Privacy Policy – House of Mari

1. DATA CONTROLLER & CONTACT INFORMATION

The data controller responsible for the processing of your personal data on this website is:

Mari Anne Scheffers House of Mari Reiterstaffelplatz 25 50968 Köln, Germany

Email: contact@houseofmari.com VAT ID: DE 219/5287/3086 Tax-exempt under § 4 No. 21 a) bb) of the German Value Added Tax Act (UStG)

If you have any questions or concerns about data protection, please contact us at: contact@houseofmari.com

2. DATA PROCESSING BY OUR AGENCY (Performance Coaching Only)

Important Notice for Performance Coaching Services:

If you inquire about or book Performance Coaching services, your data will be forwarded to our agency, OnStage Media Agentur GmbH, for the purpose of processing your request and managing coaching operations.

OnStage Media Agentur GmbH Bavariafilmplatz 7, Gebäude 070, 1. OG, #111 82031 Geiselgasteig, Germany

Phone: +49 177 828 6246 or +49 89 92306710 Email: info@onstagemedia.de Founder & CEO: Silke Pfaff

OnStage Media Agentur GmbH acts as a data processor on our behalf for Performance Coaching services only and processes your data exclusively according to our instructions and in compliance with the General Data Protection Regulation (GDPR). A Data Processing Agreement (DPA) is in place to ensure the lawful and secure handling of your personal information.

Note: For all other services (Inside Out Dance Program, Workshops, General Inquiries), your data is processed directly by House of Mari and is not forwarded to OnStage Media Agentur GmbH.

3. GENERAL INFORMATION ABOUT DATA PROCESSING

3.1 Scope of Data Processing

We process personal data only to the extent necessary to provide a functional website, our content and services, and to respond to inquiries. Personal data is only collected with your consent or when permitted by law.

3.2 Legal Basis

Data processing on this website is based on the following legal grounds:

Art. 6(1)(a) GDPR – Your consent (e.g., newsletter subscription, contact forms)
Art. 6(1)(b) GDPR – Performance of a contract or pre-contractual measures (e.g., program registration)
Art. 6(1)(f) GDPR – Legitimate interests (e.g., website security, analytics)

3.3 Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected or as required by law (e.g., tax and commercial retention obligations). After that, your data will be deleted.

4. HOSTING & SERVER DATA

4.1 Hosting Provider

This website is hosted by:

ALL-INKL.COM – Neue Medien Münnich Inhaber: René Münnich Hauptstraße 68 D-02742 Friedersdorf, Germany

Website: https://all-inkl.com

Data Processed:

IP address
Browser type and version
Operating system
Referrer URL (source of visit)
Date and time of access
Pages visited

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in secure and efficient website operation)

Data Processing Agreement: A Data Processing Agreement (DPA) is in place with ALL-INKL to ensure GDPR compliance.

Server Location: Germany (EU)

Retention Period: Server logs are typically stored for 7 days and then automatically deleted.

5. DATA COLLECTED ON THIS WEBSITE

5.1 Contact Forms

When you use our contact form, we collect the following information:

Name (required)
Email address (required)
Message content (required)
Optional: Phone number, subject

Purpose: To respond to your inquiry and process your request.

Legal Basis: Art. 6(1)(a) GDPR (your consent) or Art. 6(1)(b) GDPR (pre-contractual measures)

Data Forwarding:

Performance Coaching inquiries: Your data will be forwarded to OnStage Media Agentur GmbH for processing and responding to your inquiry. By submitting a Performance Coaching inquiry, you consent to this data transfer.
All other inquiries (Inside Out Dance Program, Workshops, General Questions): Your data is processed directly by House of Mari and is not shared with third parties.

Retention Period: Contact form submissions are retained for the duration necessary to process your request, typically up to 24 months, unless longer retention is required by law.

Your Rights: You can request deletion of your data at any time by contacting us at contact@houseofmari.com.

5.2 Consultation Booking (Calendly)

We use Calendly to allow you to book free consultations and appointments.

Data Collected:

Name
Email address
Optional: Phone number, notes, time zone

Purpose: To schedule and manage consultation appointments.

