Registration - Team Cuba Scuola di Ballo

Last updated: 01/01/2026

1. Introduction

Team Cuba Scuola di Ballo (“we”, “our” or “Team Cuba”), with offices at Piazza Galileo Galilei 4, 40123 Bologna (BO), Italy, respects users’ privacy and is committed to protecting the personal data processed in the course of its activities, in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable national legislation.

This Privacy Policy describes which personal data may be collected through the website www.teamcuba.it (the “Site”), the personal areas and the online services made available to users, as well as the methods and purposes of the related processing.

2. Data Controller

The Controller of the processing of personal data is:

Team Cuba Scuola di Ballo
Registered office: Piazza Galileo Galilei 4, 40123 Bologna (BO), Italy
Email: info@teamcuba.it
Certified email (PEC): teamcuba@pec.teamcuba.it
Telephone: +39 347 818 8700

3. Personal data collected

We may collect and process the following categories of personal data.

3.1 Data provided directly by the user

First name and last name
Email address
Telephone number
Date of birth
Physical address
Payment information, where necessary for enrolment in the courses
Photographs or videos taken during events or lessons, subject to consent where required
Any other data voluntarily provided by the user when requesting information or using the school’s services

3.2 Special categories of data – health-related data

In the context of participation in sports activities, and only for students for whom a medical certificate is required, Team Cuba may process the health-related data contained in the medical certificate for non-competitive sports activity, to the extent necessary for the purposes set out in this notice.

The certificate may be:

submitted by the student through their personal area of the portal; or
handed in directly at the office.

A medical certificate is not required for mere registration on the portal, for sending information requests or, unless specific provisions applicable to the activity apply, for taking part in the trial lesson.

Team Cuba processes only the information contained in the documentation that is necessary to verify the validity and the named holder of the certificate and to manage the student’s participation in the activities for which the certificate is required.

Team Cuba does not request and does not intend to acquire any health information beyond what is necessary for the above purposes.

Automated checks on the certificate

When the certificate is uploaded through the portal, the system may carry out preliminary automated checks on the document, solely for the purpose of:

verifying that the document can be identified as a medical certificate;
verifying the named holder of the document;
detecting the date and the other information needed to verify the validity of the certificate.

The automated checks are performed locally on the device used for the upload.

The content of the certificate is not transmitted to external artificial-intelligence, OCR, document-analysis or similar services in order to perform such checks.

Any results of the automated checks are strictly preliminary and do not constitute a definitive validation of the certificate. The final verification of the documentation rests with the Team Cuba office.

3.3 Data collected automatically

While browsing and using the Site, certain technical data may be collected automatically, including:

IP address
Browser and device type
Date and time of access to the Site
Pages viewed
Browsing information
Cookies and similar technologies, as described in the Cookie Policy

4. Purposes of the processing

Personal data are processed for the following purposes:

managing user registration and participation in the dance courses;
managing enrolments and relationships with students;
responding to information requests;
sending communications relating to courses, activities and events, in the cases and by the means permitted by applicable law;
managing payments and administrative and tax obligations;
complying with obligations laid down by law, regulations and the legislation applicable to the activities carried out;
verifying and managing the documentation relating to fitness to practise sports activities, where required;
managing and verifying the validity of any medical certificates required for participation in sports activities;
ensuring the security of the Site, IT systems and user accounts;
preventing fraudulent or unauthorised use of the services;
improving and optimising the Site and the services offered;
managing the relationship with students, customers and prospective customers.

Health-related data are processed solely for the purposes specifically connected with the verification and management of the medical certificate and with participation in the activities for which such certificate is required.

5. Legal basis for processing

The processing of ordinary personal data may be based, depending on the specific purpose, on the following legal grounds:

Performance of a contract or pre-contractual measures: where processing is necessary to manage enrolment, the relationship with the student and the provision of the requested services;
Compliance with legal obligations: where processing is necessary to comply with obligations laid down by applicable law, including administrative and tax obligations;
Consent: where processing requires the data subject’s consent, for example for specific communication activities or for other processing for which consent is the legal basis;
Legitimate interest: where processing is necessary for the pursuit of a legitimate interest of Team Cuba or of third parties, provided that the fundamental rights and freedoms of the data subject do not override it.

