Privacy policy
Last updated: May 12, 2026
In compliance with the General Data Protection Regulation —GDPR—, Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights —LOPDGDD—, and other applicable regulations, users of this website are informed about the processing of their personal data.
The regulations require clear information about who processes the data, what it is used for, the legal basis, how long it is retained, whether it is shared with third parties, and the rights of the data subject. The Spanish Data Protection Agency also recommends that the information be clear, accessible, and understandable for users.
1. Data Controller
The controller of the personal data collected through this website is:
Controller: Andrea Sala
Tax ID (NIF): 21775075D
Address: Creu Coberta 97, 08014 Barcelona
Email: elevateopenclasses@gmail.com
Phone: +34 694 90 40 10
Activity: Dance classes, training programs, and competition groups under the Elevate brand.
Hereinafter, “Elevate”.
2. What personal data we process
Through this website, forms, email communications, WhatsApp, or other contact channels, Elevate may process the following personal data:
* First and last name.
* Email address.
* Phone number.
* Instagram username, if voluntarily provided.
* Data related to the class, training, group, or activity in which the person is interested or enrolled.
* Data necessary to manage bookings, payments, places, and registrations.
* Images and videos taken during classes, training sessions, events, or activities organized by Elevate.
* In the case of minors, identification data and, where applicable, contact details of the parent or legal guardian.
Elevate does not request specially protected data, such as health data, unless in a specific case the participant voluntarily communicates it for reasons related to physical activity or safety during the class. In such cases, said data will only be processed to properly manage the activity and protect the participant.
3. Purposes of the processing
Personal data may be processed for the following purposes:
3.1. Responding to inquiries and information requests
We process the data you send us through forms, email, WhatsApp, social media, or other means in order to respond to questions, information requests, or messages related to Elevate.
Legal basis: consent of the data subject and/or implementation of pre-contractual measures requested by the data subject.
3.2. Managing registrations, bookings, and participation in classes or training sessions
We process the data to manage registration, booking of places, attendance, group organization, communication of schedules, changes, rules, conditions, and any information necessary to participate in classes, training sessions, or competition groups.
Legal basis: execution of a contractual or pre-contractual relationship.
3.3. Managing payments
Currently or in the future, Elevate may manage payments for places, classes, or training sessions through payment links sent by email or via a virtual POS system installed on the website.
Legal basis: execution of the contractual relationship and compliance with legal obligations in tax and accounting matters.
3.4. Sending informational communications or updates
Elevate may send information about classes, training sessions, events, groups, updates, or activities related to dance.
When there is no prior relationship, these communications will only be sent if the person has given consent. When there is a prior relationship with Elevate, communications regarding similar activities may be sent, always offering the possibility to unsubscribe or object.
Legal basis: consent of the data subject or legitimate interest in keeping informed those who have already shown interest in or participated in Elevate activities.
The Spanish Data Protection Agency reminds that electronic commercial communications require authorization, except in cases of prior relationships and similar services, and the possibility to object or unsubscribe must always be offered.
3.5. Organization of WhatsApp groups
In some cases, Elevate may organize WhatsApp groups to facilitate practical information about classes, training sessions, competition groups, schedules, changes, or relevant communications.
Legal basis: consent of the data subject and/or execution of the contractual relationship.
Participation in these groups will be voluntary. The person may request to leave the group at any time.
3.6. Use of images and videos
Elevate may take photographs and videos during classes, training sessions, events, or activities in order to document the activity, create promotional or informational content, and share it on the website, social media, or other communication channels of Elevate.
Legal basis: consent of the data subject, especially when the images allow a person to be clearly identified.
In the case of minors, authorization from the parent or legal guardian will be requested before using images or videos for promotional purposes or public dissemination.
Important recommendation: although you mentioned that you currently only request consent from minors, for greater legal security you should also request image consent from adults if you plan to publish content on Instagram, TikTok, YouTube, or the website. For adults, it is also advisable to have written authorization, even through a checkbox in the registration form.
4. Data of minors
Elevate activities may be aimed at persons aged 13 and over.
In the case of minors, Elevate may request authorization from the parent or legal guardian for registration, participation, payments, and use of image when necessary.
