Last updated: 28/10/2026
This privacy policy explains which personal data we process when you visit unidanza.de, buy tickets for UNiDANZA or attend the festival, and what rights you have under the EU General Data Protection Regulation (GDPR).
1. Controller
Verein für Tanz und Kultur in Hamburg e.V.
Sachsentor 13, 21029 Hamburg, Germany
Represented by the board: Luis Carlos Simoes Duarte
Email: contact@unidanza.de
Telephone: +49 176 49653700
2. Your rights
You have the right to access your personal data (Art. 15 GDPR), to have it corrected (Art. 16), erased (Art. 17) or its processing restricted (Art. 18), and to receive it in a portable format (Art. 20). Where processing is based on your consent, you can withdraw your consent at any time with effect for the future (Art. 7 (3)). To exercise your rights, write to contact@unidanza.de.
Right to object: where we process your data on the basis of our legitimate interests (Art. 6 (1) (f) GDPR), you can object at any time for reasons arising from your particular situation (Art. 21 GDPR). We will then stop the processing unless we can demonstrate compelling legitimate grounds that override your interests.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (the Hamburg Commissioner for Data Protection and Freedom of Information).
3. Hosting and server log files
Our website is hosted by Hostinger International Ltd., Cyprus, on servers in the European Union. Hostinger processes data on our behalf under a data processing agreement (Art. 28 GDPR).
When you visit our website, the server automatically records technical information that your browser sends: IP address, date and time of the request, the page requested, the referring page, browser type and version, and operating system. We need this data to deliver the website and to keep it stable and secure. The legal basis is our legitimate interest in a secure, working website (Art. 6 (1) (f) GDPR). Log files are deleted after a short period, unless longer storage is needed to clarify a security incident.
The website uses TLS encryption, recognisable by “https” in the address bar.
4. Cookies and consent
We only use cookies that are necessary to operate the website, unless you consent to others. Necessary cookies are set on the basis of § 25 (2) no. 2 TDDDG and our legitimate interest (Art. 6 (1) (f) GDPR); all other cookies only with your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). Details of the cookies we use are listed in our Cookie Policy.
To manage your consent we use CookieYes, provided by CookieYes Limited, United Kingdom. CookieYes stores your choice in a cookie on your device and keeps a record of your consent (consent ID, date and time, the categories you chose and browser information) so that we can prove the consent, as required by Art. 7 (1) GDPR. The legal basis is our legal obligation (Art. 6 (1) (c) GDPR). The European Commission has recognised the United Kingdom as providing an adequate level of data protection. You can change or withdraw your consent at any time through the “Cookie Settings” button in our Cookie Policy.
5. Buying tickets
Our ticket shop is provided by pretix GmbH, Heidelberg, Germany, which processes data on our behalf under a data processing agreement (Art. 28 GDPR). When you buy tickets, we process:
- the name of each ticket holder,
- your email address and telephone number,
- billing details, where requested in the checkout,
- order details, payment status and, at the festival, the time your ticket is checked in.
We use this data to conclude and perform the contract, to issue personalised tickets, to contact you about your order and the festival, to check tickets at the entrance, to handle name changes and for our accounting. The legal basis is the performance of the contract (Art. 6 (1) (b) GDPR) and our legal obligations under tax and commercial law (Art. 6 (1) (c) GDPR). Without this data we cannot sell you a ticket.
Payments are processed by the payment service provider you choose in the checkout. These providers receive the payment details needed for the payment and process them partly as independent controllers under their own privacy policies.
The ticket shop remembers your open shopping cart with a cookie, so that you can resume your checkout (see our Cookie Policy). When you open the checkout, it is loaded from pretix.eu.
We keep order data for as long as we need it to perform the contract. Accounting records are kept for the statutory retention periods under German tax and commercial law (§ 147 AO, § 257 HGB), which are up to 10 years.
Information about the festival. By buying a ticket for yourself or for another person, you agree that we may contact you and the ticket holders named in your order by email about changes to the event and organisational matters, for example the schedule, the venue, entry or the programme. For this purpose pretix passes the names and email addresses of the buyer and the ticket holders and the products booked in the order to our website, where we keep them in our contact management (FluentCRM, which runs on our own website server, see section 3). We send these emails through Amazon Simple Email Service (see section 7). If an order is canceled, we remove the booked products from the contact data. The legal basis is the performance of the contract (Art. 6 (1) (b) GDPR). You can object to these emails at any time at contact@unidanza.de; important information about your ticket may still be sent to you.
