Privacy Statement
How Stichting Forró Den Haag handles your personal data
This privacy statement explains what personal data Stichting Forró Den Haag ("we", "us", "our") processes when you visit our website, buy a ticket, contact us, or use our care form, and how we protect it. We are committed to protecting your privacy and processing your data lawfully, fairly and transparently, in line with the EU General Data Protection Regulation (GDPR).
1 Who we are (controller)
The controller of your personal data is:
Stichting Forró Den Haag
Soesterbergstraat 53
2546 XM The Hague
The Netherlands
Chamber of Commerce (KvK) number: 90395026
Email: tamanco@forrodenhaag.nl
2 What data we collect and why
Contact form
If you use our contact form, we collect your name, email address and message to respond to your enquiry. This information is sent to us by email and is not stored in a database. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in answering your questions.
Ticket purchase & management
When you buy a ticket, we process your name, email address, ticket type and, where relevant, workshop or dance level to process and manage your ticket. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). We do not see or store your payment card details — payments are handled securely by Stripe.
Ticket transfer
To arrange a ticket transfer, we use the email address you provide so we can contact the recipient. Legal basis: performance of a contract / legitimate interest.
Care form
Our care form is intended for safety and well-being matters. Information you choose to share may include sensitive details (for example about your health or an incident). We treat this information as strictly confidential and use it only to support your safety. Legal basis: your consent and our legitimate interest in safeguarding participants.
Website usage
Our website uses no analytics and sets no tracking cookies. We do not profile visitors or build advertising profiles.
3 Recipients and processors
We do not sell your personal data. We share data only where necessary with the following service providers:
- Stripe — processes ticket payments and is an independent controller of payment data. See the Stripe Privacy Policy.
- Google — hosts our care form as a processor. See the Google Privacy Policy.
- Instagram (Meta) — our social media links. Visiting Instagram is governed by Meta's privacy policy and is outside our control.
4 International transfers
Your data is mostly stored within the EU/EEA. Where data is processed outside the EEA (for example by Stripe or Google), we rely on the European Commission's adequacy decisions or Standard Contractual Clauses to ensure an adequate level of protection.
5 How long we keep your data
- Ticket records — kept as long as needed to comply with Dutch tax and accounting obligations (generally up to 7 years).
- Contact form messages — kept only as long as needed to respond to your enquiry.
- Care form records — kept as long as needed for the safety process and any follow-up.
6 Your rights
Under the GDPR you have the right to:
- — access the personal data we hold about you;
- — have inaccurate data corrected (rectification);
- — have your data erased (the right to be forgotten);
- — restrict the processing of your data;
- — object to the processing of your data;
- — receive your data in a portable format (data portability);
- — withdraw consent at any time, where processing is based on consent.
You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).
7 Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
Contact
We have not appointed a Data Protection Officer, as this is not required for our organisation. If you have questions about this privacy statement or would like to exercise any of your rights, please contact us at tamanco@forrodenhaag.nl.
Last updated: August 2026