Legal
Privacy Policy
This website is built to collect as little personal data as possible. This policy explains what is processed, why, on which legal basis, and which rights you have.
Last updated: August 8, 2026
1. Data controller
Gianmarco Rossato
Learn with Johnny
Via Asiago 19
46037 Roncoferraro (MN)
Italy
Email: info@learnwithjohnny.com
The controller decides how and why personal data is processed in connection with this website.
2. Scope
This policy applies to the website learnwithjohnny.lovable.app and to all of its language versions (English, Italian, German, Spanish and French), including the calendar, the dance library, the enquiry form and the legal pages.
3. Categories of personal data processed
Technical connection data automatically transmitted by your browser when a page is requested (see section 4).
The information you decide to enter in the enquiry form and to send from your own email application (see section 6).
Your language and cookie choices, which are stored locally in your browser and are not transmitted to us (see section 10).
No special categories of personal data are requested, and no accounts can be created by visitors.
4. Hosting and server logs
When you open a page, the hosting infrastructure processes the technical data required to deliver it and to keep the service secure: IP address, date and time of the request, the requested page or file, HTTP status and connection information, transferred data volume, browser type and version, operating system and general device information, and the referrer URL where transmitted by your browser.
Security and error logs are used to detect malfunctions, abuse and attacks. This data is not used to identify you personally and is not combined with other data to build a profile.
5. Purposes and legal bases
Answering enquiries and pre-contractual communication about workshops, festivals, shows and artistic collaborations: Article 6(1)(b) GDPR.
Operating, delivering and securing the website, preventing abuse and ensuring technical stability: Article 6(1)(f) GDPR (our legitimate interest in a functioning, safe website).
Complying with legal obligations, in particular Italian tax, accounting and record-keeping duties: Article 6(1)(c) GDPR.
Optional processing that requires your permission: Article 6(1)(a) GDPR. At present the website uses no optional cookies or tracking technologies, so no consent is requested for them. Consent is never used as a substitute for the legal bases above.
6. Enquiry form and contact by email
In the enquiry form you may voluntarily provide: first name, last name, email address, optional telephone number, organization, dance club or association, country, type of event, proposed event date, and your message with information about the event.
The form does not send anything to a website server. When you press the send button, the website only prepares a pre-filled message in the email application on your own device. The website does not store the completed form in a website database and does not transmit it before you send the email yourself.
Once you send the email, it is processed by your own email provider and by the operator's email provider in the ordinary course of email delivery. We use the content to answer your enquiry and, where relevant, to prepare a possible booking or artistic collaboration.
You may of course also write directly to info@learnwithjohnny.com instead of using the form.
7. Hosting and technical providers
The website is hosted and delivered by the Lovable platform (Lovable Labs Incorporated and its infrastructure partners), which processes the technical connection data described in section 4 on our behalf.
The dance library, the event calendar and the password-protected administration area use the Supabase database and authentication service. For visitors this service only delivers publicly published dance and event content; the login data of the administration area concerns the operator, not visitors.
Email is handled by the operator's email provider. These providers act as processors under Article 28 GDPR or, where they act independently, as controllers for their own infrastructure obligations.
8. Fonts
The typefaces used on this website (Sora, Inter and Mrs Saint Delafield) are hosted locally on the website itself. No connection to Google Fonts or another external font server is established in order to display text, and no font-related request transmits your IP address to Google.
9. External links and services
The website contains ordinary hyperlinks to external platforms, for example YouTube and other video platforms, Instagram, Facebook, CopperKnob and comparable stepsheet archives, event-organizer websites, ticket shops and partner websites.
No third-party video, map, feed or social widget is embedded, so no data is sent to those platforms while you browse this website. Data is only transmitted when you actively click a link and leave this website. From that moment the privacy and cookie policy of the respective provider applies, and we have no influence on and no responsibility for their independent processing.
11. Recipients
Personal data may be disclosed to: the hosting and website infrastructure providers named in section 7, the database and authentication provider, the email providers involved in delivering your message, technical service providers supporting the maintenance of the website, and our accountant, tax adviser or lawyer where this is necessary.
Data is disclosed to public authorities or courts only where we are legally obliged to do so. Personal data is never sold or made available for advertising purposes.
12. International data transfers
Our hosting and platform providers are established in or use infrastructure located in the United States, so technical connection data may be processed outside the European Economic Area.
Such transfers take place on the basis of the standard contractual clauses adopted by the European Commission and, where the provider is certified, on the basis of the EU–US Data Privacy Framework, together with supplementary technical measures such as transport encryption. You may request further information about these safeguards by email.
13. Retention
Technical logs: normally deleted or anonymised by the hosting provider within a few weeks, and kept longer only where a specific security incident must be investigated.
General enquiries that do not lead to further contact: deleted at the latest twelve months after the correspondence ends.
Booking negotiations that do not result in an agreement: kept for up to twenty-four months, so that repeated or seasonal enquiries can be handled sensibly.
Confirmed artistic collaborations and contractual documentation: kept for the duration of the collaboration and afterwards for the applicable Italian limitation periods.
Tax and accounting documents, including invoices: kept for ten years, as required by Italian law.
Records of a cookie or privacy choice: stored only in your own browser and removed when you clear your browser storage or change your choice. Where an exact period cannot reasonably be given in advance, we determine it by the criteria above: the purpose being pursued, the duration of the correspondence or collaboration, and mandatory retention duties.
14. Your rights
Under the GDPR you have the right of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection to processing based on our legitimate interests (Article 21). Where processing is based on consent, you may withdraw it at any time with effect for the future.
To exercise these rights, write to info@learnwithjohnny.com. We may ask for information needed to identify the correspondence your request relates to. Exercising your rights is free of charge.
16. Is providing data mandatory?
Providing personal data is entirely voluntary. There is no statutory or contractual obligation to send an enquiry. However, without a name, an email address and a description of your request we cannot answer you or discuss a possible event, so an incomplete enquiry may simply remain unanswered. Browsing the website is possible without providing any information yourself.
17. Automated decision-making
No automated decision-making or profiling within the meaning of Article 22 GDPR takes place. Enquiries are read and answered by a person.
18. Security
The website is delivered exclusively over encrypted HTTPS connections. Appropriate technical and organisational measures protect data against loss, misuse and unauthorised access: the administration area is protected by authentication and role checks, database access is restricted by row-level security rules, dependencies are kept up to date, and access to enquiry correspondence is limited to the operator. For security reasons no further details of these measures are published.
19. Minors
This website is aimed at dancers, dance clubs, festivals and event organizers and is not specifically directed at children. We do not knowingly request personal data from children through the enquiry form. If a parent or guardian believes that a child has sent us personal data, please write to info@learnwithjohnny.com and we will delete it.
20. Changes to this policy
This Privacy Policy is updated when the technical configuration of the website, our services or the legal requirements change. The current version always applies and is dated below.