Privacy policy

In short: no cookies, no tracking, no analytics. We only store your data when you register for a class or workshop – and only for that.

Translation for convenience; the German version is binding.

Last updated: October 2026

1. Controller

Responsible for data processing on this website (Art. 4(7) GDPR):

Stephen Kellett
The Lindy Corner
Markgrafenstr. 38
79111 Freiburg
Germany

E-mail: thelindycorner@gmail.com or kellett.stephen@gmail.com

2. The key points at a glance

  • No cookies, no tracking, no analytics, no advertising.
  • We store nothing in your browser (no cookies, no local storage or similar).
  • Fonts and images are hosted on our own server. We do not embed Google Fonts, social media plugins or maps.
  • Some pages (e.g. the home page) embed videos from Vimeo and YouTube. They load when you open the page (see section 5).
  • We only use your registration data to organise classes and workshops. We do not share it with third parties and never sell it.

3. Hosting and delivery of the website

The website and a small server program (for the timetable and registration) run on Cloudflare (Cloudflare, Inc., USA, or its group company Cloudflare Germany GmbH). Cloudflare acts as our processor (Art. 28 GDPR).

When you visit the website, Cloudflare necessarily processes your IP address and the data of your request (e.g. the address requested, time, browser identifier) in order to deliver the pages and protect the website against attacks. This happens only transiently.

  • The website itself writes no server logs (logging is switched off) and stores no IP addresses.
  • To prevent abuse, a rate limiter counts how many requests come from an IP address. This count is kept in memory only and expires after about a minute; it is not stored anywhere.
  • The database (with class data and registrations) is located in Cloudflare’s EU jurisdiction. The servers delivering the pages are located worldwide.

The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). As Cloudflare is a US company, data may be transferred to the USA. According to its data processing addendum, Cloudflare relies on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses for this.

More: Cloudflare privacy policy, Cloudflare data processing addendum (DPA).

4. No cookies, no tracking

For visitors, this website sets no cookies and stores or reads nothing on your device (§ 25 TDDDG). There are no analytics or tracking services, no advertising networks and no social media plugins. That is why there is no cookie banner either.

5. Videos (Vimeo and YouTube)

Some pages (e.g. the home page and “Lindy Hop history”) embed videos from Vimeo and YouTube. When you open these pages, your browser loads the provider’s player; data (including your IP address, browser information and the page you visited) is sent to the provider, who may also use cookies or similar technologies. A video only plays when you click “Play”. We have no influence on the providers’ data processing.

  • Vimeo: Vimeo.com, Inc., New York, USA (we load the player with the “Do Not Track” option). Vimeo privacy
  • YouTube: for users in the EEA, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (we use the “privacy-enhanced mode” youtube-nocookie.com). Google privacy policy

The legal basis is our legitimate interest in showing our dance school and Lindy Hop in a lively way (Art. 6(1)(f) GDPR). Transfers to the USA are possible with both providers. If you don’t want this, please don’t open the pages with videos, or use a browser blocker for embedded content.

6. Links to other websites

Links to Instagram, Facebook, Telegram or Google Calendar are plain links. Nothing is sent to these services before you click. After the click, the privacy policy of the respective provider applies.

7. Registration for classes and workshops

What we store

  • name and e-mail address,
  • the class or workshop chosen, the price option and the amount due,
  • depending on the class: dance role, your dance partner’s name, payment mode (in full or in instalments),
  • optional details depending on the form: offer to help out, comment, classes wanted (Flatrate), voucher recipient and delivery method, phone number, town/city, level and hosting details (Lindy Roots Weekend),
  • the website language, the time of registration and of your consent, your registration number and the status of the registration (e.g. registered, confirmed, paid, waiting list).

Required fields are marked in the form. Without them we cannot process your registration. To detect duplicate registrations, the system compares the e-mail address and class with existing registrations.

Purpose and legal basis

We use the data solely to organise classes and workshops: allocating places, balancing leaders and followers, matching payments and communicating with you. The legal basis is the performance of pre-contractual measures or of the contract (Art. 6(1)(b) GDPR). There is no automated decision-making; we decide on places personally.

Who receives the data

The data is stored in our database at Cloudflare (see section 3). Only the dance school has access. We do not share it with third parties and never sell it.

E-mails

We write to you (e.g. the confirmation with the payment details) from a Gmail account. The provider is Google (for the EEA, Google Ireland Limited). The e-mails and your replies are therefore also stored by Google. The same applies when you send us an e-mail yourself (Art. 6(1)(b) or (f) GDPR).

How long we keep the data

We keep your registration until the class or workshop has been organised and paid. After that, the dance school deletes the data (the admin area has a delete function for this). Where details are subject to statutory retention obligations as accounting records, we keep those records for as long as required (Art. 6(1)(c) GDPR).

8. Admin area

The area under /admin is for the dance school only. It is protected by Cloudflare Access (login with a one-time code sent by e-mail). For this, Cloudflare sets a technically necessary cookie – only for the admins and only in this area, never for visitors (§ 25(2) no. 2 TDDDG).

9. Your rights

You have the right to

  • access to your stored data (Art. 15 GDPR),
  • rectification (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • object to processing based on legitimate interests (Art. 21 GDPR),
  • withdraw consent with effect for the future (Art. 7(3) GDPR).

Just send us an e-mail to thelindycorner@gmail.com.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information), Lautenschlagerstraße 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de.

10. Changes

If the website or the legal situation changes, we will update this privacy policy. The version published here applies.