Privacy Policy

Last updated: 10 September 2026.

1. Who we are

This Privacy Policy explains how Monika Masárová, trading as Salsacreed (“Salsacreed”, “we”, “us” or “our”), processes personal data when you interact with us or use our services.

Salsacreed provides dance classes, courses, workshops, parties and other dance-related activities in Spain and Gibraltar.

For data protection purposes, Monika Masárová is the data controller responsible for the processing described in this Privacy Policy.

Business name: Salsacreed
Legal name: Monika Masárová
Address: Urbanización El Paraíso, 26
Email: info@salsacreed.com

This Privacy Policy is intended to provide information required under applicable data protection legislation, including the EU General Data Protection Regulation (EU) 2016/679 (“EU GDPR”), applicable Spanish data protection legislation including Organic Law 3/2018 (LOPDGDD), the Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE) where applicable, and the Gibraltar GDPR and applicable Gibraltar data protection legislation.

The legislation applicable to a particular processing activity may depend on where you are located and the circumstances in which your personal data is processed.

2. What personal data we collect

We only collect information that is reasonably necessary for our business and the services we provide.

Depending on how you interact with Salsacreed, this may include:

Contact and identification information

  • name;

  • email address;

  • telephone or WhatsApp number;

  • country, town or general location where reasonably necessary for organising our services.

Registration and class information

When you register for or participate in a Salsacreed class, course, workshop or event, we may collect:

  • the class, course or event you have selected;

  • dance style and/or level;

  • booking and attendance information;

  • relevant communications and enquiries;

  • information needed to administer your participation.

Payment information

When you make a purchase, we may process information relating to the transaction, including:

  • the product or service purchased;

  • amount paid;

  • date of payment;

  • payment status;

  • transaction or payment reference.

Payments may be processed by third-party payment providers such as Stripe.

Salsacreed does not normally receive or store your complete payment-card details.

Marketing preferences

Where you choose to receive communications from us, we may record:

  • your email address;

  • your telephone/WhatsApp number;

  • your communication preferences;

  • your marketing consent or preference;

  • information needed to record or honor an unsubscribe or opt-out request.

Communications

We may retain communications you send to us, including enquiries and customer-service messages, where reasonably necessary to provide our services, administer our business, resolve disputes, establish or defend legal claims, or comply with legal obligations.

3. How we collect your personal data

We may collect personal data:

  • when you complete a registration or order form;

  • when you purchase a Salsacreed service;

  • when you subscribe to or request communications from us;

  • when you contact us by email, WhatsApp, telephone or social media;

  • when you attend a Salsacreed class or event;

  • through our website, landing pages and online forms;

  • through payment providers in connection with a transaction; or

  • where another person lawfully provides information on your behalf, such as a parent or organiser.

We may also receive information automatically through cookies and similar technologies when you use our website or online services. See our Cookie Policy for further information.

4. Why we use your personal data

We process personal data for the following purposes.

Providing and administering our services

We use your information to:

  • process registrations and bookings;

  • administer classes, courses, workshops and events;

  • communicate information relating to your booking;

  • manage attendance;

  • respond to enquiries;

  • provide customer support;

  • administer payments and refunds where applicable.

Legal basis: performance of a contract or taking steps at your request before entering into a contract.

Processing payments and maintaining business records

We use relevant information to:

  • process and confirm payments;

  • administer refunds where applicable;

  • maintain accounting and transaction records;

  • comply with tax and other legal requirements.

Legal basis: performance of a contract and/or compliance with a legal obligation.

Communicating important information

We may contact you about matters relating to a service you have purchased or requested, including:

  • booking confirmations;

  • changes to classes or events;

  • cancellations or rescheduling;

  • practical information;

  • administrative matters;

  • customer-service issues.

Legal basis: performance of a contract, legitimate interests and/or compliance with a legal obligation, depending on the circumstances.

Marketing

Where you have requested or consented to receive marketing communications, we may contact you about:

  • Salsacreed classes;

  • courses;

  • workshops;

  • parties and events;

  • new services;

  • offers and promotions.

