Privacy Policy

Version dated 16 October 2026.

This policy explains what personal data Dance Republic processes, what it is used for, who sees it, where it is stored, for how long and how you can exercise your rights. It applies to the dancerepublic.pt website, to the members' area (“Conta”, meaning Account) and to the Dance Republic mobile app (Android and iPhone).

Summary

• We use your data to manage the classes, payments, insurance, competition entries and communication with families and students.
• We do not sell data. There is no advertising. The website does not use advertising or tracking cookies. We only use the statistics of the service that hosts the website, which count visits and page loading times in aggregate, without cookies and without identifying who visits.
• Each person sees only what they need: families see their own students; teachers see what is necessary about the students in their classes; the school's Management sees what is necessary to run the school.
• Outside the website, the school only provides students' identification data, and only to the insurer and to the organisers of competitions. Health data is not provided to them (section 9).
• In the class chats, the Management has access to all messages (section 7).
• The database and the files of the members' area are kept in the European Union (Ireland).
• You can view and correct almost everything under Conta → Dados Pessoais (Account → Personal Data). In the same place, you can delete your account (section 13).
• For any request about your data, write to geral@dancerepublic.pt.

1. Who is responsible for your data

The two associations that use the Dance Republic Performing Arts brand — referred to in this text as “the school” — are jointly responsible for the processing of your data:

• CAPA G B CENTRO DAS ARTES PERFORMATIVAS - ASSOCIAÇÃO - AUGUSTO BASTOS, NIPC 519393473;
• Notorius Y Habilis - Associação, NIPC 514027630.

The contact details are the same for both:

• Address: Rua Pereira Azurar, n.º 36, 4490-543 Póvoa de Varzim.
• Email, for all matters, including requests concerning personal data: geral@dancerepublic.pt.
• Phone: +351 913 366 236.

The school does not have a data protection officer: questions about personal data are dealt with by the Management itself, through the email address above.

2. If you visit the website without an account

The pages. To show you the pages, the service that hosts the website (Cloudflare) receives your device's internet address (IP) and technical data about the request, such as the type of browser. This data is used only to deliver the pages and to protect the website against attacks. The school does not use it to find out who visits the website.

The language. The service that hosts the website also tells us the country the request comes from. We use it only to choose the language in which the website opens when you arrive without having chosen one (with the browser in Portuguese, it always opens in Portuguese); we do not store it.

No advertising or tracking. The website does not use advertising or tracking cookies. We only use the statistics of the service that hosts the website, which count visits and page loading times in aggregate, without cookies and without identifying who visits (section 17).

The forms. The public forms store what you write in them:

• Trial class request: the name and date of birth of the person who will be dancing, the name of the parent or guardian (if the dancer is a minor), the email address, the phone number, the class, the branch, the chosen day, the message (if you write one) and the acceptance of the Internal Regulations (Regulamento Interno, the school's document, available in Portuguese only). The request is immediately entered in the class; it is seen by that class's teacher and by the Management. If you create an account with the same email address within one week after the class, the request is transferred to your account. If you do not, the request and the data are deleted automatically from the 8th day after the class.
• Booking a service (for example, private lessons or wedding dance lessons): the name, the email address, the phone number, the service, the teacher, the number of sessions and the message. It is seen by the chosen teacher and by the Management. Requests from people without an account are kept for 12 months.
• Contact form: the name, the email address, the phone number, the branch of interest, the message and the page of the website from which you sent it. The message is kept for 12 months and reaches the school by email, with your email address as the reply address.
• News: the email address and, if you provided it, the name. We keep them until you leave the list: every news email includes a link to stop receiving them, and you can also ask the school.

To prevent abuse, the forms limit the number of submissions per hour or per day. They do not store the internet address (IP) of whoever sends them.

3. The members' area (“Conta”)

Who can have an account

• Accounts belong to parents or guardians and to adult students. Students under 18 do not have their own account: their details are provided by their parent or guardian. The exception is the emancipated minor, who is responsible for themselves once they have sent the document proving emancipation and the Management has approved it.
• When you create an account, you confirm your email address through a link we send you and declare that you have read and accepted this policy.
• To use the members' area, all accounts accept the school's Internal Regulations, which you can read at dancerepublic.pt/en/regulamento.
• When it is the school that registers a student, it creates the record with the name and contact details and sends an email with a link to continue the registration: to the parent or guardian, in the case of a minor, or to the student themselves, if they are an adult.
• Teachers and the Management have accounts with their own profiles, assigned by the school.

