Privacy Policy
How Berrakera Dance Hub collects and processes your personal data under Regulation (EU) 2016/679 (GDPR).
Last updated: 15 August 2026
Data controller
The controller of your personal data is:
- Name: Berrakera SSD a r.l.
- Tax ID / VAT: 13483710011
- Registered office: Via San Marino 27/A, 10134 Torino
- Legal representative: Giorgia Aluffi
- Email: info@berrakera.it
What data we collect
Depending on how you interact with us, we process:
- Browsing data: technical information automatically collected by our systems (e.g. IP address, browser type, pages visited), needed for the operation and security of the site.
- Pre-registration and contact data: first name, last name, email, phone and any message you send us through the site forms, together with the channel or campaign your request comes from (src and utm link parameters).
- Account data: email and login credentials for the members' area, when you create an account.
- Sign in with Google: if you choose to sign in with Google, we receive your name, email address and identifier from your profile, solely to create and manage your account.
- Course enrolment data (members): personal details and contacts, for minors the name and phone number of a parent or guardian, and only the expiry date of the medical certificate (the document itself is never stored in our systems).
Purposes and legal bases
We process your data for the following purposes:
- Manage pre-registrations, contact requests and your possible trial class, legal basis: performance of pre-contractual measures requested by the data subject (Art. 6.1.b GDPR).
- Create and manage your account and the members' area, legal basis: performance of a contract (Art. 6.1.b GDPR).
- Manage the membership relationship of those who enrol in our courses (member records, enrolments, lesson packs, membership card, attendance and receipts), legal basis: performance of a contract (Art. 6.1.b GDPR).
- Ensure the operation, security and abuse prevention of the site, legal basis: legitimate interest of the controller (Art. 6.1.f GDPR).
- Comply with legal obligations, legal basis: legal obligation (Art. 6.1.c GDPR).
- Analytics and marketing (advertising campaign measurement, for example with Meta Pixel), legal basis: your consent (Art. 6.1.a GDPR), which can be withdrawn at any time. Without your consent these tools stay off.
Who we share data with
We do not sell your data. To provide the service we rely on providers that process it as data processors, on our behalf and under our instructions:
| Provider | Purpose | Processing |
|---|---|---|
| Supabase | Database and authentication (data hosting and access management) | UE (Francoforte) |
| Vercel | Website hosting and technical logs | USA (SCC/DPF) |
| Resend | Sending transactional emails (e.g. confirmations, password reset) | USA (SCC/DPF) |
| Telegram | Internal notification of new contacts to our team | Extra-UE |
| Google (OAuth) | Authentication via Google account (sign in with Google) | USA (DPF) |
| Google Analytics | Aggregated website usage statistics (Google Analytics) | USA (DPF) |
| Cloudflare Turnstile | Anti-spam protection of public forms (bot check) | USA (SCC/DPF) |
Each provider processes data under its own privacy policy (linked from its name).
Third-party advertising tools (Meta Pixel)
With your consent to the “Marketing” category we use Meta Pixel, an advertising tool by Meta Platforms Ireland Ltd. Meta does not act on our behalf: for the collection and transmission of data through the pixel we are joint controllers with Meta (Art. 26 GDPR), under the joint controllership addendum; for subsequent processing Meta acts as an independent controller, as described in Meta’s privacy policy. Data may be transferred to the United States with the safeguards of Art. 44 ff. GDPR (Standard Contractual Clauses, EU-US Data Privacy Framework). The pixel is loaded only after your consent, which you can withdraw at any time from the “Manage cookies” panel.
Transfers outside the European Union
Some providers may process data outside the European Economic Area. In such cases the transfer is covered by appropriate safeguards under Art. 44 ff. GDPR, such as the European Commission's Standard Contractual Clauses or adherence to the EU-US Data Privacy Framework. An exception is the messaging service used solely to notify our team internally, for which the transfer relies on the derogations under Art. 49 GDPR: you may ask us at any time not to use it by writing to the address given in this notice.
How long we keep data
- Pre-registration and contact data: for the time needed to handle your request and, if there is no follow-up, for a maximum of 24 months.
- Account data: for the entire life of the account; upon deletion, data is removed or anonymised, except for legal obligations.
- Member data: for the duration of the membership; when it ends, personal details are anonymised, while documents with accounting and tax relevance are kept for 10 years (legal obligation).
- Browsing data and technical logs: for the time strictly needed for security and diagnostics.
Your rights
As a data subject you may exercise, within the limits of the law, the following rights (Art. 15-22 GDPR):
- access to your data and its rectification;
- erasure ('right to be forgotten') and restriction of processing;
- objection to processing based on legitimate interest;
- data portability in a structured, readable format;
- withdrawal of consent at any time, without affecting processing already carried out.
To exercise your rights, write to info@berrakera.it: we will reply within the time limits set by law.
If you believe the processing of your data infringes the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante).
Cookies
This site uses cookies. To learn which cookies we use and how to manage them, see the Cookie Policy.
Changes to this policy
We may update this policy over time. Material changes will be published on this page with a new update date.
