Privacy Policy

DNA – Dance N'Arts School values the privacy and the protection of the personal data of its students, parents and guardians, staff and users.

This Privacy Policy explains clearly how personal data is collected, used, retained and protected, in accordance with the General Data Protection Regulation (GDPR) and other applicable legislation.

1. Data controller

The controller responsible for processing personal data is:

For any question relating to the processing of personal data, or to exercise your rights, you may contact us at this email address.

2. Personal data collected

Depending on your relationship with DNA, we may collect data such as:

• Name and date of birth;
• Address and telephone contacts;
• Email address;
• Details of the student and of their parent or guardian;
• Information required for enrolment in and attendance of activities;
• Data required for administrative, financial and billing management;
• Other data strictly necessary for the running and management of the school.

DNA collects and processes only the data necessary for the purposes for which it is used.

3. Purposes and legal basis for processing

Personal data may be processed for:

• Management of enrolments, registrations and class attendance;
• Organisation and management of activities, classes, rehearsals, performances and events;
• Communication with students and their parents or guardians;
• Administrative, financial and billing management;
• Compliance with legal obligations;
• Responding to requests for information or contact;
• Promoting DNA's activities and initiatives, where the relevant consent or another applicable legal basis exists.

Depending on the specific purpose, the processing of data is based on the performance of the contractual relationship or of pre-contractual measures, compliance with legal obligations, DNA's legitimate interest, or the data subject's consent, where this is required.

4. Data relating to minors

Where personal data relates to minors, DNA processes it through the relevant parent, guardian or legal representative, wherever applicable.

DNA takes particular care in processing the data of its underage students, using it only for the purposes necessary to the running of the school and the provision of its services.

5. Photographs and videos

In the course of classes, rehearsals, performances, events and other DNA activities, photographs and/or videos of students may be taken.

The use of these images for DNA's communication and promotional purposes — in particular on the website, social media and promotional materials — is carried out in accordance with the consent given by the student or, in the case of a minor, by their parent or guardian on the enrolment form.

Consent may be withdrawn at any time by contacting DNA. Withdrawing consent does not affect the lawfulness of any use of the images made prior to its withdrawal.

6. Sharing data with third parties

DNA does not sell or trade personal data.

Where necessary for the running of the school, data may be processed by service providers acting on DNA's behalf, in particular in the areas of accounting, IT, administrative management or others necessary to the provision of services.

In such cases, DNA will ensure that service providers adopt appropriate measures to protect the confidentiality and security of personal data.

Data may also be disclosed to public bodies, authorities or other entities where required by law.

7. Data retention

Personal data will be retained only for the period necessary to fulfil the purposes for which it was collected, without prejudice to the retention periods imposed by law.

Where processing is based on consent, data will be processed for as long as that consent is maintained, and consent may be withdrawn at any time.

8. Rights of data subjects

Under the applicable legislation, the data subject may, where applicable, exercise the following rights:

• Access to their personal data;
• Rectification of incorrect or incomplete data;
• Erasure of data;
• Restriction of processing;
• Objection to processing;
• Data portability;
• Withdrawal of consent, where processing is based on consent.

Requests should be sent to dna@dnaschool.pt.

Exercising these rights is free of charge, without prejudice to the situations provided for in the applicable legislation.

The data subject may also lodge a complaint with the National Data Protection Commission (CNPD) if they consider that their rights have not been duly upheld.

9. Data security

DNA adopts appropriate technical and organisational measures to protect personal data against loss, destruction, alteration, and unauthorised access or disclosure.

Access to data is limited to those who need it to perform their duties and who are bound by confidentiality obligations.

10. Cookies

The DNA website may use cookies and similar technologies to ensure it works correctly, improve the user experience and, where applicable, obtain statistical information.

Where legally required, the user's consent will be requested for the use of cookies that are not strictly necessary for the operation of the website.

11. Changes to this Privacy Policy

DNA may update this Privacy Policy whenever necessary, in particular as a result of legal changes or changes to the services provided.

The most recent version will always be available on the DNA website.