Health-related data

The health-related data contained in the medical certificate are data belonging to a special category of personal data within the meaning of Article 9 GDPR.

Where processing is based on consent, Team Cuba obtains from the data subject explicit, specific and separate consent before the certificate is uploaded through the portal, pursuant to Article 9(2)(a) GDPR.

The consent relating to the digital upload of the certificate is collected separately from any other consents requested for different purposes.

The request for a medical certificate and the related processing of data are carried out in the cases where the certificate is required by applicable law, by the conditions for participation in the specific sports activities or by obligations connected with protecting the health and safety of participants.

The regulatory reference for the certification of non-competitive sports activity includes, where applicable, the Italian Ministerial Decree of 24 April 2013 and subsequent amendments and additions.

Failure to provide the required documentation may make it impossible to take part in the activities for which the certificate is a necessary requirement.

Any consent given for the digital upload may be withdrawn at any time, without affecting the lawfulness of processing carried out before withdrawal.

6. Methods of processing and security measures

Personal data are processed using IT tools and, where necessary, paper means, in accordance with the principles of fairness, lawfulness, transparency, data minimisation, integrity, confidentiality and storage limitation.

With regard to medical certificates uploaded through the portal:

the file is transferred to the IT systems used by Team Cuba;
the document is stored in a server area that allows neither public browsing of folders nor direct retrieval of files by URL: any direct request for a certificate file is refused;
access to the document takes place solely upon authentication, through the management system, and is granted to the student concerned — limited to their own certificate — and to authorised staff who need it to perform their duties; on each access the system verifies the requester’s identity and authorisation before returning the document;
the file is not indexed by search engines;
the certificate is not sent to external artificial-intelligence, OCR or document-analysis services for the automated checks described in this notice;
technical and organisational measures are adopted to prevent unauthorised access.

Access to the individual certificate takes place through the management system, upon verification of authentication and authorisation, and not through a public list or a direct link to the documents.

The use of an address that cannot be directly traced back to the student’s identity is an additional technical protection measure that supplements — without replacing — the authentication and authorisation controls applied on each access.

7. Data retention

Personal data are retained for the period necessary to achieve the purposes for which they were collected and, subsequently, for any period necessary to comply with legal obligations or to protect the Controller’s rights.

In particular:

data relating to enrolments and contractual relationships are retained for the duration of the relationship and, subsequently, for the period required by applicable law, including for tax and administrative purposes;
data processed for marketing purposes are retained until consent is withdrawn or, in any case, in accordance with the periods indicated in any specific notice provided;
technical data and browsing logs are retained for the period necessary for the related security and system-operation purposes and, where provided, in accordance with the periods indicated in the Cookie Policy or in specific notices;
the medical certificate is retained for the period necessary to verify and manage its validity and, in any case, no longer than the point at which it is no longer necessary for the purposes for which it was collected, subject to any further retention requirements laid down by law.

Deletion of the medical certificate

The medical certificate uploaded through the portal is stored in a server area that is not accessible through public browsing of folders.

Deletion of the document takes place automatically by means of a scheduled procedure that periodically checks the validity of certificates and deletes files that are no longer needed.

Automatic deletion of the file does not necessarily entail the deletion of all administrative information relating to the certification, where such information is still necessary to document the management of the enrolment or to comply with legal obligations.

8. Consent to the processing of health-related data

Where the processing of the medical certificate is based on consent, the consent is:

explicit;
specific to the processing of health-related data;
collected separately from any other consents;
documented by the Controller;
revocable at any time.

For uploads through the portal, the consent is recorded with reference at least to the user’s identifier, the date and time of the consent and the version of the applicable notice.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Withdrawal of the consent relating to the digital upload does not automatically remove any obligation to provide the certificate: where the certificate is necessary in order to take part in a given activity, the data subject may have to provide the documentation by alternative means, where available.

