Legal · Data Protection
The short version
We collect only what we need to run our events, deliver your registration, and — if you ask — stay in touch. We do not sell your data. We do not run advertising. We use Stripe to process payments and they never give us your card number. You can ask us to delete everything about you at any time.
01
Tango Secrets is the trading name for the artistic and educational activities of Pablito & Efi, based in Thessaloniki, Greece. We operate the website thetangosecrets.com and its sub-pages, including the Pablito & Efi portfolio at thetangosecrets.com/pablitoefi/ and the Thessaloniki Tango Seminar at thetangosecrets.com/thessalonikitangoseminar/.
Data controller: Tango Secrets · Pablito & Efi
Contact: hello@thetangosecrets.com
Location: Thessaloniki, Greece (European Union)
As an EU-based operator, we are bound by the General Data Protection Regulation (GDPR) 2016/679. We take that responsibility seriously.
02
When you register for the Thessaloniki Tango Seminar, we collect:
| Data | Why | Legal basis |
|---|---|---|
| Full name | To address you, verify your entry at the door, and personalise your confirmation email | Contract performance (Art. 6(1)(b)) |
| Email address | To send your confirmation, QR entry code, and — if you opt in — future communications | Contract performance; consent for newsletter |
| City (optional, via Stripe) | To understand where our audience comes from | Legitimate interests (Art. 6(1)(f)) |
| Payment data | Processed entirely by Stripe — we never see your card number | Contract performance |
| IP address (server-derived) | Security, fraud prevention, approximate geolocation | Legitimate interests |
| Browser / device / OS (server-derived) | Compatibility monitoring | Legitimate interests |
| Behavioural session data (scroll depth, time on page, FAQ opens) | To understand how people engage with our event page and improve it | Consent (you can decline via the cookie banner) |
| UTM parameters (if present in your URL) | To understand which channels bring people to the seminar | Legitimate interests |
If you sign up on thetangosecrets.com, we store your email address to send you updates about tango education, performances, and new releases. You can unsubscribe at any time via the link in every email.
Legal basis: Consent (Art. 6(1)(a)). We will not add you to a list without your explicit opt-in.
If you contact us via email or a contact form, we store your message and email address to respond and maintain a record of the conversation.
Legal basis: Legitimate interests (Art. 6(1)(f)) — responding to enquiries.
If you book a private session, we collect your name, email, preferred date and format. We use this only to confirm and conduct the session.
Legal basis: Contract performance (Art. 6(1)(b)).
03
Our pages use browser local storage and session storage for the following purposes:
| Key | Purpose | Type |
|---|---|---|
ttp_sid | Anonymous session identifier for behavioural analytics (scroll depth, time on page, FAQ interactions) | Local storage — requires consent |
ttp_entry | Stores the URL you first landed on in this session | Session storage — requires consent |
ttp_gdpr_consent | Records whether you have accepted or declined analytics cookies | Local storage — strictly necessary to remember your choice |
seminar_reg | Holds your registration form data temporarily between payment steps | Session storage — strictly necessary for the payment flow |
We do not use advertising cookies. We do not use tracking pixels from Facebook, Google, or any other ad platform. The only third-party script that loads on our pages is Stripe (for payment processing) and Google Fonts (for typography). Both are disclosed below.
04
Payment processing is handled by Stripe Payments Europe Ltd., an Irish company subject to GDPR. When you donate €5 for the Seminar, you interact directly with Stripe's payment interface. We receive only a payment confirmation — your card details are never transmitted to or stored by us. Stripe's privacy policy: stripe.com/privacy.
Our pages load typefaces (Cormorant Garamond and Inter) from Google Fonts. When your browser fetches these fonts, your IP address is transmitted to Google's servers in the United States. Google states that it does not use font-loading requests to build user profiles or serve advertising. This transfer is covered by Google's Standard Contractual Clauses. You can prevent this transfer by declining analytics in our cookie banner — when declined, the page falls back to system fonts with no Google connection. Google's privacy policy: policies.google.com/privacy.
Images and video on our pages are served from ImageKit (imagekit.io) and Cloudinary (cloudinary.com). Your browser connects to their CDN servers to download these assets. No personal data beyond a standard HTTP request (IP, user agent) is transmitted. We have data processing agreements with both providers.
We do not share, sell, or rent your personal data to any other third party. We do not use any social media tracking pixels. We do not run Google Analytics or any behavioural advertising system.
05
| Data type | Retention period |
|---|---|
| Seminar registration records (name, email, token, attendance) | 3 years from the event date, then deleted |
| Payment records (Stripe confirmation ID only) | 7 years (required by Greek accounting law) |
| Newsletter subscriber list | Until you unsubscribe, then immediately deleted |
| Session booking records | 2 years from the session date |
| Contact messages | 2 years from the date of the message |
| Behavioural analytics (scroll, time, FAQs) | 12 months, then anonymised |
06
You have the following rights. You can exercise any of them by emailing hello@thetangosecrets.com. We will respond within 30 days.
07
Seminar registration data is stored in an encrypted SQLite database on a server with HTTPS-only access. Passwords and payment credentials are never stored. Access is limited to the event organisers. We use hashed identifiers (SHA-256) for IP addresses stored in analytics records.
If there is ever a data breach that is likely to result in risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours.
08
Our server is located in the European Union. Data transferred to Stripe is governed by EU-US Standard Contractual Clauses. Data transferred to Google (Fonts) and ImageKit is governed by their respective SCCs or adequacy decisions. We do not transfer personal data to countries without adequate data protection unless covered by SCCs.
09
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data about a minor, please contact us immediately and we will delete it.
10
If we make significant changes to this Privacy Policy, we will update the "last updated" date at the top of this page. Where changes materially affect how we use your data, we will notify registered seminar participants by email.
Questions or requests
Email us at hello@thetangosecrets.com. We respond to all data requests within 30 days. We do not use a legal department. You will hear from Pablito or Efi directly.