What we keep and what it is for

The account. Full name, email address, mobile number and password. The password is stored irreversibly: no one at the school can see it. This data is used to sign in to the account, to identify you and to contact you. Each account also has its own payment reference (DR-XXXXX), to identify your transfers.

Each student's record. To enrol a student in a class, the following are mandatory:

• the full name and date of birth — to identify the student and know whether they are a minor;
• the number and a copy (photo or PDF, front and back) of the Cartão de Cidadão (the Portuguese identity card) — to identify the student to the insurer and for competition entries. The copy is only kept with the authorisation you give in the record itself (“Autorizo a escola a guardar a cópia do Cartão de Cidadão para o seguro e a inscrição em campeonatos”, meaning “I authorise the school to keep the copy of the Cartão de Cidadão for the insurance and for competition entries”), and a record is kept of who gave the authorisation and when. Anyone who had already sent the copy before this authorisation existed is asked for the authorisation the next time they save the record. To withdraw it, speak to the school, which deletes the copy. The copy shows everything printed on the card; depending on the model, the back may include the taxpayer, social security and national health service user numbers;
• the NIF (tax identification number) and the address (street, number, additional address details, postcode and town) — for the insurance and for competition entries;
• diagnosed chronic illnesses, or a statement that the student has none — so that the teacher knows the student's limitations, can prevent injuries and knows how to act;
• the answer regarding image authorisation (section 6).

The following are optional: health notes (allergies, injuries and anything the teacher should know); the emergency contact (name and phone number), so that we can alert someone in an emergency; the student's photo, so that we can identify them; and the photos per class (section 6). An emancipated minor also sends the document proving emancipation.

The classes. Enrolments, trial classes and the chosen day, the dates of joining and leaving each class, whether the student is a soloist, and the acceptance of the Internal Regulations (who accepted, which version, date and time). This data is used to organise the classes and the monthly fees and to show you the history.

Payments. Monthly fees, annual insurance, enrolment fee, late payment fees, charges (for example, for costumes), booked services and benefits (discount, fixed amount or bursary). A benefit may have a reason, which only the Management sees. When you let us know that you have paid (“Já paguei”, meaning “I have paid”), we keep what you paid, how you paid (bank transfer, SPIN or in person), the note you wrote and the proof of payment (photo or PDF). This data is used to know what is due, to confirm what has been paid and to keep the school's accounts. The website never asks for bank card details.

The “Veste o teu logo” shop. The basket and the orders: products, sizes, quantities, the text to be personalised, the branch where you collect the order, the payment method and the proof of payment. This data is used to prepare and deliver the orders.

The class chats. The messages, the files that teachers send (photos, videos and documents) and how far you have read (section 7).

The calendar, notices and notifications. The school's events, notices from teachers and the Management, and members' area notifications, read or unread. They are used to keep you informed.

Devices with notifications (section 5) and copies of the emails sent (section 4).

Technical session data. The date of each sign-in to the account, the internet address (IP) and the browser. The account service keeps this data for security purposes.

The address from the postcode. When you type the postcode into the address, the website asks the public GeoAPI.pt service for the street and the town. It sends it only the postcode.

