Privacy Statement of the Dutch International Tango Week Foundation

Privacy Statement of the Dutch International Tango Week Foundation

1. Introduction

The Dutch International Tango Week Foundation (hereinafter: “the Foundation,” “we,” or “us”) respects the privacy of visitors, participants, volunteers, artists, business partners, and users of our website. We process personal data exclusively in accordance with applicable laws and regulations, including the General Data Protection Regulation (GDPR).

This privacy statement describes what personal data we process, why we process it, and what rights data subjects have.

2. Person in Charge

Dutch International Tango Week Foundation
Website: www.dutchtangoweek.nl
Email: info@dutchtangoweek.nl

The Foundation is the data controller responsible for the processing of personal data as described in this privacy statement.

3. What personal data do we process?

Depending on our relationship with the Foundation, we may process the following personal data, among other things:

Website visitors

  • IP address;
  • Browser and device information;
  • Information about website usage;
  • Cookie Information.

Ticket buyers and participants

  • Name;
  • Address information;
  • Email address;
  • Phone number;
  • Payment information;
  • Information about purchased tickets and reservations.

Newsletter subscribers

  • Name;
  • Email address;
  • Communication preferences.

Volunteers, artists, and business partners

  • Name;
  • Contact Information;
  • Bank account number, if required for payments;
  • Other information necessary for cooperation or the performance of agreements.

Users of the Tangoweek app

Article 18 specifies what data the app processes, why, and for how long.

4. Purposes of Processing

We process personal data exclusively for the following purposes:

  • Organization and execution of festivals, concerts, workshops, and other activities;
  • Ticket sales and administration;
  • Customer service and communication;
  • Sending newsletters and marketing communications;
  • Customer Relationship Management;
  • Fundraising and sponsor relations;
  • Improving our website and services;
  • Financial accounting;
  • Compliance with legal obligations.

5. Legal Bases

We process personal data only when there is a legal basis for doing so, including:

  • Performance of a contract;
  • Consent of the data subject;
  • Legal obligation;
  • The Foundation’s legitimate interest.

6. Newsletters and Marketing

If you sign up for our newsletter, we will use your information to provide you with updates on the Foundation’s activities, events, and developments.

You can unsubscribe at any time by clicking the unsubscribe link in the newsletter or by contacting us.

7. Photographs, videos, and audio recordings

During events, photographs, video recordings, and audio recordings may be taken for promotional, journalistic, archival, and educational purposes.

By participating in the Foundation’s public events, visitors acknowledge that such recordings may be made and published through, among other channels:

  • Websites;
  • Social media;
  • Newsletters;
  • Printed materials;
  • Grant and accountability reports;
  • Pursuits.

If a participant is recognizable in an image and has compelling privacy interests, a request for removal may be submitted. The Foundation will review such a request, but cannot guarantee removal in all cases—for example, when publication is necessary for journalistic, historical, artistic, or administrative purposes.

8. Sharing of Personal Data

We disclose personal data to third parties only if it is necessary for:

  • Performance of contracts;
  • Ticket sales;
  • Payment processing;
  • Hosting and IT services;
  • Newsletter systems;
  • Legal obligations.

We enter into data processing agreements with processors where required by law.

9. International Transfer

If we use service providers outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place in accordance with the GDPR.

10. Retention Periods

Personal data will not be retained for longer than is necessary for the purpose for which it was collected, unless a statutory retention period applies.

Financial data is retained in accordance with the statutory tax retention periods.

The data retention periods for the Tangoweek app are set forth in Article 18.

11. Security

We take appropriate technical and organizational measures to protect personal data against loss, unauthorized access, destruction, or unlawful processing.

Despite these measures, no digital environment can guarantee complete security. Therefore, the use of websites, email, and Internet services is partly at the user’s own risk.

12. Limitation of Liability

The Foundation strives to process personal data with due care, but cannot guarantee that unauthorized third parties will never gain access to data despite the security measures in place.

To the extent permitted by law, the Foundation disclaims all liability for indirect damages, consequential damages, lost income, reputational damage, or any other damages arising from data processing.

The Foundation is liable for damages only in cases of willful misconduct or gross negligence on the part of the Foundation.

13. Cookies

The website may use functional, analytical, and marketing cookies.

To the extent required by law, prior consent will be sought.

More information on this topic can be included in a separate cookie policy.

14. Rights of Data Subjects

To the extent permitted by law, data subjects have the right to:

  • Access;
  • Correction;
  • Removal;
  • Restriction of processing;
  • Data portability;
  • Objection to processing;
  • Withdrawal of consent.

Requests may be sent to the contact address listed in this privacy statement.

The Foundation may request additional identification before processing a request.

15. Complaints

Data subjects have the right to file a complaint with the competent supervisory authority:
Dutch Data Protection Authority

16. Changes

The Foundation reserves the right to amend this privacy statement at any time.

The most current version is published on the Foundation’s website. Continued use of the website or participation in activities after the publication of changes constitutes acknowledgment of the amended privacy statement.

17. Contact

If you have any questions about this privacy statement, please contact us at:
info@dutchtangoweek.nl
Dutch International Tango Week Foundation

18. The Tango Week App

18.1 In Brief

You don’t need an account, and we don’t ask for your name. The program and “Discover” feature work without you sharing anything. We only use your location if you give your consent, and only during the festival. We also use it once during installation, rounded to approximately 1 km. You can view and delete all your data yourself in your Profile. We do not display ads, sell data, or use third-party trackers or analytics services.