News about future events. By buying a ticket for yourself or for another person, you also agree that we may use the email addresses of the buyer and the ticket holders to tell you about future editions of UNiDANZA and other events we organise under our group name Timbatribe, such as Crazy 4 La Timba. These emails come from us, Verein für Tanz und Kultur in Hamburg e.V., the organiser of all Timbatribe events; we do not pass your data to other organisers. The legal basis is our legitimate interest in promoting our own events to our guests (Art. 6 (1) (f) GDPR and § 7 (3) of the German Act against Unfair Competition, UWG). You can object to these emails at any time, at no cost other than the usual transmission costs: every email contains an unsubscribe link, or write to contact@unidanza.de. If you buy a ticket for another person, please pass this information on to them. We keep the contact data for these emails until you unsubscribe; after that we only keep your email address marked as unsubscribed, so that you receive no more promotional emails.
6. Personalised tickets and ID check at the entrance
Our tickets are personalised. To prevent ticket fraud and unauthorised resale, we compare the name on your official photo ID with the name on your ticket at the entrance. We only look at your ID; we do not copy, scan or store it. The legal basis is the performance of the contract (Art. 6 (1) (b) GDPR) and our legitimate interest in ensuring that only the rightful ticket holder is admitted (Art. 6 (1) (f) GDPR).
If you buy a “Ticket Name Change”, we process the ticket number and the names and email addresses of the previous and the new ticket holder that you enter in the order, in order to check the request, send the new ticket holder their ticket by email and invalidate the previous ticket (Art. 6 (1) (b) GDPR).
7. Contact form and email
If you contact us through the form on our website or by email, we process the data you provide (such as your name, email address and message) to answer your enquiry. Messages sent through the form are stored in our website database and forwarded to us by email. We send these emails through Amazon Simple Email Service, provided by Amazon Web Services EMEA SARL, Luxembourg, and through our email provider. The legal basis is the performance or preparation of a contract where your enquiry relates to one (Art. 6 (1) (b) GDPR), otherwise our legitimate interest in answering your enquiry (Art. 6 (1) (f) GDPR). We delete your enquiry once it has been dealt with, unless statutory retention obligations apply.
To protect the contact form from spam, it contains hidden fields that people do not see but automated programs fill in, and a check that only works when JavaScript runs in your browser. Messages that fail these checks are rejected and not stored. These checks run on our own server: no data is passed to third parties for this and no cookies are set. The legal basis is our legitimate interest in protecting our website from abuse (Art. 6 (1) (f) GDPR).
8. Fonts
Our website uses fonts from Adobe Fonts, provided by Adobe Systems Software Ireland Limited, Ireland. When a page loads, your browser connects to Adobe’s servers, which receive your IP address. The legal basis is our legitimate interest in a consistent design (Art. 6 (1) (f) GDPR).
9. Statistics and advertising (only with your consent)
If you allow it in our cookie banner, we use the services below. Without your consent they are not loaded at all. You can withdraw your consent at any time with effect for the future through the “Cookie Settings” button in our Cookie Policy. The legal basis is your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR).
Google Analytics (category “Analytics”), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics shows us how visitors use our website, for example which pages are viewed, how long visits last and from which website or campaign visitors arrive. For this, Google processes information about your device and browser, the pages you visit and an online identifier stored in cookies (see our Cookie Policy). Google Analytics does not store IP addresses. We only look at the data in aggregated form. Event data is deleted automatically after at most 14 months. More information: Google Privacy Policy.
Meta Pixel (category “Advertisement”), provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The Meta Pixel lets us measure how well our ads on Facebook and Instagram work and show our ads to people who have visited our website. For this, Meta processes information about your device and browser, the pages you visit and an identifier stored in a cookie, and may link it to your Facebook or Instagram account if you have one. We and Meta are jointly responsible for collecting this data on our website and transmitting it to Meta (Art. 26 GDPR); Meta alone is responsible for what happens to it afterwards. More information: Meta Privacy Policy.
In the ticket checkout, pretix asks for your consent separately. Only if you agree there does the shop report information about your purchase (such as order value, currency and the products bought) to Google Analytics and Meta, so that we can measure our advertising.
10. Links to social media
Our website links to our profiles on Facebook, Instagram and WhatsApp. These are simple links: no data is sent to these services until you click one. When you visit them, the privacy policy of the respective provider (Meta Platforms Ireland Limited) applies.
11. Photos and videos at the festival
Photographers and videographers take pictures and videos at the festival. We use them to document the event and to promote UNiDANZA on our website and our social media channels. The legal basis is our legitimate interest in documenting and promoting the festival (Art. 6 (1) (f) GDPR). If you do not want to appear in published recordings, please tell our team at the event or write to contact@unidanza.de; you can object at any time (Art. 21 GDPR).
12. Transfers to countries outside the EU
Some of the providers named above (Google, Adobe, Amazon, Meta) may process data in the United States. These providers are certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision, or transfers are based on the European Commission’s standard contractual clauses (Art. 46 (2) (c) GDPR).
13. Storage period
Unless stated otherwise above, we delete personal data as soon as it is no longer needed for the purpose for which it was collected, unless statutory retention obligations require longer storage.
14. Changes to this privacy policy
We update this privacy policy when our website, our ticket sales or the law change. The current version is always available on this page.