Personal Data Processing Policy

1. Data controller

The controller of your personal data is [Razón social pendiente de confirmar], tax ID (NIT) [NIT pendiente de confirmar], domiciled at Medellín, Antioquia, Colombia ("Harmonia Baila").

Contact channel for anything related to personal data: email hola@harmoniabaila.example. You can also reach us on WhatsApp through the button on this website.

2. Legal framework

This policy is issued under Colombian Statutory Law 1581 of 2012 and Decree 1377 of 2013 (compiled into Decree 1074 of 2015), which develop the constitutional right to habeas data established in Article 15 of the Colombian Constitution.

3. Data we collect

This website uses no tracking cookies and no analytics tools. We only process the personal data you voluntarily give us:

• Through the contact form: name, email address, WhatsApp number (optional), selected interest, and the content of your message.
• Through WhatsApp: your phone number and the content of the conversation you start with us.
• In the studio's operations (outside this website): data needed to enroll and manage classes, processed under this same policy.

4. Purposes of processing

• Answering your request for information about classes, schedules and prices.
• Scheduling classes and managing our commercial relationship with you.
• Contacting you through the channels you indicate (email, WhatsApp).
• Meeting legal and accounting obligations where applicable.
• We never sell your data or use it for third-party advertising.

5. Authorization

We collect your prior, express and informed authorization through the checkbox in the contact form, which is unchecked by default and links to this policy. If you write to us directly on WhatsApp or by email, your voluntary message constitutes unequivocal conduct authorizing us to reply, as provided by Decree 1377 of 2013.

You may revoke your authorization at any time by writing to hola@harmoniabaila.example, unless a legal or contractual duty requires us to keep the data.

6. Your rights as data subject

• To know, update and rectify your personal data.
• To request proof of the authorization you granted.
• To be informed about how your data has been used.
• To revoke your authorization and/or request deletion of your data when there is no legal or contractual duty to keep it.
• To access your personal data free of charge.
• To file complaints with the Superintendence of Industry and Commerce (SIC) for legal violations, after first raising the matter with Harmonia Baila.

7. How to exercise your rights: inquiries and claims

Write to hola@harmoniabaila.example stating your name, the right you wish to exercise, a description of your request, and a channel where we can reply.

Inquiries (consultas): we answer within a maximum of ten (10) business days from receipt. If that is not possible, we will explain why and answer no later than five (5) business days after the first deadline expires.

Claims (reclamos): if you believe your data should be corrected, updated or deleted, or that the law has been breached, we will resolve your claim within a maximum of fifteen (15) business days from the day after receipt. If that is not possible, we will explain why and resolve it no later than eight (8) business days after the first deadline. If a claim is incomplete, we will ask you to complete it within five (5) days; if two (2) months pass without your response, the claim is deemed withdrawn.

8. Processors and international transfers

To operate this site we use technology providers that may process data outside Colombia:

• Vercel Inc. (United States): website hosting. It does not receive your form data.
• Web3Forms (form delivery service): transmits the contact form content to our email. It only processes the data you send when you press "Send message".
• Meta Platforms (WhatsApp): if you choose to contact us on WhatsApp, WhatsApp's own privacy policy applies in addition to ours.

9. Security and retention

We apply reasonable technical and administrative security measures: the site is served exclusively over HTTPS, the website itself stores no personal data in databases, and access to received emails is restricted.

We keep data only as long as needed for the purposes described or as required by law, and then delete it securely.

10. Children's and adolescents' data

Personal data of minors (for example, for kids' classes) is processed only with the authorization of their parents or legal guardians, always respecting the best interests of the child and their fundamental rights, as required by Article 7 of Law 1581 of 2012 and Article 12 of Decree 1377 of 2013. Photos or videos showing minors are published only with the express written authorization of their guardians.

11. National Database Registry (RNBD)

Under Decree 090 of 2018, the obligation to register databases in the SIC's National Database Registry applies to companies and non-profits with total assets above 100,000 UVT and to public entities. Harmonia Baila is below that threshold and is therefore not required to register; this does not exempt it from full compliance with Law 1581 of 2012, which this policy implements.

12. Validity and changes

This policy applies from its publication on this website and remains in force while Harmonia Baila processes personal data. Any substantial change will be published on this page with its update date and communicated before new purposes are applied.