school did not take attendance. For those months, each day you reacted to that day's class announcement counts as a class, in the classes you attended and in your points: it is the only information we have on who came to class. It is an estimate, and you can see each of those days on your points page. It does not count towards your attendance rate, as there were no bookings yet. The legal basis is our legitimate interest in recognising those who already came to class before there was a student area, under Article 6(1)(f) GDPR. You can object: tell us and we delete those days that same day.

Class videos are there so students can review what they learned. Only students accepted by the school can see them, after logging in with Telegram, and they are neither public nor indexed. If you appear in a video and would rather it were taken down, tell us and it stops being visible that same day.

On the “My moves” page you can mark, for each move, how it is going for you, from 1 to 4. Only you can see your marks. The school only sees totals per move (how many students marked it and how many at each level), never who marked what. You can also save the combos from the class videos and write down moves, combos or anything else of your own, with notes: only you see those, and the school does not even see totals. If you take a move off your list, or delete one you saved or wrote, it is deleted there and then. The legal basis is the same as for the rest of the student area data.

An event's videos can only be seen by whoever was in that event's Telegram group, whoever signed up for the trip and whoever the school authorises by hand: being an accepted class student is not enough. The list of identifiers is used for this alone, and for the school to see who was in the group when it records who went to the event. Being in the group gives no points: only who the school records counts. The legal basis is our legitimate interest in giving the people who were at the event the videos shared there, under Article 6(1)(f) GDPR. You can object: tell us and we remove your identifier from the list, or a video you appear in, that same day.

Trip sign-ups and payments are used to organise each trip and to know how much each person still has to pay. You see your own figures on the event page; the school sees everyone's, and only the school sees the internal note. The legal basis is the performance of the agreement between you and the school for that trip, under Article 6(1)(b) GDPR.

4. Who has access

Form messages are delivered through Formspree, a form service based in the United States, acting as our processor and forwarding them to our inbox. Formspree's privacy policy is at formspree.io/legal/privacy-policy.

Logging in to the student area is done with Telegram (Telegram Messenger Inc.). When you use it, Telegram learns that you logged in to our site, under its own privacy policy at telegram.org/privacy. We have no access to your chats or your contacts.

The site and the student area are hosted on servers of Hetzner Online GmbH, in Germany, within the European Union. Student area backups are stored with Backblaze, Inc., in a data centre in the Netherlands, also within the European Union.

We do not sell, rent or share your data with anyone else. We would only hand it to an authority if the law required it.

5. How long we keep it

We keep your message for as long as the conversation lasts and for up to 24 months afterwards, to follow up on enrolments, classes or events left open. After that, we delete it.

If you ask us to delete it sooner, we delete it.

Student area data is kept for as long as you are a student. When you leave the school, or if you ask, we delete your account together with your bookings, attendance, event trips, levels, marked, saved and written moves and trip sign-ups, including the payments recorded. Backups are made daily and older ones are deleted after 30 days.

An event's list of identifiers is rebuilt every time we update it from the group: anyone who has left the group leaves the list too.

The days you reacted to the class announcements are deleted with your account, or when you ask us. For people who never logged in to the student area, they stay until you ask us to delete them.

6. Cookies and measurement

The public pages of this site set no cookies of their own. No Google Analytics, no Tag Manager, no social media pixels, no other measurement or advertising tool of ours. Without an action from you, nothing is stored in your browser.

Event pages with tickets on sale carry a ticket shop from the go&dance platform, which only loads after you click the buy tickets button. From that click on, go&dance stores cookies and uses Google measurement inside that frame, under the platform's own privacy policy at goandance.com. Until you click, none of it loads.

On the public pages, the language lives in the address itself, not in a cookie.

The student area, at aleksydasha.com/aluno/, uses cookies that only exist if you log in there. Two are strictly necessary: the session (sessionid), which keeps you logged in for up to 90 days, and protection against forged requests (csrftoken). The third (lingua) is only created when you choose a language, and stores that choice. None is used for measurement or advertising. The login page loads Telegram's login button from telegram.org.

The server records, as any web server does, the IP address and time of requests, in technical logs used only for security and diagnostics and deleted after 14 days.

7. Your rights

You have the right to access your data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. Write to us@aleksydasha.com and we will answer within one month.

If you feel we did not handle it properly, you can complain to the Portuguese data protection authority, Comissão Nacional de Proteção de Dados, at cnpd.pt.

8. Security

The site is served over HTTPS only, with traffic encrypted between your browser and the server. Server access is by cryptographic key only.

The student area has no passwords: your identity is confirmed by Telegram, with a signature our server checks on every login.

9. Changes to this policy

If this policy changes, the date at the top changes with it. There is no version history: the version published on this page is the one that applies.