Third-Party Provider: Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, GA 30363, USA

Legal Basis: Art. 6(1)(a) GDPR (your consent) or Art. 6(1)(b) GDPR (performance of a contract)

Data Transfer to Third Countries: Calendly processes data in the USA. Data transfers are secured through Standard Contractual Clauses (SCCs) in accordance with Art. 46 GDPR.

Retention Period: Appointment data is retained as long as necessary for scheduling and follow-up purposes. You can request deletion at any time.

5.3 Newsletter (Mailchimp)

If you subscribe to our newsletter, we collect your email address and, optionally, your name.

Purpose: To send you updates about House of Mari programs, events, and news.

Third-Party Provider: The Rocket Science Group LLC d/b/a Mailchimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA

Legal Basis: Art. 6(1)(a) GDPR (your explicit consent via double opt-in)

Double Opt-In: After subscribing, you will receive a confirmation email. Your subscription is only active after you confirm by clicking the link in that email.

Data Transfer to Third Countries: Mailchimp processes data in the USA. Data transfers are secured through Standard Contractual Clauses (SCCs) in accordance with Art. 46 GDPR.

Unsubscribe: You can unsubscribe at any time by clicking the unsubscribe link in any newsletter or by contacting us at contact@houseofmari.com.

Retention Period: Your data is stored until you unsubscribe. After unsubscription, your data will be deleted within 30 days.

5.4 Program Registration & Payment Processing

When you register for the Inside Out Dance Program or other offerings, we collect:

Name
Email address
Phone number (optional)
Dance experience and background information
Payment details (processed by payment provider)

Purpose: To process your registration, manage program participation, and handle payments.

Legal Basis: Art. 6(1)(b) GDPR (performance of a contract)

Data Forwarding:

Inside Out Dance Program & Workshops: Your data is processed directly by House of Mari and is not forwarded to third parties.
Performance Coaching: Registration data is forwarded to OnStage Media Agentur GmbH for administrative processing.

Payment Processing: Payments are processed via bank transfer or third-party payment providers. We do not store your full payment information (e.g., credit card numbers). Payment providers process data according to their own privacy policies and security standards.

Retention Period: Registration and contract data are retained for the duration of the contract and for 10 years thereafter to comply with German tax and commercial retention obligations (§ 147 AO, § 257 HGB).

6. COOKIES & TRACKING TECHNOLOGIES

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function properly and provide information to website owners.

6.2 Cookie Categories

We use the following types of cookies:

Essential Cookies (Strictly Necessary):

These cookies are required for basic website functionality (e.g., session management, security features)
Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in website operation)
No consent required

Analytics & Performance Cookies:

These cookies help us understand how visitors use our website
Legal Basis: Art. 6(1)(a) GDPR (your consent)
Consent required

Marketing Cookies:

These cookies track your activity for advertising purposes
Legal Basis: Art. 6(1)(a) GDPR (your consent)
Consent required

6.3 Cookie Management

We use Complianz Cookie Banner to manage your cookie preferences. When you first visit our website, you can choose which cookies to accept.

You can change your cookie preferences at any time by clicking the cookie settings link in our footer or by adjusting your browser settings.

How to Disable Cookies in Your Browser:

Chrome: Settings > Privacy and security > Cookies
Firefox: Settings > Privacy & Security > Cookies
Safari: Preferences > Privacy > Cookies
Edge: Settings > Privacy > Cookies

Note: Disabling essential cookies may affect website functionality.

7. ANALYTICS & MARKETING TOOLS

7.1 Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC, to analyze website traffic and user behavior.

Data Collected:

IP address (anonymized)
Browser type and version
Operating system
Referrer URL
Pages visited and time spent on pages
Device information

Purpose: To understand how visitors use our website and improve user experience.

Legal Basis: Art. 6(1)(a) GDPR (your consent via cookie banner)

IP Anonymization: We have activated IP anonymization, meaning your IP address is shortened within the EU before being transmitted to Google servers.

Third-Party Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Data Transfer to Third Countries: Google Analytics processes data in the USA. Data transfers are secured through Standard Contractual Clauses (SCCs) and Google’s compliance with the EU-U.S. Data Privacy Framework.

Data Processing Agreement: We have concluded a Data Processing Agreement with Google.

Opt-Out: You can prevent Google Analytics from tracking your activity by:

Declining analytics cookies in our cookie banner
Installing the Google Analytics Opt-Out Browser Add-on: https://tools.google.com/dlpage/gaoptout

Retention Period: Google Analytics data is automatically deleted after 26 months.

