Privacy

Privacy Policy

Tango MJ — trading name of Het Waterwerk Rimburg V.O.F.

Last updated: 24 October 2025

This policy explains how personal data is collected, used, shared and protected when you visit our websites (including Che, Hablemos) or use our services. It applies to all website visitors and service users.

1. Introduction & scope

Tango MJ (a trading name of Het Waterwerk Rimburg V.O.F.) values your privacy and protects personal data in accordance with the EU General Data Protection Regulation (GDPR) and Dutch data protection law. This policy covers every visitor to our websites and everyone who uses our services, including Spanish lessons offered under the Che, Hablemos name.

2. Data controller

3. Personal data we collect

We collect personal data for the following purposes:

• Class and event registration — name, email address, phone number, postal address and date of birth.
• Payment processing — billing address, VAT number and transaction data.
• Communication — your email address and the content of your correspondence with us (including messages sent through our contact forms).
• Website analytics — IP address, browser type and pages visited.
• Marketing and newsletters — collected only with your consent.
• Photos and videos taken at events.

Special categories of personal data are only collected where you give explicit consent and there is a clear legal basis.

4. Legal basis for processing

We process personal data on one or more of the following legal bases:

• Consent — for newsletters and photographs.
• Performance of a contract — for class enrollment and delivery of our services.
• Legal obligation — for bookkeeping and tax requirements.
• Legitimate interests — for improving our services and preventing fraud.

Where processing is based on consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.

5. Data sharing & disclosure

Personal data may be shared with:

• Service providers and processors — for payment processing, email, hosting and analytics.
• Legal authorities — where required by law.
• Third parties with your explicit consent.
• A successor entity in the event of a merger, acquisition or other business transfer.

Any transfer of personal data outside the European Economic Area (EEA) is subject to adequate safeguards, such as the European Commission's Standard Contractual Clauses.

6. Data retention

• Enrollment records and invoices — 10 years.
• Marketing and newsletter data — until you unsubscribe.
• Analytics and server logs — 3 years.
• Media and photos — for the duration of the event, or until you request deletion.

Once a retention period expires, data is securely deleted or anonymized.

7. Data security & protection

We protect personal data using encryption (SSL/TLS), secure servers, access controls, regular audits and staff training. If a data breach occurs that poses a risk to individuals' rights and freedoms, we report it to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours, and we notify affected individuals where required.

8. Your rights

Under the GDPR you have the right to:

1. Access the personal data we hold about you.
2. Have inaccurate or incomplete data corrected.
3. Request erasure of your data ("right to be forgotten").
4. Restrict processing in certain circumstances.
5. Object to processing based on legitimate interests or direct marketing.
6. Receive your data in a portable, machine-readable format.
7. Withdraw consent, where processing is based on consent.
8. Lodge a complaint with the Dutch Data Protection Authority.

To exercise any of these rights, contact info@tangomj.nl. We respond within the timeframes set by law.

9. Cookies, tracking & analytics

Our websites use:

• Essential / functional cookies — required for basic site functionality.
• Analytical cookies — to understand how the site is used.
• Marketing cookies — for advertising and retargeting.

Non-essential cookies are only set with your prior consent. You can manage your preferences through the cookie banner or your browser settings.

10. Automated decision-making & profiling

We do not currently use automated decision-making or profiling that produces legal or similarly significant effects. If this changes, we will update this policy and, where required, obtain your consent and provide clear information about it.

11. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. Updated versions carry a new date. For significant changes we will notify you by email or through a notice on the website.

12. Contact & further information