Privacy Policy
Effective from 13 October 2026
This is a translation for your convenience. The legally binding version is the Slovak original; in case of any discrepancy, the Slovak version prevails.
This policy explains what personal data we process when you visit beststudio-dance.com, book a class or rent the hall, why we process it and what rights you have. We follow Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on Personal Data Protection.
1. Controllers
The website, the booking system and the studio’s shared client records are used by two service providers as joint controllers (Art. 26 GDPR):
Ievgeniia Sysoieva – podnik zahraničnej osoby
Gessayova 2616/14, 851 03 Bratislava-Petržalka, Slovakia, Company ID (IČO) 56582242, Tax ID (DIČ) 3122065683
(adult classes, adult workshops, hall rental; operates the website)
Viktoriia Nikolaienko – podnik zahraničnej osoby
Gessayova 2616/14, 851 03 Bratislava-Petržalka, Slovakia, Company ID (IČO) 57115087, Tax ID (DIČ) 3122320498
(children’s classes, gymnastics, Contemporary Dance, morning stretching, children’s workshops)
Shared contact: info@beststudio-dance.com
Under their arrangement, Ievgeniia Sysoieva is responsible for the website, the booking system, emails and handling your requests to exercise your rights. Each provider is responsible for the payments and accounting records of her own services. You can exercise your rights with either of them.
We have not appointed a data protection officer. Please send any questions about personal data to the email above.
2. What data we process and why
Booking a class, a pass, a workshop or a rental
- Data: first and last name, email, phone, a note you write yourself, the chosen class or rental slot, type of entry, payment method and status, website language. For children’s classes and children’s workshops, also the child’s name (mandatory – we need it to keep track of the child in the group).
- Purpose: reserving your spot, confirmation by email, keeping track of passes, communication about schedule changes.
- Legal basis: performance of a contract and steps taken before entering into it (Art. 6(1)(b) GDPR).
Providing this data is necessary to conclude the contract; without it we cannot process the booking. Please do not include health information in the note. Tell the trainer in person about any health restrictions.
Payments
- Data: email, amount, payment identifier and status. You enter your card details directly into the Stripe payment gateway; we have no access to them.
- Legal basis: performance of a contract; keeping accounting records is our legal obligation (Art. 6(1)(c) GDPR, Act No. 431/2002 Coll. on Accounting).
Withdrawal from a contract and complaints
- Data: name, email, booking or pass number, content of the request and date of receipt.
- Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
News by email
If you tick the box “I would like to receive news…” when booking a class, a rental or a workshop, we will occasionally email you about new courses, workshops and events at the studio.
- Data: name, email, language, date of consent.
- Legal basis: your consent (Art. 6(1)(a) GDPR). The box is optional and does not affect your booking.
- Withdrawal: you can withdraw your consent at any time by replying to any of our emails or by writing to info@beststudio-dance.com.
Communication
When you send us an email or a message on WhatsApp or Instagram, we process your contact details and the content of the message in order to reply (legitimate interest, Art. 6(1)(f) GDPR, or steps before entering into a contract). For WhatsApp and Instagram, Meta Platforms Ireland Ltd. acts as an independent controller under its own policy.
Website security
- Data: IP address, technical browser data, time of the request.
- Purpose: protecting forms against bots and abuse (Cloudflare Turnstile, rate limiting), operating and securing the website.
- Legal basis: legitimate interest in the security of the service (Art. 6(1)(f) GDPR).
Website analytics
Only if you allow it in the cookie settings, we use Google Analytics 4 to understand how the website is used (number of visits, pages viewed, device, approximate location). The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the Cookie settings link in the website footer.
Photos and videos from classes
We publish recordings in which you are recognisable on our website and social media only with your consent (for children, with the consent of the legal guardian). You can withdraw your consent at any time by email; we will then remove the recordings.
3. How long we keep data
We delete or anonymise data during a regular (at least yearly) review of the database once these periods have passed:
- bookings, passes and rentals: 3 years after the last service was provided (the general limitation period), then we delete or anonymise them,
- accounting records: 10 years under the Accounting Act,
- withdrawals and complaints: 3 years after they were resolved,
- email communication: as long as needed to resolve the matter, at most 3 years,
- security logs: usually a few days,
- Google Analytics data: 14 months,
- photos and videos: until consent is withdrawn,
- consent to news: until it is withdrawn; after withdrawal, we keep only the email, name and the dates of consent and its withdrawal as evidence.
We keep database backups for no longer than 90 days; deleted data disappears from them at the latest after this period.
4. Who we share data with
We do not sell your data. We use the following processors and partners:
- Cloudflare, Inc. – hosting of the website, the database and its backups (data stored in Western Europe), bot protection (Turnstile),
- Resend (Plus Five Five, Inc.) – sending confirmation emails,
- Microsoft Ireland Operations Ltd. – the studio’s mailboxes (Microsoft 365),
- Stripe Payments Europe, Ltd. (Ireland) – processing online payments; for payments it acts as an independent controller under its own policy,
- Google Ireland Ltd. – Google Analytics, only with your consent,
- the accountant who keeps the studio’s books, and public authorities where required by law.
Some of these providers are based in the United States or can access data from there. The transfer is protected by the European Commission’s adequacy decision (EU-U.S. Data Privacy Framework) or by standard contractual clauses.
We do not carry out automated decision-making or profiling with legal effects.
5. Your rights
You have the right:
- to access your data and receive a copy,
- to have incorrect data corrected,
- to have your data erased if we no longer need it or you have withdrawn consent,
- to restrict processing,
- to data portability,
- to object to processing based on legitimate interest,
- to withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.
Send your request to info@beststudio-dance.com. We will reply within one month.
If you believe we process your data unlawfully, you may file a petition to initiate proceedings with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
6. Cookies and similar technologies
The website uses:
| Name | Purpose | Type | Duration |
|---|---|---|---|
| bs_consent | stores your cookie choice (in browser storage) | necessary | until you change it |
| bs_admin | sign-in to the administration (studio staff only) | necessary | 30 days |
| bs_device | remembering a trusted device when signing in to the administration (studio staff only) | necessary | 30 days |
| Cloudflare Turnstile | protecting forms against bots (cookies / browser storage) | necessary | for the session |
| _ga, ga* | Google Analytics – distinguishing visitors | analytics, with consent | 2 years |
We use necessary technologies without consent under Section 109(8) of Act No. 452/2021 Coll. on Electronic Communications. Analytics cookies are stored only with your consent. You can change your choice at any time via the Cookie settings link in the website footer.
7. Changes to this policy
We may update this policy. The current version is always published on this page. Effective from 13 October 2026.