7.2 Facebook Pixel / Meta Pixel

We use Meta Pixel (formerly Facebook Pixel), a tracking tool provided by Meta Platforms Ireland Limited, to measure the effectiveness of our advertising and create custom audiences.

Data Collected:

IP address
Browser information
Pages visited
Actions taken on the website (e.g., form submissions, button clicks)

Purpose: To analyze user behavior, track conversions, and optimize advertising campaigns on Facebook and Instagram.

Legal Basis: Art. 6(1)(a) GDPR (your consent via cookie banner)

Third-Party Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Data Transfer to Third Countries: Meta processes data in the USA. Data transfers are secured through Standard Contractual Clauses (SCCs) and Meta’s compliance with the EU-U.S. Data Privacy Framework.

Opt-Out: You can opt out of personalized advertising by:

Declining marketing cookies in our cookie banner
Adjusting your Facebook ad preferences: https://www.facebook.com/ads/preferences
Using browser privacy settings or ad blockers

Retention Period: Meta retains data according to their privacy policy and legal obligations.

8. EMBEDDED CONTENT & THIRD-PARTY SERVICES

8.1 YouTube Videos

We embed videos from YouTube (owned by Google LLC) on our website. Videos are embedded using YouTube’s extended privacy mode (youtube-nocookie.com), which prevents YouTube from tracking users who do not play the video.

Data Processing:

When you play a video, YouTube sets cookies and may collect data such as IP address, device information, and viewing behavior
YouTube may use this data for analytics and personalized advertising

Legal Basis: Art. 6(1)(a) GDPR (your consent via cookie banner)

Third-Party Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Opt-Out: Decline cookies in our cookie banner or do not play embedded videos.

8.2 Google Fonts

We use Google Fonts to display fonts on our website.

Local Hosting: Google Fonts are hosted locally on our server. No data is transmitted to Google when you visit our website.

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in consistent, high-quality typography)

8.3 Instagram

We link to our Instagram profiles (@house.of.mari and @insideoutdanceprogram) on this website. These are simple hyperlinks and do not embed Instagram content or transmit data to Instagram unless you click the link.

Data Processing:

If you click on our Instagram links, you will be redirected to Instagram, and Instagram’s privacy policy applies

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in connecting with our community)

9. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:

SSL/TLS encryption for data transmission (https)
Secure hosting with a reputable provider in Germany (ALL-INKL)
Access controls to limit data access to authorized personnel only
Regular security updates for website software and plugins
Data Processing Agreements with all third-party processors

Despite our security measures, no method of data transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. YOUR RIGHTS UNDER GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights:

10.1 Right of Access (Art. 15 GDPR)

You have the right to request information about the personal data we process about you.

10.2 Right to Rectification (Art. 16 GDPR)

You have the right to request correction of inaccurate or incomplete personal data.

10.3 Right to Erasure / “Right to be Forgotten” (Art. 17 GDPR)

You have the right to request deletion of your personal data if:

The data is no longer necessary for the purposes it was collected
You withdraw your consent and there is no other legal basis for processing
You object to processing and there are no overriding legitimate grounds
The data was processed unlawfully

Note: We may be required to retain certain data to comply with legal obligations (e.g., tax retention requirements).

10.4 Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request restriction of processing if:

You contest the accuracy of the data
Processing is unlawful but you prefer restriction over deletion
We no longer need the data, but you need it for legal claims
You have objected to processing and verification is pending

10.5 Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

10.6 Right to Object (Art. 21 GDPR)

You have the right to object to processing based on legitimate interests (Art. 6(1)(f) GDPR) or for direct marketing purposes.

10.7 Right to Withdraw Consent (Art. 7(3) GDPR)

If processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

10.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe your data is being processed unlawfully.

Supervisory Authority for Germany:

Die Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen Kavalleriestraße 2-4 40213 Düsseldorf, Germany Phone: +49 211 38424-0 Email: poststelle@ldi.nrw.de Website: https://www.ldi.nrw.de

11. EXERCISING YOUR RIGHTS

To exercise any of the above rights, please contact us at:

Email: contact@houseofmari.com

Postal Address: Mari Anne Scheffers House of Mari Reiterstaffelplatz 25 50968 Köln, Germany

We will respond to your request within one month. In complex cases, this period may be extended by two additional months.