Who sees what

• The family (the account holder) — sees and corrects the data of the account and of their students, the classes, the payments and the orders. They do not see other families' data, except what appears in the class chats.
• The teacher — sees, for the students in their classes: the name, the date of birth, the photo, the contact details (the name, phone number and email address of the parent or guardian or of the adult student), the declared chronic illnesses, the health notes, the answer regarding image authorisation and the copy of the Cartão de Cidadão. This data is used to identify the student, prevent injuries and act in accordance with the declared illnesses, communicate with the family, handle competition entries and identify the student to the insurer. They also see those students' monthly fees, the charges they have issued to them and the chats of their classes. They do not see the NIF or the address.
• The Management — the people at the school with the academy management profile see everything in the members' area about the students, the families and the payments, including chronic illnesses, the copy of the Cartão de Cidadão and the proofs of payment, for the same purposes. They read all class chats (section 7). They can export, for internal use, the list of enrolled students (name, date of birth, NIF and Cartão de Cidadão number) and a sheet with the name and photo of the students in each class.
• Website administration — those who maintain the website and the accounts see the accounts (name, email address, profiles and the students of each account), the emails sent, the messages from the Contact form, the news list and the stored files. To keep the website running, they have technical access to the student records and the payments and can delete stored files; they do not read the messages in the class chats.
• Those who receive the payments — the school and the teachers who hold the bank accounts to which you make transfers see the payments made into their account and the corresponding proof of payment.
• The other members of the class chat — see your first name and the student's (for example, “Ana, enc. de educação de Pedro”, meaning Ana, parent or guardian of Pedro), the messages you write and a small version of the student's photo. The photo does not appear if you answered “Não” (No) to the image authorisation.
• Visitors to the website — see nothing of the members' area. Only what the school publishes is public: classes, timetables, teachers, gallery and shows.

Teachers' data. The name, role, photo and background that appear on the website are agreed with each teacher. The holder, the IBAN and the SPIN of the accounts that receive the payments are shown to the families who have to pay into those accounts.

4. Emails

• We send emails to: confirm the account and recover the password; continue a registration made by the school; let you know that a service request has been accepted; send the Internal Regulations you accepted and their updates; confirm that you have left a class and announce the end of the school year; communicate decisions of the Management (for example, on an emancipation request, a report or the suspension of a user's ability to write in the chats); confirm that the account has been deleted; and pass on the notices that the school decides to send by email as well. Requests and messages from the forms also reach the school by email.
• Emails are sent by Brevo, which receives your email address, your name and the content of the message.
• The website keeps a copy of every email sent (recipient, subject, text and delivery status) for 12 months, in order to resend an email that failed and to know what was sent.
• Brevo records whether the email was delivered and, by default, whether it was opened and whether the links were used. The school uses this information only to know whether the email arrived.
• Brevo adds to each email the “Anular subscrição” (Unsubscribe) option, which some email programs show next to the sender. If you use it, you stop receiving all emails from the school, including those relating to your account. The school can see that this address has been blocked and can unblock it at your request.
• News. Only those on the list receive the school's news by email: those who signed up in the website footer or ticked the news option when creating an account or making a request. Every news email includes a personal link to stop receiving them; if you leave by mistake, the same page lets you rejoin the list within 30 days. We never send third-party advertising.

5. Notifications on your mobile phone

What they are. Alerts that appear on your mobile phone, even with the app closed: members' area notifications and new messages in the class chats. Accounts that only manage the website do not receive notifications.

Where they are mandatory. In the Android app — and when the website is installed on the phone from the browser — the members' area only opens with notifications allowed (on phones that permit them), because they are the channel through which the school gives notice of changes to classes, of payments and of class messages. If you do not want them, you can use the members' area in the browser, where they are not requested: notifications continue to appear within the members' area.

In the iPhone app. The app asks for permission for notifications once, after you sign in to your account. It is optional: the members' area works without them.

What we keep about the device. The address or code that the notification service assigns to the device (on iPhone, Apple's code for the app on that device), the keys used to encrypt the messages (on Android and in browsers), the technical identification of the browser and of the system, the dates of registration and of the last delivery and, if any, the last error.

How they arrive. The notification is delivered by the notification service of the manufacturer of the device or of the browser (Google, Apple, Mozilla or Microsoft), which gets it to the phone. On Android and in browsers, it travels encrypted, and that service cannot read the content. On iPhone, Apple receives the title and the text of the notification, in order to display it on the device. The list of deliveries is deleted three days after each delivery.

When we delete the device's registration. When you sign out of your account on that device, when the notification service indicates that the registration no longer exists (for example, because you uninstalled the app or withdrew permission) and when you delete your account.

How to turn them off. In your phone's settings (on Android, Settings → Apps → Dance Republic → Notifications; on iPhone, Settings → Notifications → Dance Republic) or in your browser's settings for dancerepublic.pt. On Android, if you turn them off, the members' area will ask for them again the next time you open the app.