18.2 Device ID

When you launch the app for the first time, it generates a random code (an anonymous login). This code links your selections, your QR code, and your points to this app on this phone. The code does not reveal your identity. Legal basis: necessary for the app to function (legitimate interest).

18.3 Age Group and Place of Residence

In the “Participate” section, we ask for your age group (e.g., 35–44 years) and your place of residence, or “Outside the Netherlands.” For your place of residence, we also record the municipality. Purpose: to gather statistics on who our visitors are and where they come from, to help us plan and promote future editions. This information is also required for the free drink and the points game. Legal basis: consent. You may skip this step; the program and “Ontdek” will continue to function.

18.4 Installation Location

If you grant the app access to your location, we’ll store the first known location once, rounded to approximately 1 km. That location will never be overwritten afterward. Purpose: to generate statistics on user origin and to make a suggestion for your place of residence. The app on your phone determines this suggestion on its own, without sending your location to Google or Apple. We never determine your location based on your IP address.

18.5 Location During the Festival

Only during the festival (May 14–17, 2027) and only if the location setting is set to “Always Allow” will your phone detect when you arrive at or leave the Lieve Vrouwekerkhof. In that case, we’ll only send “arrived” or “departed” along with the time—no coordinates. Your phone will also track whether you’re within 10 km of the square. We’ll only receive “yes” or “no”—no location and no history. We’ll delete this data immediately after the festival.

Goals: daily visitor counts (totals only), points for time spent in the square, reactions to the music (only in the square, Saturday, May 15), no concert reminders once you’re already in the square, and your safety: with your location, we can notify you immediately during the festival if something happens in or around the square, such as severe weather or an evacuation.

The app does not use your location outside the festival or outside the installation. If your phone detects a simulated location (fake GPS), we’ll record that; such a location does not count toward points. Legal basis: consent. You can revoke your consent at any time in your phone’s settings.

18.6 Reports

Your phone automatically sets reminders shortly before a concert; we don’t receive any information for that. For messages from the organization, we store a push code from your phone (push token) and the app’s language. Those messages never include your location. Depending on the group we select (in the square, within 10 km, or farther away), you may or may not receive a message. Legal basis: consent. You can always turn off notifications in your phone’s settings.

18.7 Free Drink and Prizes

Your QR code is signed by our server. When you redeem it, we record the time and location (the bar or pickup point). This ensures that a drink or prize can only be claimed once. Legal basis: implementation of the promotion (free drink and rules of the points game).

18.8 Scoring, Comments, and My Schedule

For the points game, we keep track of your points, which articles you’ve read in “Discover,” and your reactions to the music (which word, for which set, and when). After the game, we’ll also save your final score and any prize you may have won. On the big screen, only a symbol (a colored ring with a letter) appears next to your reaction, and this symbol changes with each set. This symbol does not reveal your identity; your city or phone number is never displayed. We track the “Sets” in “My Program” to count how many people select each set. We only look at those numbers; we do not track who selects what. Legal basis: consent (you participate by completing the “Join” process) and the game rules.

18.9 Email Address

In “Profile,” you can enter your email address to receive updates after the festival. This is optional. Legal basis: consent. You can unsubscribe or delete your email address at any time in “Profile.”

18.10 Statistics

We only compile statistics based on totals, such as by age group and place of residence. We do not display groups of fewer than 5 people. After the festival, we generate an export containing only totals, without device IDs, coordinates, or individual data per person. We store this data to plan and promote future editions.

18.11 How Long We Retain Data

“Near the square: yes/no”: deleted immediately after the festival. Arrival and departure at the square, comments, My Schedule, articles read, points, final standings, and prizes: deleted 30 days after the festival, after the export file containing the totals has been generated. Redemptions at the bar will continue to exist anonymously thereafter. Your profile (device ID, age group, city, location at installation, permissions, language, push token, and email address): as long as you use the app, until you delete your data. That way, you won’t have to start over next year.

We’ll delete the push token as soon as you turn off notifications or your phone invalidates it. Please note: if you delete the app, we will no longer be able to link your profile to you. If you want everything removed, first select “Delete My Data” in Profile. Statistics that show only totals cannot be traced back to you. We keep them for as long as necessary to plan future editions.

18.12 Services We Use

Supabase: database and server, located in the EU. Expo (U.S.), using Google Firebase Cloud Messaging (Android) and Apple Push Notification Service (iPhone): to deliver messages. They receive your push token and the message text, but not your location. Spotify, YouTube, and Vimeo: only if you tap the player for a concert or article. Only then does the app load their player; that service can then set cookies and see your IP address. Their own privacy policies apply.

18.13 Your Rights

View: Profile → “View My Information” shows everything we store about this app on this phone. Delete: Profile → “Delete My Data” immediately deletes your data. Only an anonymous summary remains (age group, city, whether you completed the activity, picked up the drink, and on which days you were at the square), without a device ID or timestamps. Edit: You can always update your information in Profile. Withdraw consent: Turn off location services or notifications in your phone’s settings. Any data we’ve already processed remains lawful. You can also file an objection or ask us for an explanation via info@tangoweek.nl. If you are not satisfied, you can file a complaint with the Dutch Data Protection Authority.

18.14 Security

All connections are encrypted. Employees can only see what they need to perform their tasks (for example, the scanner at the bar). QR codes are digitally signed, so they cannot be forged.

6:15 p.m. Changes

If we make changes to this statement, the new version will be available in the app and on our website.

Version dated October 7, 2026