When dealing with minors, Elevate will adopt additional protection measures and limit data processing to what is strictly necessary to manage the activity.
Important recommendation: for minors under 14 years old, in Spain it is generally advisable to obtain consent from the parent or legal guardian for processing activities based on consent. Since your classes begin at age 13, it is recommended that the registration form include a specific checkbox for family authorization for minors under 14, and another image authorization if you plan to record or publish content.
5. Data retention
Personal data will be retained for as long as necessary to fulfill the purpose for which it was collected.
Specifically:
- Inquiry data will be retained for the time necessary to respond to and follow up on the request.
- Registration and participation data will be retained while the relationship with Elevate lasts and subsequently for the periods necessary to comply with legal, tax, or accounting obligations.
- Data related to invoicing and payments will be retained for the legally required periods.
- Data used for informational communications will be retained until the person unsubscribes or withdraws consent.
- Images and videos will be retained as long as the purpose for which they were authorized remains valid, unless the person requests their removal when legally applicable.
6. Recipients and third parties who may access the data
Elevate will not sell or transfer personal data to third parties for commercial purposes.
However, some providers may access personal data when necessary to provide services related to the website, communications, bookings, payments, or activity management. These may include:
- Hosting or website maintenance providers.
- Email service providers.
- Form or booking tools.
- Banking entity or virtual POS provider, in this case BBVA.
- Messaging or communication services such as WhatsApp.
- Video platforms such as YouTube when embedded videos are viewed.
- Social media platforms such as Instagram, TikTok, or others when the person interacts with Elevate profiles.
These third parties will process the data according to their own privacy policies or, where applicable, as data processors on behalf of Elevate.
7. Payments through virtual POS
When the user makes a payment through the virtual POS installed on the website, banking or card details will be managed directly by the corresponding banking entity or payment provider.
Elevate does not store complete bank card details. It may only access the information necessary to confirm the payment, manage the booking, or comply with tax and accounting obligations.
8. Communications through WhatsApp and social media
If the person contacts Elevate through WhatsApp, Instagram, TikTok, or other social media platforms, their data will also be processed in accordance with the terms and privacy policies of those platforms.
Elevate will use these channels only to respond to messages, manage communications related to activities, or send information when there is consent or a prior relationship.
9. Embedded YouTube videos
The Elevate website may include embedded YouTube videos.
When playing or interacting with these videos, YouTube may collect technical or browsing information according to its own privacy and cookie policy. Therefore, users are advised to consult YouTube/Google’s privacy policy.
10. Cookies
This website may use technical cookies necessary for its operation and, where applicable, third-party cookies related to embedded videos, browsing analysis, or external tools.
If non-technical cookies are used, such as analytics, advertising, or third-party cookies, the user’s consent will be requested through the corresponding cookie banner.
For more information, please consult this website’s Cookie Policy.
Note for you: since you have YouTube videos, you will almost certainly need a cookie policy and banner if those videos load cookies before consent. Also if you later use Google Analytics, Meta Pixel, TikTok Pixel, or similar tools.
11. Rights of users
Any person has the right to:
* Access their personal data.
* Request the rectification of inaccurate data.
* Request the deletion of their data.
* Request the restriction of processing.
* Object to the processing of their data.
* Request the portability of their data, when applicable.
* Withdraw consent at any time, without affecting the lawfulness of processing carried out previously.
To exercise these rights, the person may write to:
The request must clearly indicate which right the person wishes to exercise and allow the identification of the applicant.
The person may also file a complaint with the Spanish Data Protection Agency if they consider that their rights have not been properly addressed.
12. Data security
Elevate will apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, misuse, or disclosure.
These measures will be applied taking into account the type of data processed, the context, and the existing risks. The GDPR requires the implementation of appropriate security measures and proactive accountability in the processing of personal data.
13. Accuracy of data
The user guarantees that the data provided is true, accurate, and up to date.
If the data changes, the user must inform Elevate in order to keep the information properly updated.
14. Changes to the privacy policy
Elevate may modify this Privacy Policy when necessary to adapt it to legal, technical, or operational changes to the website.
The updated version will always be available on this page.