To verify your identity, we may request additional information before processing your request.

12. PHOTOGRAPHY & VIDEO RECORDINGS

During House of Mari programs and events, photos and videos may be taken for promotional purposes, including use on our website, social media, and marketing materials.

Data Collected:

Photos and videos of participants
Names (if used in captions or credits)

Purpose: Marketing, promotion, documentation of programs, and community building.

Legal Basis: Art. 6(1)(a) GDPR (your explicit consent via signed consent form)

Consent: Before participating in programs where photos/videos will be taken, you will be asked to sign a consent form. You have the right to withdraw consent at any time by contacting us at contact@houseofmari.com.

Usage:

Website (e.g., gallery, success stories)
Social media (Instagram, Facebook)
Marketing materials (flyers, brochures, online ads)

Third-Party Access: Photos and videos may also be used by:

Videographers/photographers for portfolio purposes
Participants for personal use

Retention Period: Photos and videos are retained indefinitely for marketing purposes unless you withdraw consent.

Withdrawal of Consent: If you withdraw consent, we will remove your images from future marketing materials. However, materials already distributed (e.g., printed brochures, social media posts) may remain in circulation.

13. DATA PROCESSING FOR PROGRAM PARTICIPANTS

13.1 Inside Out Dance Program

When you register for the Inside Out Dance Program, we collect and process:

Personal Data:

Name, email, phone number
Dance experience and background
Health information (if voluntarily provided, e.g., injuries, medical conditions)
Emergency contact information

Purpose: Program administration, communication, safety, and personalized mentoring.

Legal Basis: Art. 6(1)(b) GDPR (performance of a contract)

Data Forwarding:

Guest teachers (only name and program details, as necessary for instruction)
Not forwarded to OnStage Media Agentur GmbH

Sensitive Data: Health information (if provided) is processed under Art. 9(2)(a) GDPR (explicit consent) to ensure your safety during physical activity.

Retention Period: Program data is retained for the duration of your participation and for 10 years thereafter to comply with German tax and commercial retention obligations.

13.2 WhatsApp Groups / Communication

Participants may be added to WhatsApp groups for program communication and community building.

Data Collected:

Phone number
Name (as saved in your WhatsApp profile)
Messages and media shared in the group

Legal Basis: Art. 6(1)(a) GDPR (your consent when providing your phone number)

Third-Party Provider: WhatsApp Inc. (owned by Meta Platforms), 1601 Willow Road, Menlo Park, CA 94025, USA

Opt-Out: Participation in WhatsApp groups is optional. You can leave the group at any time or request removal by contacting us.

Note: WhatsApp uses end-to-end encryption, but metadata (e.g., phone numbers, group membership) is accessible to Meta Platforms.

14. CHILDREN’S PRIVACY

My programs are designed for individuals aged 18 and older. We do not knowingly collect personal data from children under 18 without parental consent.

If you are under 18 and wish to participate in our programs, parental or guardian consent is required. If we become aware that we have collected data from a minor without proper consent, we will delete it promptly.

15. LINKS TO EXTERNAL WEBSITES

Our website may contain links to external websites (e.g., Instagram, YouTube, Calendly). We are not responsible for the privacy practices or content of these third-party sites.

We recommend reviewing the privacy policies of any external websites you visit.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or website functionality.

Last Updated: January 15, 2025

Notification: If we make significant changes, we will notify you by posting a notice on our website or by email (if you have provided your email address).

Your Responsibility: We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

17. CONTACT & QUESTIONS

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Email: contact@houseofmari.com

Postal Address: Mari Anne Scheffers House of Mari Reiterstaffelplatz 25 50968 Köln, Germany

For Performance Coaching Inquiries (OnStage Media Agentur GmbH):

OnStage Media Agentur GmbH Bavariafilmplatz 7, Gebäude 070, 1. OG, #111 82031 Geiselgasteig, Germany

Phone: +49 177 828 6246 or +49 89 92306710 Email: info@onstagemedia.de

18. ACKNOWLEDGMENT

By using this website, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your personal data as described herein.

Effective Date: January 15, 2026