Juridisk person: SocialDancer is operated by David Freiholtz, a private person (not a company) based in Sweden.

Personuppgiftsansvarig: David Freiholtz is the data controller responsible for your personal data processed through this website.

Jurisdiktion: Denna tjänst verkar under svensk och EU-lag, inklusive fullständig GDPR-efterlevnad.

Affärsstruktur: Personligt projekt som drivs av en individ, inte ett registrerat företag

This Privacy Policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679 and Swedish data protection laws. We process personal data based on the following legal bases:

• Samtycke: För valfria funktioner som AI-sökning och nyhetsbrevsprenumerationer
• Contract: To provide the services you've signed up for
• Berättigat intresse: For security, fraud prevention, and service improvement

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

Personuppgiftskategorier:

• Kontoinformation: Email address, username, encrypted password, optional profile information
• Användningsdata: IP address, browser type, pages visited, time and date of visits, time spent on pages
• Preferensdata: Dance style preferences, favorite events, bookmarked content
• Kommunikationsdata: Messages you send us, feedback, support requests
• Tredjepartsdata: If you sign in with Google, we receive your name and email from your Google account

Cookies: We use essential cookies for authentication and session management. We use functional cookies to remember your preferences. All cookies are first-party only.

Syften för behandling:

• Tjänsteleverans: To create and manage your account, provide access to dance event information, enable event bookmarking and preferences
• Communication: To send service-related emails (password resets, security alerts, major updates)
• Förbättringar: To analyze usage patterns, identify bugs, develop new features based on user needs
• Missbruksförebyggande: To detect and prevent spam, abuse, and harmful queries in our AI search system
• Regelefterlevnad: To comply with legal obligations, resolve disputes, enforce our agreements
• Säkerhet: To detect and prevent fraud, unauthorized access, and other harmful activity

Lagring: We retain your account data while your account is active. Usage logs are deleted after 90 days. You can request deletion at any time.

Databehandlare (underbehandlare):

• Google LLC (Gemini AI): Processes all search queries (our only search method). Data processing location: Global. Legal basis: Legitimate interest in providing search functionality. Data shared: Search queries only, no personal account information. We also retain search queries for misuse prevention and service improvement.
• Fly.io Inc: Infrastructure hosting provider. Data processing location: Stockholm, Sweden (EU). All data is encrypted in transit and at rest. DPA (Data Processing Agreement) in place.
• Supabase Inc: Database hosting provider. Data processing location: Stockholm, Sweden (EU). Stores all account data, event information, and user preferences. All data is encrypted in transit and at rest. GDPR compliant with EU data residency.

Other Disclosures: We may disclose your information if required by law, court order, or governmental authority. We will notify you of such disclosures unless legally prohibited.

Affärsöverföringar: In the unlikely event of a merger or acquisition, user data would be transferred to the successor entity, and you would be notified before any transfer occurs.

Your GDPR Rights:

• Rätt till tillgång (artikel 15): Begär en kopia av dina personuppgifter som vi behandlar
• Rätt till rättelse (artikel 16): Begär rättelse av felaktiga personuppgifter
• Rätt till radering (artikel 17): Begär radering av dina personuppgifter ('rätten att bli glömd')
• Rätt till begränsning (artikel 18): Begär begränsning av behandling av dina personuppgifter
• Rätt till dataportabilitet (artikel 20): Få din data i ett strukturerat, vanligt använt format
• Rätt att invända (artikel 21): Invända mot behandling baserad på berättigade intressen
• Rätt att återkalla samtycke: Återkalla samtycke för behandling när som helst

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days as required by GDPR.

Dataskyddskontakt:

Personuppgiftsansvarig: David Freiholtz
Email: [email protected]
Svarstid: Inom 30 dagar enligt GDPR artikel 12(3)

Tillsynsmyndighet:

You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY):
Webbplats: www.imy.se
Address: Box 8114, 104 20 Stockholm, Sverige
Telefon: +46 8 657 61 00