Habana Academy Dance Studio

1. Who we are

Habana Academy Dance Studio("Habana Academy", "we", "us") is the data controller responsible for your personal data.

Business name: Habana Academy Dance Studio

Address: Sörnäisten rantatie 33C, 00500 Helsinki, Finland

Email: hello@habanaacademy.fi

2. What data we collect and why

We collect only the data necessary to provide our services.

Trial class reservations

Data collected: Full name, email address, phone number

Purpose: To confirm your reservation, send class details, and contact you if anything changes

Legal basis: Performance of a contract (Article 6(1)(b) GDPR)

Class bookings and memberships

Data collected: Full name, email address, booking history, credit balance

Purpose: To manage your bookings, track class credits, and administer your membership

Legal basis: Performance of a contract (Article 6(1)(b) GDPR)

Payments

Data collected: Payment confirmation details only. Card details are processed directly by Stripe and are never stored on our servers.

Purpose: To process payments for classes, packs, and memberships

Legal basis: Performance of a contract (Article 6(1)(b) GDPR); Legal obligation for accounting records (Article 6(1)(c) GDPR)

Website usage

Data collected: Session cookies only (no tracking or advertising cookies, no analytics)

Purpose: To keep the site functional during your visit

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) — these cookies are strictly necessary for the site to function

3. How long we keep your data

Reservation data2 years from the date of the reservation, or until you request deletion

Booking & membership data2 years from your last interaction with us

Payment records7 years, as required by Finnish accounting law (Kirjanpitolaki)

Session cookiesDeleted when you close your browser

4. Who we share your data with

We do not sell your data. We share it only with the service providers necessary to operate our business:

Stripe, Inc.

Payment processing. Stripe is certified to PCI DSS Level 1 and compliant with GDPR. Data may be processed in the United States under Standard Contractual Clauses.

Stripe Privacy Policy →

Supabase, Inc.

Database hosting. Your data is stored on servers within the European Union (EU region). A Data Processing Agreement is in place.

Supabase Privacy Policy →

No other third parties have access to your personal data.

5. Your rights under GDPR

As a resident of the European Union, you have the following rights:

Right of accessYou can request a copy of all personal data we hold about you.

Right to rectificationYou can ask us to correct inaccurate or incomplete data.

Right to erasureYou can request that we delete your personal data, subject to legal retention requirements (e.g. accounting records).

Right to data portabilityYou can request your data in a structured, machine-readable format.

Right to restrictionYou can ask us to temporarily stop processing your data while a dispute is resolved.

Right to objectYou can object to processing based on legitimate interest.

Right to withdraw consentWhere processing is based on consent, you can withdraw it at any time without affecting prior processing.

To exercise any of these rights:

Email us at hello@habanaacademy.fi with your request. We will respond within 30 days.

6. Cookies

We use only essential (strictly necessary) cookies that are required for the website to function. These include session cookies that keep you logged in during your visit.

We do not use advertising cookies, tracking cookies, or third-party analytics. You do not need to consent to these cookies as they are strictly necessary for the service to operate.

7. Data security

We take reasonable technical and organisational measures to protect your data, including encrypted data transmission (HTTPS), restricted access to personal data, and use of reputable, security-certified service providers. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.

8. Right to complain

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Finnish data protection supervisory authority:

Office of the Data Protection Ombudsman

Tietosuojavaltuutetun toimisto

PO Box 800, FI-00521 Helsinki

www.tietosuoja.fi →

9. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Significant changes will be communicated to active clients by email.

10. Contact

For any questions about this policy or how we handle your data, contact us at hello@habanaacademy.fi.