The Controller keeps evidence of the consent given or refused for the period necessary to demonstrate the proper management of the processing and of the related obligations.

9. Recipients and sharing of data

Personal data may be processed by:

authorised Team Cuba staff who genuinely need to access the data to perform their duties;
providers of technical and IT services, to the extent necessary to deliver the services;
hosting and infrastructure service providers;
professional advisers, such as accountants, legal advisers and other professionals, within the limits of their respective remit and needs;
public authorities or other parties where disclosure is required by a legal obligation.

Parties that process personal data on behalf of Team Cuba are appointed, where the conditions are met, as data processors pursuant to Article 28 GDPR.

Medical certificates

Medical certificates are not disclosed to third parties for those parties’ own purposes.

Hosting of the portal infrastructure is entrusted to Aruba S.p.A., which, for the processing carried out on behalf of Team Cuba, acts as data processor within the limits defined by the relevant contractual relationship.

The medical certificate is not transmitted to external artificial-intelligence, OCR or document-analysis services for the automated checks described in this notice.

10. Transfer of data outside the European Economic Area

Team Cuba does not transfer personal data outside the European Economic Area for the processing of medical certificates within the procedure described in this notice.

Should it become necessary, for other categories of data or for specific services, to carry out transfers to third countries, such transfers will be carried out in compliance with Articles 44 et seq. of the GDPR and on the basis of an adequacy decision of the European Commission or of appropriate safeguards provided for by applicable law, including, where applicable, the Standard Contractual Clauses.

11. Rights of the data subject

Pursuant to Articles 15 et seq. of the GDPR, the data subject may exercise, in the cases provided for by law, the following rights:

right of access to their personal data;
right to rectification of inaccurate data or completion of incomplete data;
right to erasure of data, in the cases provided for by law;
right to restriction of processing, in the cases provided for by law;
right to data portability, where applicable;
right to object to processing, in the cases provided for by law;
right to withdraw consent previously given, without affecting the lawfulness of processing carried out before withdrawal;
right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), as the competent supervisory authority.

The exercise of a right does not affect any processing that Team Cuba is required or authorised to carry out on a different legal basis.

To exercise their rights, data subjects may contact Team Cuba using the contact details indicated in the “Data Controller” section.

12. Data security

Team Cuba adopts technical and organisational measures appropriate to the risk in order to protect personal data against:

loss or destruction;
unauthorised access;
unauthorised disclosure;
alteration;
unlawful or unauthorised processing.

For medical certificates, specific access-control and file-protection measures are adopted, taking into account the particular nature of the data processed.

Access to certificates requires authentication and is granted to the student concerned (for their own certificate only) and to authorised staff; it takes place through the management system, which verifies authorisation requirements on each request.

13. Changes to the Privacy Policy

Team Cuba reserves the right to amend or update this Privacy Policy at any time.

Changes will be published on this page together with the relevant update date.

In the event of material changes affecting the rights of data subjects or the methods of processing, Team Cuba will take any necessary information measures required by applicable law.

14. Cookies

The Site uses cookies and similar technologies. For information on the types of cookies used, their purposes and how to manage preferences, please refer to the specific Cookie Policy.

15. Minors

Team Cuba’s services and activities may also be aimed, where applicable, at minors.

Where processing concerns a minor, Team Cuba adopts the measures provided for by applicable law, taking into account the nature of the processing and the age of the data subject.

For processing that requires consent in the context of information society services offered directly to minors, the provisions of Article 8 GDPR and applicable Italian law will apply.

For the processing of a minor’s health-related data, the specific provisions of Article 9 GDPR and applicable national law will also apply.

16. Contact

For any questions, requests or clarifications regarding this Privacy Policy or the processing of personal data, you may contact:

Team Cuba Scuola di Ballo
Piazza Galileo Galilei 4
40123 Bologna (BO), Italy
Email: info@teamcuba.it
Certified email (PEC): teamcuba@pec.teamcuba.it

Last updated: 01/01/2026