Privacy Policy

This Privacy Policy explains how VISION Dance Team(“we”, “us”) collects and uses personal data when you use our members’ portal (the “Platform”) and take part in our lessons, groups, camps and other events. We are the controller of that data. For anything about your privacy, write to team@vision-danceteam.com.

The Platform is invite-only. Each club on it is run separately, with its own accounts and its own database, and each club is the controller for its own members. The Platform is provided to us by Tomáš Kasalický, company ID (IČO) 14033917, who processes the data as our processor under Article 28 GDPR, only on our instructions and under a data processing agreement with us.

• Account and profile — name, e-mail, phone, birthday, profile photo, role (member, coach, admin, external participant), language and notification preferences.
• Coaches — the bank account (IBAN) and recipient name members pay to, lesson prices, and the bio, title and achievements a coach chooses to show.
• Couples and families — dance-pair links, couple photo and home club; links between a parent or guardian and their child.
• Lessons, groups and events— bookings and requests, attendance, cancellations (incl. late ones), a coach’s feedback on a lesson; camp and event registrations with partner name, arrival and departure, availability, notes, waitlist and requested lessons.
• Payments— what is owed and paid, your “I’ve paid” confirmations, the coach’s confirmation, refunds, and payment reminders sent. Coaches may upload a bank statement to match incoming payments; it is read for matching and not stored.
• Competition data — the ČSTS IDT and WDSF MIN you add, the results linked to them, and the public competition data used by Analysis.
• Content you add — training diary notes and videos (uploaded or linked), news posts, comments, reactions and mentions, ideas and bug reports with their votes and comments.
• Notifications — in-app notifications, your push subscription (if you turn push on) and private calendar-feed links.
• Technical and security data — sign-in session cookies, the IP address of sign-in and other rate-limited requests (deleted after 2 days), and a log of changes coaches and admins make to payments, events and the team (who did what, when).

• Running your membership and our services (contract) — your account, bookings, events, payments, reminders, calendar invites and notifications.
• Legal obligations — keeping payment records as tax and accounting law requires.
• Legitimate interests — keeping the Platform secure (rate limits, the change log, backups), sports analysis for members and coaches, and the history of the sport (the national champions list).
• Your choice — anything optional you add or switch on: photos, a public profile on our website, push notifications, competition IDs. You can change or remove it at any time.
• Visitors and enquiries(steps before a contract) — see “Website visitors and enquiries” below.

We never sell personal data and we don’t use it for advertising.

• Other memberssee the team roster — names, e-mail, competition IDs, couples and coaches’ profiles — so people can find partners, book and organise. Your phone and birthday are visible only to you, your parent or guardian, and coaches and admins.
• Coaches and admins see the bookings, registrations and payments they manage, and the attendance of their groups over the season (who came, who was excused). Admins can view the portal as another member sees it (read-only) to help and to check access.
• External participants(people on a camp or lesson who aren’t team members) see only their own data and their coaches’ names.
• Your training diaryis private to you; a linked parent sees their child’s. Uploaded videos are kept in private storage and opened only through short-lived links.
• The public sees only what you opt in to on our website (e.g. your couple or your coach profile on the team page).
• Other clubs on the Platform — when a signed-in person opens the club switcher, the clubs check with each other whether that e-mail also has a profile there. The answer is a plain yes or no; no other data is exchanged and nothing is stored.

You don’t need an account to request a lesson in an open window, register for a camp or join a waitlist on our website. For that we use your name, e-mail, phone if you give it and what you write, to arrange it and to contact you about it. The coach and the club staff handling it see it. We keep it while it is being arranged and, if it leads to a lesson or registration, together with the payment records (see How long we keep data); you can ask us to delete it at any time. Our website itself uses no tracking cookies; visits are counted without cookies.

The Analysis section processes competition data that the Czech DanceSport Federation (ČSTS) publishes on its website and API: results and placings, classes and points, entries, panels of judges and judges’ marks. It is downloaded automatically several times a day and covers everyone who competes in ČSTS events, not only our members. From it we compute statistics such as an ELO rating, class progress, placing forecasts and how a judge’s marks compare with the rest of the panel — a statistic from public marks, not an assessment of the judge as a person.

You see the analysis for the ČSTS IDT you add in Settings; coaches and admins see an overview of the team’s couples. Analysis is only available inside the portal, never in public. It is a pilot: the figures may be out of date or inaccurate. A dancer, a minor’s parent or a judge who objects to this processing can write to team@vision-danceteam.com; we will look at every objection without undue delay.

We use trusted providers who process data on our behalf, only as needed for their service:

• Supabase — database, sign-in and file storage, hosted in the EU (Ireland).
• Vercel — hosting (servers in Dublin, Ireland) and cookieless, aggregated visit statistics.
• Resend — e-mail delivery, incl. calendar invitations and the replies to them.
• Google— only if you choose “Sign in with Google”.
• Your browser’s push service (e.g. Apple, Google, Mozilla) — only if you turn on push notifications; it carries the notification text.
• GitHub — automated jobs that fetch public ČSTS data, and encrypted database backups kept for 30 days.
• ČSTS and WDSF — we send your IDT or MIN to their public interfaces to fetch your results.

Some of these providers are based in the United States. Where data leaves the EU, it is protected by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

The portal uses only what it needs to work: the sign-in session cookies, and small preferences such as your language, calendar view, theme, and whether you’ve seen the welcome tour (some kept in your browser’s local storage). There are no advertising or tracking cookies; visit statistics are collected without cookies.

We keep your data while your account is active. If your access is removed, your account is closed and no one can sign in with it; we keep the records we have a reason to keep, such as lesson and payment history, for as long as tax and accounting law or a legitimate interest requires. Rate-limit records are deleted after 2 days and backups after 30 days. You can ask us to delete your data at any time (see Your rights).

You have the right to access your data, to have it corrected or deleted, to restrict or object to processing, to data portability, and to withdraw any consent you gave. To use any of them, write to team@vision-danceteam.com; we answer within one month. You can also complain to the Czech data protection authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).

Many of our members are children. A child’s account is managed by their parent or guardian, who links it to their own account and acts for the child — booking, paying, registering and managing the profile and its privacy. We process minors’ data with the parent’s involvement and consent. Anything public about a child, including photos, is optional and the parent’s decision. A parent can ask for access to, correction of or deletion of their child’s data at team@vision-danceteam.com.

We may update this policy from time to time. The current version is always here, with the “last updated” date above; we let members know about significant changes in the portal. This policy is available in Czech and English; the English version is a translation, and if the two differ, the Czech version prevails.