6. Photographs and image

• Image authorisation. Each student's record asks “Pode aparecer em fotos e vídeos para fins promocionais da academia?” (meaning “May the student appear in photos and videos for the academy's promotional purposes?”). The answer is given in Dados Pessoais and can be changed at any time. With “Não”, the school publishes nothing showing the student's image, and their photo no longer appears to the other members of the chats.
• Student's photo. It is optional. It is seen by the family, the teacher, the Management and, unless the answer is “Não”, the members of the chats of the student's classes.
• Photos per class. In Dados Pessoais, the family can add one photo of the student for each class in which they are enrolled. These photos are intended for the academy's photo album and for promotional purposes, can only be uploaded with the image authorisation set to “Sim” (Yes), and are seen by the family, the Management and the teachers of that class. When the student leaves the class, the school no longer sees that class's photo, which is deleted.
• Website gallery and social media. These are public. If you ask for a photo or a video to be removed, the school deletes it from the website and also removes it from its social media.
• Photos in the chats. The photos and videos that teachers send in the chats are seen only by the members of the class and by the Management.
• Gallery photos are not linked to accounts. Deleting your account does not remove them: if you would like them to be removed, please ask.

7. The class chats

• Who takes part. The teachers of the class and the families (or the adult students) whose enrolment in that class has been confirmed. Families write text only; only teachers send photos, videos and documents.
• The Management reads and moderates. The Management has access to all chats, in order to protect the students and ensure that this space is used properly. It can delete any message and suspend a user's ability to write in all chats, until it decides to lift the suspension; anyone who is suspended is informed by notification and by email.
• Deleting what you wrote. You can delete one of your messages up to 24 hours after sending it; “Mensagem apagada.” (Message deleted.) is shown in its place.
• Reporting. Any participant can report a message or a user. The report goes to the Management, with the name of the person who made it, the reason and, when it concerns a message, a copy of that message. The person reported is told that there is a report and what it concerns, but never who made it. Abusive content is removed as soon as the Management sees it, and the person who made the report receives a reply within 30 days.
• Word filter. A message containing offensive language, from a list defined by the Management, is not sent.
• Outside the class. What is shared in the chats (photos, videos and documents) may not be shared outside the class without express consent (Internal Regulations, Article 55).
• Complaints. You can submit them through the website's Contact form or to geral@dancerepublic.pt.

8. The mobile app

The app is called “Dance Republic” and is published in the name of the first of the two associations listed in section 1. It displays the website itself: the data processed is the same as this text describes.

• On Android. The website is opened through the phone's browser (normally, Google Chrome). The app only asks for permission for notifications; the camera and the files are requested by that browser, when you choose to send a photo or a document.
• On iPhone. The app may ask for the access listed below, and only uses each one when you choose that action:
  • the camera — to photograph the documents and the proofs of payment you send to the school, such as the Cartão de Cidadão, and, in the case of teachers, for the photos and videos in the class chats;
  • the microphone — only to record the sound of the videos that teachers make for the chats;
  • Photos — only to save an image, when you choose to save it;
  • notifications (section 5).
• In the app, the session lasts until you sign out of your account. In the browser, it ends when you close the browser or after 24 hours without use.
• The app has no advertising or usage statistics, does not track your activity in other apps or websites, and does not access the phone's location or contacts.
• The app is installed and updated through the phone's app store, which is governed by the rules of the respective manufacturer (Google or Apple).

9. Insurance and competitions

Outside the website, the school provides students' data only:

• to the insurer providing the student's annual insurance;
• to the organisers of the competitions in which the student is entered.

Only the identification data from the student's record (section 3) is passed on: the name, the date of birth, the number and the copy of the Cartão de Cidadão, the NIF and the address. This data is used to identify the student to the insurer and to enter them in competitions. Each of these entities processes the data according to its own rules.

Health data is not provided to anyone outside the school. Chronic illnesses and health notes are not passed on to the insurer or to the competition organisers: they are used only so that the teachers of the student's classes and the Management know each student's limits and know how to act in the event of special needs and chronic health problems.

