Privacy policy

Who we are

Social Dancing Denmark (“we”, “us”) is the data controller for the personal data described in this policy, run as a personal, non-commercial project rather than a registered business. Contact: Johanne L, contact@socialdance.dk.

What we collect

Only organisers have accounts. Dancers can browse the site without an account, and browsing collects no personal data from you beyond the standard technical server logs held by our hosting provider.

For organisers (and any registered user) we store:

• the email address you sign in with;
• the profile details you choose to add: display name, avatar, website, and a contact email;
• the content of events you create.

Events you publish, and the profile fields you choose to make visible, are shown publicly on the site.

How we use it

• To provide the service — creating and managing your account and publishing/managing your events. Legal basis: performance of our agreement with you and our legitimate interest in operating the service.
• To sign you in — we email you a one-time sign-in code (OTP). Sending this is necessary to provide the service (transactional email).
• We do not send marketing email. If that ever changes, we will ask for your separate, active consent first.

Storage and processors

Your data is stored in a database and file storage operated by Supabase, the site is hosted by Vercel, and we use Resend to send emails (such as your sign-in code). Each acts as our processor under a Data Processing Agreement.

• Supabase (database, authentication, file storage): our project is hosted in Supabase’s West Europe (London) region, so the database, authentication and file storage are held in the United Kingdom. DPA: supabase.com/legal/dpa. Supabase’s sub-processors (including AWS, which runs the underlying infrastructure) are published on its site. Transfers of personal data from the EEA to the UK are covered by the European Commission’s adequacy decision for the UK; any onward transfers are covered by Standard Contractual Clauses.
• Vercel (hosting): served via a global edge network. DPA: vercel.com/legal/dpa. Transfers outside the EEA are covered by Standard Contractual Clauses.
• Resend (email delivery): used to send your sign-in code and any transactional notifications. Resend’s processing takes place primarily in the United States, so your email address is transferred there for this purpose. This transfer is covered by Standard Contractual Clauses under Resend’s DPA: resend.com/legal/dpa. Resend retains email and log data for about 30 days.

International transfers: your data is stored in the United Kingdom (Supabase’s London region), which the European Commission recognises as providing an adequate level of data protection. Sending emails involves a transfer to the United States (Resend); that transfer relies on Standard Contractual Clauses.

Cookies

We use a strictly-necessary session cookie to keep you signed in, and a functional preference cookie that remembers the place you last chose in the “This week at a glance” filter on the home page, so it’s applied again on a later visit. Both are first-party and store nothing about you beyond that one choice.

For website statistics and performance monitoring, we use Cloudflare Web Analytics. Cloudflare Web Analytics does not use cookies or local storage for analytics and does not fingerprint individual visitors. The information is used in aggregated form to understand traffic and improve SocialDance.

None of this involves cookies for analytics or marketing, so we don’t show a cookie-consent banner.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and object to the processing of your personal data, and to data portability. You can delete your account and personal data at any time from your profile settings; your published events are kept but unlinked from you, unless you also choose to delete them. To exercise any right, contact us at contact@socialdance.dk.

Retention

We keep your account and personal data for as long as your account is active. When you delete your account, your personal data (email, name, avatar, contact details) is deleted; published events are retained in anonymised form (unlinked from you) unless you delete them too. Our processors apply their own log-retention periods — for example, Resend and Vercel retain logs for around 30 days.

Contact

For any privacy request or complaint, contact us at contact@socialdance.dk. You also have the right to lodge a complaint with the Danish supervisory authority, Datatilsynet (datatilsynet.dk).