Ez a dokumentum jelenleg csak angol nyelven érhető el (magyar fordítás nincs). Kérdés esetén írjatok a zonno@wootera.com címre.
PRIVACY POLICY
Controller of personal data within the scope of processing data of Users (dance schools):
Wootera Digital Technologies, s.r.o., Company ID: 19160526, with its registered office at Oldřichova 255/20, Nusle, 128 00 Prague 2
Contact: zonno@wootera.com
Processing of personal data of students and instructors is carried out in the following regime:
- Processor (Wootera) for dance schools as data controllers – see Data Processing Agreement (DPA),
- or, to a limited extent, as an independent controller for data necessary for the operation of the Service (e.g. school account).
Wootera's Role in Relation to Student and Instructor Data
Wootera Digital Technologies, s.r.o. (Zonno Dance) does not act as a data controller in relation to personal data of students, instructors, or other individuals recorded by the school, except where explicitly stated in these policies or where it follows from the nature of the provided service.
The respective dance school (the User of the service) is the sole data controller of such personal data and determines the purposes and means of processing.
Wootera Digital Technologies, s.r.o. acts solely as a data processor, processing personal data on behalf of and under the instructions of the school, and only to the extent necessary for providing the Zonno Dance service.
The school is solely responsible for fulfilling all legal obligations related to the processing of personal data, including, in particular, providing information to data subjects, obtaining consent where required, establishing a lawful basis for processing, and handling data subject rights.
Hosting of the Service is primarily carried out within the European Economic Area.
2.1 Who does this policy apply to?
These Privacy Policy applies to:
- Users (dance schools) - legal entities or natural persons using the Zonno Dance service.
- School staff - instructors, administrators and other persons managed by the school in the system.
- School students - persons recorded in the system by the school (attendance, profile, communication).
- Mobile application users - students and instructors using the mobile application (iOS, Android).
2.2 What data do we process and why?
A) Users (dance schools) - account registration and operation
| Data category | Legal basis (GDPR Art. 6) | Purpose | Retention period |
|---|---|---|---|
| Business identification (name, Company ID, address) | Art. 6(1)(b) - performance of a contract | Conclusion and performance of the contract | For the duration of the contract + 3 years |
| Contact email and account administrator details | Art. 6(1)(b) | Communication, notifications, account management | For the duration of the contract + 3 years |
| Billing data | Art. 6(1)(c) - legal obligation | Tax and accounting obligations | 10 years according to law |
B) School staff (instructors, administrators)
| Data category | Legal basis | Purpose | Retention period |
|---|---|---|---|
| First name, last name | Art. 6(1)(f) - legitimate interest | Identification in the system | For the duration of the contract, then deleted within 30 days |
| Art. 6(1)(f) | Login, communication, notifications | For the duration of the contract | |
| Phone (if provided) | Art. 6(1)(f) | Contact within school operations | For the duration of the contract |
| Activity logs | Art. 6(1)(f) | Security, audit | 90 days |
C) Students (recorded by the school)
| Data category | Legal basis | Purpose | Retention period |
|---|---|---|---|
| First name, last name | Art. 6(1)(b) or (f) | Student records | According to the school’s decision |
| Date of birth | Art. 6(1)(b) or (f) | Identification, age categories | According to the school’s decision |
| Email, phone | Art. 6(1)(b) or (f) | Communication, notifications | According to the school’s decision |
| Photograph (profile) | Art. 6(1)(f) | Identification in the system | According to the school’s decision |
| Attendance | Art. 6(1)(b) | Attendance records | According to the school’s decision |
| Payment information (outside the system) | not processed by Zonno | - | - |
Important:
Student payments are carried out outside the Zonno Dance system (e.g. in cash or by card directly to the school). Zonno Dance does not currently process this data.
D) Mobile application (students and instructors)
| Data category | Legal basis | Purpose | Retention period |
|---|---|---|---|
| Device push token | Art. 6(1)(f) | Sending notifications | For the duration of the active account |
| Device technical data | Art. 6(1)(f) | Application functionality | 90 days |
E) Technical data and analytics
For the purpose of operating the service, the following may be processed:
- IP address of the device
- browser / device type
- access timestamps
These data are processed exclusively for:
- system security
- service stability
- analytics (e.g. Google Analytics)
2.3 With whom do we share data?
We do not sell or provide personal data to third parties for their own purposes.
Data may be shared only with:
- Sub-processors (hosting, cloud, email services) necessary for the operation of the service
- Providers of analytical tools (e.g. Google Analytics)
- Public authorities - only if required by law
A list of sub-processors is available upon request.
2.4 Security
- Data transmission is carried out via HTTPS (TLS)
- Only authorized persons have access to data
- Data are protected by technical and organizational measures in accordance with Art. 32 GDPR
The Provider has adopted appropriate measures but is not liable for:
- attacks by third parties
- failures of infrastructure beyond its control
2.5 Your rights
As a data subject, you have the right to:
| Right | Meaning |
|---|---|
| Access (Art. 15) | To find out what data we process |
| Rectification (Art. 16) | To correct inaccurate data |
| Erasure (Art. 17) | To request deletion |
| Restriction (Art. 18) | To restrict processing |
| Data portability (Art. 20) | To obtain data in a portable format |
| Objection (Art. 21) | To object |
| Withdrawal of consent | If it was granted |
Send requests to: zonno@wootera.com
You will usually receive a response within 30 days.
2.6 Complaint to a supervisory authority
You have the right to file a complaint with:
Office for Personal Data Protection
Pplk. Sochora 27, 170 00 Prague 7
www.uoou.cz
2.7 Changes to this policy
We will inform you about changes to this policy:
- by email
- or through the application
2.8 Effectiveness
These Privacy Policy become effective on 1 April 2026.