Apart from these cases, the school only discloses data when required to do so by law.

10. The services the website uses

To function, the website uses the services below, which receive the data indicated solely in order to provide that service.

• Supabase (a Singapore company) — database, accounts and files: photos, copies of the Cartão de Cidadão, proofs of payment and chat files. The servers are located in Ireland, in the European Union. It is also through Supabase that the iPhone app's notifications are delivered to Apple.
• Cloudflare (a United States company) — hosts the website and delivers the pages, protects it against attacks, sends Android and browser notifications to the notification services, and forwards emails sent to dancerepublic.pt addresses to the school's mailbox. It operates on a network of servers in several countries.
• Brevo (a French company) — sends the emails.
• Google — Gmail, where the school's mailbox is (the messages from the forms and the replies by email arrive there), and the notification service for Android and the Chrome browser.
• Apple — the iPhone notification service.
• Mozilla and Microsoft — the notification services for the Firefox and Edge browsers.
• GeoAPI.pt — a public postcode service. It receives only the postcode.
• YouTube (Google) — only when the gallery has YouTube videos. The preview image comes from YouTube's servers, and the video opens in privacy-enhanced mode (youtube-nocookie.com), which only stores information on the device when the video is played.

Links to other services. WhatsApp, Messenger, Instagram, Facebook, TikTok, LinkedIn, Google Maps, Google Calendar and Outlook only receive data if you click on the link. From then on, that service's rules apply.

Outside the European Union. Cloudflare is a United States company and Supabase is headquartered in Singapore; Brevo, Gmail and the notification services may also process data outside the European Union. Supabase, Cloudflare and Brevo undertake, in their data processing agreements, to apply to these transfers the safeguards provided for in the GDPR, such as the standard contractual clauses approved by the European Commission.

We do not sell your data or share it for advertising purposes.

11. On what legal basis we process data

• To provide the service you have contracted (the classes and the enrolment): the account, the student's record, the enrolments, the payments, the insurance and competition entries, the chats, the notifications, the service emails and the orders.
• To comply with the law: keeping the payment history for accounting purposes.
• With your consent: the image authorisation, the student's photo and the photos per class, the news list, the copy of the Cartão de Cidadão (the authorisation you give in the student's record) and the health data you provide in the record. You can withdraw your consent at any time; this does not make what was done before unlawful.
• In the school's legitimate interest: enabling the Management to read and moderate the chats and to keep the reports, in order to protect the students; limiting abuse of the forms; and collecting amounts owed, even after the account has been deleted.

12. How long we keep data

• Account and student records — for as long as the account exists. Accounts with no enrolled students and no sign-ins for 3 years are deleted, with an email warning one month beforehand. When an account is deleted, the rules in section 13 apply.
• Trial class request without an account — deleted automatically from the 8th day after the class, if you do not create an account with the same email address.
• Service request without an account — 12 months.
• Messages from the Contact form — 12 months.
• News list — until you leave the list. If you leave through the link in an email, the record of your leaving is kept for 30 days, so that you can rejoin.
• Copies of emails sent — 12 months.
• Members' area notifications — read notifications are deleted 10 days after being read (only a technical marker, without the text, remains for 400 days, so that we do not notify you of the same thing again); the others, after 12 months.
• List of mobile phone notification deliveries — three days after each delivery.
• Registration of each device — until you sign out of your account on that device, withdraw permission or delete your account.
• Class chats (messages and files) — 2 years after they were sent.
• Payment history — 10 years, for accounting purposes.
• Proofs of payment (the files) — for as long as the account exists; when the account is deleted, the files are removed and only the payment record remains (what, how much, when and whether it was confirmed).
• Acceptance of the Internal Regulations — the same period as the payment history (10 years). If you delete your account, the record only remains if a student record is kept (section 13), and is removed with it at the end of that period; if no student record is kept, it is removed immediately.
• Technical session data — 90 days.

13. Deleting your account

You can delete your account at any time, on the website or in the app, under Conta → Dados Pessoais → Apagar a conta (Account → Personal Data → Delete account). If you have not yet accepted the Internal Regulations, theApagar a conta link is on the regulations screen itself: you do not need to accept them in order to delete your account. Before deleting, the website shows what will be deleted, what will be kept and whether there are any amounts outstanding, and asks you to confirm. It cannot be undone. You will receive an email confirming it.