Where consent is required, we will obtain it separately from this Privacy Policy.

You can withdraw your marketing consent or opt out of marketing communications at any time using the unsubscribe/opt-out method provided or by contacting us.

We may also rely on the applicable existing-customer exception for electronic marketing where permitted by law, including where the relevant conditions under applicable Spanish or Gibraltar legislation are satisfied.

Legal basis: consent and/or legitimate interests where legally permitted.

5. WhatsApp communications

If you provide your telephone number and choose to receive communications through WhatsApp, we may use it to send relevant Salsacreed communications.

Depending on the option you select, these communications may include:

  • class information;

  • booking-related information;

  • event information;

  • reminders;

  • news and promotions.

You can change your communication preference or opt out at any time.

WhatsApp is operated by a third party and may process your information according to its own terms and privacy policy.

Salsacreed does not control how WhatsApp processes information on its own systems.

6. Photography and video

Salsacreed classes, workshops and events may sometimes be photographed or video recorded.

Photographs and recordings may be used for purposes including:

  • Salsacreed social-media content;

  • website content;

  • advertising;

  • promotional materials;

  • showing Salsacreed classes and events to prospective customers.

We will provide appropriate information about photography and video at the relevant time and will respect applicable rights and objections.

If you do not wish to appear in Salsacreed promotional photographs or recordings, you can notify us using the method provided in our communications or by contacting us directly.

We will take reasonable steps to avoid using identifiable images of people who have notified us that they object to promotional use.

Where we specifically select, feature or pose an identifiable individual for promotional material, we will take additional care to ensure that the relevant processing has an appropriate legal basis and complies with applicable image-rights and data-protection requirements.

For children and young people, we will take particular care and obtain any parental or guardian consent required by applicable law.

7. Legal bases for processing

Depending on the circumstances, we process personal data using one or more of the following legal bases:

Contract

Where processing is necessary to provide a service you have booked or requested, or to take steps before entering into a contract.

Legal obligation

Where we are required to process or retain information by law, including applicable tax, accounting or regulatory requirements.

Legitimate interests

Where processing is reasonably necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.

Examples may include administering our business, maintaining security, preventing misuse, communicating with customers, protecting our legal rights and certain forms of marketing or promotional activity where permitted by law.

Consent

Where we specifically ask for your consent and consent is the appropriate legal basis.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing carried out lawfully before withdrawal.

8. Service providers and third parties

Salsacreed uses selected third-party providers to operate our business.

Depending on the service you use, these may include:

Systeme.io

We use Systeme.io for elements of our online registration, forms, landing pages, customer-management and email-marketing systems.

Systeme.io services are provided by ITACWT Limited.

Systeme.io may process personal information submitted through Salsacreed's forms and systems on our behalf and according to the services we configure.

Stripe

We may use Stripe to process online payments.

Stripe processes payment information according to its own privacy and security arrangements.

Salsacreed does not normally receive or store your complete payment-card details.

Zoho Mail

We may use Zoho Mail for business email and related business services.

WhatsApp

We may use WhatsApp to communicate with customers and participants who have chosen or otherwise lawfully use this communication channel.

Other service providers

We may use other providers from time to time for website hosting, IT services, accounting, communications, analytics, advertising, administration or similar business functions.

Where such providers process personal data on our behalf, we will take reasonable steps to ensure that appropriate contractual and security safeguards are in place.

We do not sell your personal data.

9. International transfers

Some third-party providers or their service providers may process personal data outside Spain, Gibraltar or the European Economic Area.

Where personal data is transferred internationally, we will ensure that the transfer is made using an appropriate lawful mechanism under the applicable data-protection legislation.

This may include:

  • an adequacy decision;

  • appropriate contractual safeguards;

  • Standard Contractual Clauses where applicable;

  • applicable Gibraltar transfer safeguards; or

  • another legally recognised transfer mechanism.

10. How long we keep your personal data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

Different categories of information may therefore be retained for different periods.

