PRIVACY POLICY
PRIVACY POLICY
Last updated: 01 April, 2026
-
Data controller
The controller responsible for processing personal data through this website is:
Ishankhanova Khalichakhon
trading as Oiposho Dance Studio
Erich-Nehlhans-Straße 19
10247 Berlin
Germany
Email: admin@oiposho.com
Website: www.oiposho.com
-
General information
We take the protection of your personal data seriously. Personal data means any information that can identify you directly or indirectly, such as your name, email address, telephone number, IP address or booking information.
We process personal data only where necessary to operate our website, respond to enquiries, organise and book our classes, process payments or send our newsletter.
The principal legal bases are:
-
Article 6(1)(a) GDPR – consent;
-
Article 6(1)(b) GDPR – performance of a contract or pre-contractual measures;
-
Article 6(1)(c) GDPR – compliance with a legal obligation;
-
Article 6(1)(f) GDPR – legitimate interests.
-
Hosting and Wix website platform
This website is provided through Wix.com. The relevant European provider is:
Wix Online Platforms Limited
1 Grant’s Row
Dublin 2 D02HX96
Ireland
When you visit the website, the following information may be processed:
-
IP address;
-
date and time of access;
-
pages and files requested;
-
browser type and version;
-
operating system;
-
device information;
-
referring URL;
-
technical log and security information.
This processing is necessary to provide a secure and technically reliable website. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and uninterrupted operation of our online services.
Wix may process information in different countries. Where information is processed outside the European Economic Area, the transfer is based on an adequacy decision, appropriate safeguards such as the European Commission’s Standard Contractual Clauses, or another legally recognised transfer mechanism.
Further information: https://www.wix.com/about/privacy
-
Cookies and similar technologies
Our website uses cookies and comparable technologies. Some are strictly necessary for the website and its basic functions to operate properly. Other technologies, including those used for analytics, embedded media or marketing, are activated only with your consent where such consent is legally required.
Strictly necessary cookies are used pursuant to Section 25(2) TDDDG and Article 6(1)(f) GDPR.
Non-essential cookies and comparable technologies are used on the basis of your consent pursuant to Section 25(1) TDDDG and Article 6(1)(a) GDPR.
You can change or withdraw your consent at any time through the website’s cookie settings. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
You can also delete or block cookies through your browser settings. This may restrict certain website functions.
-
Contacting us
When you contact us by email, telephone, contact form, social media or another method, we process the information you provide. This may include:
-
first and last name;
-
email address;
-
telephone number;
-
the content of your message;
-
other information you provide voluntarily.
We use this information to respond to your enquiry and communicate with you.
Where your enquiry concerns a contract or potential booking, the legal basis is Article 6(1)(b) GDPR. General enquiries are processed on the basis of our legitimate interest in responding to communications under Article 6(1)(f) GDPR.
We delete this information when it is no longer required to handle your enquiry, unless statutory retention obligations apply.
-
Class bookings, registrations and customer accounts
When you book a class, project, event, membership or another service, we may process:
-
your name;
-
contact details;
-
the service booked;
-
booking date and attendance information;
-
billing and payment information;
-
cancellation or refund information;
-
voluntary messages;
-
information associated with a customer account, where applicable.
Processing is necessary to manage the booking and perform the contract. The legal basis is Article 6(1)(b) GDPR.
Information relevant to accounting and taxation is retained pursuant to Article 6(1)(c) GDPR for the applicable statutory retention periods.
Please do not send health information or other sensitive personal information unless it is strictly necessary and has been agreed with us in advance.
-
Payment processing
When you make a paid booking, the information necessary to process the payment is transmitted to the payment service you select. Depending on the payment options enabled at checkout, this may include Wix Payments, PayPal, Stripe or another provider identified during the booking process.
We generally receive only the information necessary to identify and administer the payment. Complete credit-card or banking details are normally processed directly by the relevant payment provider.
The legal basis is Article 6(1)(b) GDPR. Payment and accounting records that must be retained by law are also processed pursuant to Article 6(1)(c) GDPR.
Please consult the privacy notice of the payment provider shown during checkout for further information.
-
Newsletter and mailing list
You can subscribe to our newsletter or mailing list through our website. We process your email address and, where applicable, technical information relating to your subscription and confirmation.
We send newsletters only on the basis of your consent under Article 6(1)(a) GDPR. Where available, we use a confirmation process to document subscriptions and prevent misuse.
You may withdraw your consent at any time by using the unsubscribe link in an email or contacting oiposho.berlin@gmail.com.
After you unsubscribe, your address will be removed from the active mailing list. We may retain limited evidence where necessary to demonstrate the original consent or subsequent withdrawal.
The newsletter may be distributed using Wix’s email and marketing services.
-
Embedded YouTube videos
Our website may contain videos embedded from YouTube, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When you activate a video, a connection may be established with YouTube or Google. This may transmit your IP address, device information and information about the page you visited. If you are logged in to YouTube or Google, this information may be associated with your account.
Where legally required, YouTube content is loaded only after you provide consent. The legal basis is Article 6(1)(a) GDPR together with Section 25(1) TDDDG.
Information may be transferred outside the European Economic Area, particularly to the United States. Further information is available at: https://policies.google.com/privacy
-
Social-media links
Our website contains links to our profiles on Instagram, Facebook, TikTok and YouTube. Merely visiting our website does not normally cause these links to transmit information to the respective platform. When you click a link, you leave our website and establish a direct connection with that platform.
The relevant platform operator is generally responsible for the subsequent processing. Please note that social-media platforms may also process personal data outside the European Economic Area.
-
Recipients of personal data
Where necessary, personal data may be disclosed to the following categories of recipients:
-
hosting, website and IT service providers;
-
booking and customer-management systems;
-
payment providers and banks;
-
newsletter and communication service providers;
-
accountants and tax advisers;
-
courts, authorities or other public bodies where disclosure is legally required.
Providers processing personal data on our behalf are contractually bound in accordance with applicable data-protection requirements.
-
Retention periods
We retain personal data only for as long as necessary for the purpose for which it was collected.
Information may be retained for longer where statutory obligations apply, particularly taxation and commercial-record requirements. Contracts and invoices may therefore be retained for the applicable statutory periods.
Information processed on the basis of consent is generally retained until consent is withdrawn, unless another legal basis or retention obligation applies.
-
Children and minors
Some of our classes may be attended by people under 18. Contracts and paid bookings involving minors may be made only with the legally required consent of a parent or legal guardian.
Our website is not specifically directed at children under 16, and we do not knowingly invite children to submit personal data without parental consent.
-
Your rights
Subject to the applicable legal requirements, you have the right to:
-
obtain information about personal data we hold about you;
-
have inaccurate or incomplete information corrected;
-
request the deletion of your information;
-
request restriction of processing;
-
receive certain information in a portable format;
-
object to processing based on legitimate interests;
-
withdraw consent with future effect;
-
lodge a complaint with a data-protection authority.
To exercise your rights, contact oiposho.berlin@gmail.com.
The relevant supervisory authority is:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany
Website: https://www.datenschutz-berlin.de
-
Objection to direct marketing
Where we process personal data for direct-marketing purposes, you may object at any time. Following your objection, we will no longer use your information for those purposes.
-
Data security
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or disclosure. Data transmitted through our website is encrypted using HTTPS or TLS.
However, completely secure transmission of information over the internet cannot be guaranteed.
-
Automated decision-making
We do not use solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
-
Changes to this Privacy Policy
We may update this Privacy Policy if our website, the services we use or the applicable legal requirements change. The version published on this website at the relevant time will apply.