If you can no longer sign in, you can ask the school to delete the account for you, by writing from the account's email address to geral@dancerepublic.pt; the page dancerepublic.pt/en/apagar-conta explains the same.

What is deleted

• access to the members' area and the account data (name, phone number and email address);
• the record of each student on the account: date of birth, address, NIF, Cartão de Cidadão (number and copy), health data, chronic illnesses, emergency contact, image authorisation, the photos (the one on the record and those for each class) and, if declared, the emancipation (the document sent and the record of the request);
• the class enrolments and the trial classes (if there are amounts outstanding, the enrolments remain as cancelled and with the dates only, and the benefits remain without the reason, so that the school knows which months the debt relates to and how much it is; the message you wrote when booking a class is removed);
• the messages you wrote in the class chats: the text is removed and “Mensagem apagada.” is shown in its place, for everyone; the files you sent there are also removed;
• the proof of payment files you sent (the payment record remains);
• the notifications, the devices registered for notifications, the preferences, the shop basket, the shop orders not yet paid for and the service requests to which no teacher had responded;
• the copies of the emails we sent you (the copy of the email confirming the deletion is removed 30 days later), the messages you left on the Contact form and your subscription to the news list with the same email address (and the record that you left that list, if you left it less than 30 days ago);
• on the accounts of teachers and of the Management: the notices the person created; on a teacher's account, also the link to their classes and the services offered (service requests to which they had not yet responded are cancelled, and the families who made them are notified);
• the record that you accepted the Internal Regulations, if no student record is kept.

A student record with nothing paid and nothing outstanding is deleted in full.

What is kept

• The payment history — what was paid, when and by whom: the student's name, the name of the account holder, the months and the insurance marked as paid, the charges, the enrolment fee, the payments you sent (without the file) and the paid orders. The school keeps it for 10 years, for accounting purposes; during that time, only the Management has access to it. Ten years after the account is deleted (and after the last transaction on that record), it is deleted automatically.
• If there are amounts outstanding — the account is deleted anyway, but the debt is not: your name, your contact details (phone number and email address) and the amounts owed on the day you deleted the account (what, from when and how much) are also kept, so that the school can settle them with you. The address and the NIF are not kept. This also covers what a student who was no longer attending classes left unpaid before leaving, and the monthly fee still owed for the 15-day notice period for leaving a class, even if that month has not yet started; the screen shows them before you confirm. The GDPR allows what is necessary for the defence of legal claims to be kept (Article 17(3)(e)). When the debt has been resolved — paid, cancelled by the school or deemed resolved by the Management — the contact details are deleted and only the payment history remains.
• A payment awaiting confirmation — continues to await the school's confirmation, without the account. If it is not confirmed, that amount remains owed.
• The acceptance of the Internal Regulations — when a student's record is kept, because there is payment history or there are amounts outstanding, the record that you accepted the Internal Regulations (who accepted, which version, date and time) is kept with it. It is deleted with the record, at the end of the 10 years.
• Teachers and the Management — a teacher's profile text, photo and class timetable are content of the school's website: they remain on the website until the Management changes them. Records of what a teacher or a member of the Management did in running the school (for example, confirming a payment) remain stored; in some of them, such as the decision on an emancipation request and the record of who removed the copy of a Cartão de Cidadão, the name of the person who made them is also kept.
• Reports in the chats — if a message of yours (or your account) was reported by another person, the Management keeps that report, with the copy of the reported message and the name under which you appeared in the chat: it is another person's complaint and the record that protects the students (the screen tells you how many there are before you confirm). The Management keeps it for 12 months after dealing with it. A report made by you remains with the Management, with the reason, but without your name. The school also keeps the report emails it has received.

Good to know

• If you come back later, you will have to create a new account and fill in your details again: the records that remained with the school are not linked again to a new account.
• The photos and videos in the school's gallery and on its social media are not linked to the account. If you would like them to be removed, please ask.
• The emails you have already received remain in your mailbox. Brevo keeps its delivery logs according to its own rules.
• Teachers and members of the Management delete their account in the same way, in Dados Pessoais. A Management account can only be deleted if another Management account exists, so that the members' area is never left without the Management.
• Accounts with the internal website administration profile (those of the people who maintain the website and the accounts) cannot be deleted directly in the members' area: if this applies to you, please speak to the Management first; once that profile has been removed, the account can be deleted like any other.