For example:

  • booking and customer information may be retained for as long as reasonably necessary to administer the customer relationship and deal with potential claims;

  • financial and accounting records may be retained for the period required by applicable law;

  • marketing information may be retained while you remain subscribed or until you opt out, subject to any lawful need to retain evidence of consent or an opt-out;

  • information relating to disputes or legal claims may be retained for as long as reasonably necessary to establish, exercise or defend those claims.

When personal data is no longer required, we will delete it or anonymise it where reasonably practicable.

11. Security

We take reasonable technical and organisational measures to protect personal data against:

  • unauthorised access;

  • unlawful processing;

  • accidental loss;

  • destruction;

  • alteration; and

  • unauthorised disclosure.

Access to personal data is limited to those who reasonably need it for legitimate business purposes.

No electronic transmission or storage system can be guaranteed to be completely secure.

12. Your data-protection rights

Subject to applicable law and any relevant exceptions, you may have the right to:

  • request access to your personal data;

  • request correction of inaccurate or incomplete information;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to certain processing;

  • request portability of certain personal data;

  • withdraw consent where processing is based on consent;

  • object to direct marketing at any time; and

  • lodge a complaint with the relevant data-protection supervisory authority.

These rights are not absolute and legal exceptions may apply.

To exercise your rights, contact:

info@salsacreed.com

Please provide sufficient information for us to identify you and understand your request.

We may need to verify your identity before responding to certain requests.

13. Supervisory authorities

If you are in Spain, or the relevant processing falls under Spanish data-protection law, you may contact the:

Agencia Española de Protección de Datos (AEPD)

Website: https://www.aepd.es/

If the relevant processing falls under Gibraltar data-protection law, you may contact the:

Gibraltar Regulatory Authority (GRA), acting as Gibraltar's Information Commissioner.

Website: https://www.gra.gi/

You have the right to complain to the relevant supervisory authority if you believe that your personal data has been processed unlawfully.

We would nevertheless encourage you to contact us first where possible, so that we have an opportunity to address your concern.

14. Cookies and similar technologies

Our website and online services may use cookies and similar technologies.

Depending on how our systems are configured, these may include:

  • strictly necessary cookies;

  • functionality cookies;

  • analytics technologies;

  • advertising or marketing technologies.

Non-essential cookies and similar technologies will be used in accordance with applicable law.

Further information is provided in our Cookie Policy.

15. Links to third-party websites and services

Our website, emails or communications may contain links to third-party websites or services.

Those websites and services operate independently from Salsacreed and have their own privacy policies and terms.

We are not responsible for the privacy practices or security of third-party websites or services.

16. Social media

Salsacreed may operate social-media profiles and may communicate with customers through social-media platforms.

Information you choose to make available through those platforms may be visible to others and may also be processed by the relevant platform.

The relevant social-media provider's own privacy policy will apply to processing carried out by that provider.

17. Children and young people

Salsacreed classes and events may be attended by children and young people.

We do not intentionally collect unnecessary personal information about children.

Where consent is the applicable legal basis and parental or guardian consent is required by law, we will take appropriate steps to obtain it.

We take particular care when handling photographs, video recordings or other information relating to children.

18. Automated decision-making

Salsacreed does not currently make decisions producing legal or similarly significant effects on individuals based solely on automated processing.

We may use ordinary analytics or marketing tools to understand how people interact with our website or communications, where permitted by law.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes to our services;

  • changes to the systems or providers we use;

  • changes in applicable legislation or regulatory guidance; or

  • changes to our processing activities.

The “Last updated” date at the beginning of this Privacy Policy will be updated when changes are made.

Where appropriate, we may notify customers of significant changes.

20. Contact us

If you have questions about this Privacy Policy, how Salsacreed processes your personal data, or wish to exercise your data-protection rights, please contact:

Salsacreed
Monika Masárová
Urbanización El Paraíso, 26
Email: info@salsacreed.com

We will deal with privacy enquiries in accordance with applicable data-protection legislation.