Tinta Roja Erfurt
Deutsch

← Back to the home page

Privacy policy

This policy explains which personal data is processed when you visit this website and when you register through our ticket shop. It contains no sections on services we do not use: this website sets no cookies and runs no analytics in your browser (no tracking pixel, no measurement script), no social-media embeds and no embedded maps. Visitors are counted solely from the server log files, see section 3.

1. Controller

Foad Ghassemzadeh
Untere Eichstädtstraße 12A
04299 Leipzig, Germany
Phone: +49 176 344 880 31
E-mail: info@tinta-roja.com

The event is organised together with Nizam Levant, who has access to registration data for organisational purposes and acts under the controller’s instructions. No data protection officer has been appointed, as there is no legal obligation to do so.

2. Hosting

Website and ticket shop run on our own virtual server, which we administer ourselves. The server is located in the data centre of STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO provides the infrastructure only and has no access to the content; STRATO acts as a processor within the meaning of Art. 28 GDPR.

3. Visiting the website

The website consists of static pages. Fonts, images and the video are served from our own server. Opening the site does not connect your browser to any third-party server, sets no cookies, loads no tracking pixel and assigns no identifier that could recognise you.

Server log files

For technical reasons the web server records each request: IP address, date and time, requested address, status code, amount of data transferred, browser identification and the referring page. We use this data for secure operation, defence against attacks, troubleshooting and a simple visitor statistic: the log files are condensed into daily totals only (page views and visitors per day, pages viewed, referring sites, browser and device type, language version). This evaluation stores no IP address and no individual request. So that several requests from the same connection on the same day count as one visitor, and data centres can be told apart from home connections, the IP address is truncated during the evaluation (IPv4 to /24, IPv6 to /48) and its host name is looked up; both are discarded after the run. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a reliable and secure service and knowing how the site is used. Log files are deleted automatically after 14 days; the daily totals are kept without any personal reference.

4. Contact by e-mail

If you write to info@tinta-roja.com, we process your details to answer your request. The legal basis is Art. 6(1)(b) GDPR where your registration is concerned, otherwise Art. 6(1)(f) GDPR. Our mailbox is hosted by checkdomain GmbH, Große Burgstraße 27/29, 23552 Lübeck, Germany (processor within the meaning of Art. 28 GDPR, servers in Germany). We delete e-mails once the matter is settled and no retention obligation applies.

5. Registration through the ticket shop

Registration takes place in a ticket shop at tickets.tinta-roja.com/. It is based on the open-source software pretix and is operated by us on the same server as this website. No ticketing service provider is involved. This website merely links to it.

Data we collect

We do not ask for a billing or postal address. No invoices are issued.

What we use the data for

The data is used to process your registration, to review and approve it (as is customary at tango festivals, we aim for a balance of leaders and followers), to communicate with you about your registration, for admission at the venue and for accounting. The legal basis is Art. 6(1)(b) GDPR (contract). Your city helps us with planning, for example accommodation tips, and is based on Art. 6(1)(f) GDPR. Approval is done by us personally, not automatically.

E-mails from the ticket shop

The ticket shop sends you confirmations, the approval with our bank details, payment reminders, payment receipts and the link to your order. These e-mails are sent through the mailbox info@tinta-roja.com at checkdomain GmbH (see section 4). We do not send advertising.

Payment

Payment is by bank transfer to our business account only. Your bank and our bank process the transfer data (account holder, IBAN, amount, reference) under their own privacy rules. We see these details on our bank statement and match the payment to your order by the reference. We do not use payment providers such as PayPal.

Cookies in the ticket shop

The ticket shop sets strictly necessary cookies only: one for the session and shopping cart, one to protect against forged form submissions and, where applicable, one for the chosen language. These cookies are essential for operating the shop (§ 25(2) no. 2 of the German TDDDG) and require no consent. They are deleted when you close your browser or when the session ends.

Who sees the data

Only the two organisers have access to registration data. For organisational purposes we receive a daily summary of registrations (names, e-mail addresses, booked tickets, payment status) in our e-mail mailboxes. Two of these mailboxes are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Gmail). Google may also process data in the USA; Google LLC is certified under the EU-US Data Privacy Framework, which ensures an adequate level of protection (Art. 45 GDPR). Beyond that we do not pass your data on unless legally required.

How long we keep the data

We delete registration data no later than three months after the event, except for data we must keep for accounting (order, amount, payment received), which is subject to the statutory retention period of up to ten years (§ 147 of the German Fiscal Code). Waiting-list entries are deleted after the event at the latest. Registrations that are not approved or not paid are deleted no later than three months after the event.

Cancellation by you

As long as your registration is unpaid, you can cancel it yourself via the link in your confirmation e-mail. Paid tickets are cancelled by e-mailing us. The conditions are set out in the terms of participation.

6. Backups

Website and ticket shop are backed up daily: on the server itself (deleted after 14 days) and, transferred in encrypted form, to storage in Germany operated by the controller, which is updated continuously. Backups serve solely to restore data after loss (Art. 6(1)(f) and Art. 32 GDPR). Deleted data disappears from the backups with the next backup cycle.

7. Links to other websites

This website links to the venue (tango-erfurt.de) and the guest teachers (duddiesalome.com). You leave our site only when you click; the respective provider’s privacy policy then applies. None of these is embedded, and no data is transferred beforehand.

8. Security

All connections to the website and ticket shop are TLS-encrypted (https). Access to the ticket shop’s administration is password-protected and limited to the organisers.

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). Simply write to info@tinta-roja.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Sächsische Datenschutz- und Transparenzbeauftragte (Saxon Commissioner for Data Protection and Transparency), Maternistraße 17, 01067 Dresden, Germany, www.datenschutz.sachsen.de.

10. Obligation to provide data, automated decisions

You are not obliged to provide data. Without your name, e-mail address and city, and for passes and milonga tickets your role, we cannot process a registration. There is no automated decision-making or profiling.

Last updated: 16 September 2026. We will update this policy whenever the website, the ticket shop or the legal situation changes. This English version is provided for convenience; the German version is authoritative.