Privacy
Privacy Policy
This site sets no cookies and loads nothing from third parties when you open it. What we do process is set out below.
This English text is a translation for your convenience. The German version is the legally binding one. In case of any discrepancy between the two, the German version prevails.
Rewritten on 5 November 2026 — to be checked by a lawyer before going live. The earlier policy described the old site's technology and no longer fitted: WordPress plugins, a cookie tool, Google services. This text describes what the site demonstrably does. Three items marked ⬚ still need confirming: two retention periods and the name of the hosting provider.
1. Who is responsible
The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Kiarash Sanei Kashany
Mercedesstraße 7
70372 Stuttgart
Germany
Phone: +49 174 233 2742
E-mail: info@latin-festival.de
2. The principle: as little as possible
This website sets no cookies, includes no analytics services, and loads nothing from third-party servers when you open it. You can read all of it without any personal data reaching third parties.
The typefaces are served from our own server too. Many websites load them from Google, which transmits every visitor's IP address to Google. That does not happen here.
Third parties are involved in exactly two places — and only after you have done something: the ticket shop (section 6) and the WhatsApp community (section 7).
3. Server logs
When you open a page, our server automatically stores the details your browser transmits:
- IP address
- date and time of the request
- the address requested
- browser type and operating system
- the page visited previously, where your browser sends it
These details are technically necessary to deliver the page and serve the security of its operation (defending against attacks, finding faults). They are not merged with other data and are not evaluated to build a picture of you.
Legal basis: Article 6 (1) (f) GDPR — our legitimate interest in secure and fault-free operation.
⬚ Logs are deleted after seven days.
4. Contacting us by e-mail or telephone
If you write or call, we process your details solely in order to answer your enquiry. The legal basis is Article 6 (1) (b) GDPR where a contract is concerned, otherwise Article 6 (1) (f) GDPR.
We keep the message for as long as needed to deal with it and delete it afterwards, unless statutory retention periods say otherwise.
5. Registering for the bootcamp and the Jack & Jill
These two events have a registration form. We collect only what we need in order to run them:
- Bootcamp: chosen package, first and last name, e-mail address, country, telephone number, and your Instagram name if you wish
- Jack & Jill: role (leader or follower), first and last name, city, country, e-mail address, telephone number
What for: to allocate your place, to tell you about the schedule and any changes, and for the bootcamp also to match your payment. Legal basis: Article 6 (1) (b) GDPR (performance of a contract, or steps prior to entering into one).
The details are stored on our server, in an area that cannot be reached from the internet. Only the organiser has access, after entering a password. They are not passed to any third party — no service provider processes these registrations.
After registering you receive a confirmation by e-mail. It is sent through the mail server of our hosting provider.
⬚ Registration data are deleted three months after the festival, unless tax retention obligations apply.
6. Ticket shop (TicketPAY)
Our tickets are sold through TicketPAY. The shop is embedded on the tickets page, but it is only loaded when you click “Load the shop”. Before that, no connection to TicketPAY is made and nothing about you is transmitted there.
By clicking, you consent to it being loaded (Article 6 (1) (a) GDPR). From that moment TicketPAY processes your data as its own controller — including your IP address and everything you enter there. TicketPAY's privacy terms apply to the purchase: ticketpay.de/datenschutz
You can also open the shop in a new tab instead of loading it here.
7. WhatsApp community
The site mentions our WhatsApp community. This is an ordinary link — nothing is loaded and nothing is transmitted unless you click it.
If you join the community you leave this website. Your telephone number and your WhatsApp profile name are then visible to the other members. The operator is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a company of Meta Platforms. WhatsApp processes the data as its own controller, including transfers to third countries; we have no influence over this.
WhatsApp's privacy policy: whatsapp.com/legal/privacy-policy-eea
We ourselves use the community only to pass on information about the festival. You can leave at any time, or write to us at info@latin-festival.de; the lawfulness of processing up to that point remains unaffected.
8. Hosting
⬚ This website is operated by a provider in Germany. A data processing agreement under Article 28 GDPR is in place with them.
9. Your rights
You have the right at any time to:
- information about the data we hold (Article 15 GDPR)
- rectification of inaccurate data (Article 16 GDPR)
- erasure (Article 17 GDPR)
- restriction of processing (Article 18 GDPR)
- data portability (Article 20 GDPR)
- object to processing (Article 21 GDPR)
- withdraw consent, with effect for the future (Article 7 (3) GDPR)
Please write to info@latin-festival.de.
Independently of this, you may lodge a complaint with a supervisory authority (Article 77 GDPR). The competent authority is generally that of your place of residence or of our registered office — for us, the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
10. Data security
The site is transmitted exclusively in encrypted form (HTTPS). Registration data are held outside the publicly reachable area and can only be viewed after signing in with a password.
11. Changes to this policy
We adapt this policy when the site changes or the law requires it. The version published here is always the one that applies.