14. Your rights

You may, at any time:

• access your data — most of it is under Conta → Dados Pessoais; you can also request a complete copy;
• correct your data — in Dados Pessoais or by making a request to the school;
• erase your data — by deleting your account (section 13) or by making a request to the school;
• restrict the processing — for example, while we check a correction you have requested;
• receive your data in a file in a common format, to take it elsewhere (portability);
• object to what we do on the basis of legitimate interest;
• withdraw your consent — for example, by changing the answer regarding image authorisation in Dados Pessoais or by leaving the news list;
• ask for a person to review a decision taken automatically by the website (section 15).

How. Write to geral@dancerepublic.pt. It is free of charge. We reply within one month; in complex cases, the law allows this period to be extended and, if that is the case, we will let you know. We may ask you to confirm your identity.

Complaints. If you believe that your data is not being handled properly, you can lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese data protection authority, at www.cnpd.pt.

15. Automated rules

The website automatically applies certain rules decided by the school:

• it deletes trial class requests made without an account from the 8th day after the class;
• when you create an account with the same email address as a request made without an account, it adds the request to your account and, if the class has already taken place, enrols the student in the class;
• it calculates the monthly fees and, when the school has them in place, the enrolment fee and the late payment fees, and sends payment reminders;
• when you leave a class, it calculates the monthly fee owed for the 15-day notice period set out in the Internal Regulations;
• on 1 August, at the end of the school year, it removes all students from the classes and notifies the families by email;
• in the class chats, it does not send a message containing language from the list of words that are not allowed.

You can always ask the Management to review any of these decisions.

16. Security

• The whole website uses encrypted connections (HTTPS).
• Who sees what is decided in the database itself, profile by profile, and not only on the screen.
• Private files (Cartão de Cidadão, students' photos, proofs of payment and chat files) have no public address: they are opened with temporary links, which expire after a short time.
• Passwords are stored irreversibly.
• Whenever the browser allows it, photos sent to the gallery and to the chats are reduced in size on the device itself and have their location (GPS) removed before being sent.
• On Android and in browsers, notifications travel encrypted all the way to the device.
• Those who work at the school have a duty of confidentiality regarding the data to which they have access (Internal Regulations, Article 60).

17. Cookies and storage on your device

The website does not use advertising or tracking cookies. We only use the statistics of the service that hosts the website (Cloudflare Web Analytics), which count visits to the public pages and their loading times in aggregate, without cookies and without identifying who visits; there are no statistics in the members' area or in the apps.

To function, it stores in your browser only what is strictly necessary:

• the session, so that you do not have to sign in on every page. In the app, it lasts until you sign out of your account; in the browser, it ends when you close the browser or after 24 hours without use;
• a technical session cookie, with no identifier, which disappears when you close the browser, and the time of last use — these are what the website uses to know when to end the session;
• the shortcuts and the counters in the app bar and the account's profiles, to display the menus (they are deleted when you sign out of your account);
• the device's registration for notifications;
• the indication that the account still has the Internal Regulations to accept (removed when you accept them or sign out of your account) and a note of the notices you have closed, so that they do not appear again;
• for 24 hours, the code of a registration link sent by the school;
• technical preferences (for example, that the device is a mobile phone) and browsing preferences, some only while the tab is open;
• the language you choose on the website, in a cookie that lasts one year;
• copies of the website's own pages and files, so that it opens more quickly and can show the latest version when there is no connection. Your account data is never stored in these copies.

The service that stores the database and the files (Supabase, through Cloudflare) may set a technical security cookie, which lasts 30 minutes and is used to distinguish people from automated programs.

Because they are strictly necessary, they do not require your consent. You can delete them in your browser's settings; you will then have to sign in to your account again.

18. Changes to this policy

When this policy changes, we update the date at the top. If the change is significant, we will let you know in the members' area or by email.