Introduction
This Privacy Notice explains how the personal data of visitors to the Academia Luz de Luna website (the Site) is collected, used and protected, under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties.
Please read it carefully. If you don't agree with it, please don't provide your data through the Site.
1. Data controller
Evelyn Somera, an individual operating under the trade name Academia Luz de Luna (the Academy), with address at Calle Licenciado Eustaquio Buelna No. 12, colonia Juan Escutia, Iztapalapa, Mexico City, Mexico, is the controller of the personal data collected through the Site.
Any change in the Academy's legal form (for example, incorporating a company) will be reflected in an update to this Notice, with its corresponding date.
2. Personal data we collect
The Academy collects only the data needed, depending on how you use the Site:
- Enrollment form: your name, the optional message you write, and the disciplines, schedules or session focus you choose.
- Browsing data, only if you accept analytics cookies: pages visited, time on page, device and browser type, language and approximate location (city or region), collected by Google Analytics.
- WhatsApp conversation: when you send your request, the message opens in WhatsApp and the conversation continues there, along with your phone number, under WhatsApp's policies.
Form data isn't stored in any Site database: it's used only to build the message you choose to send via WhatsApp.
We don't request sensitive personal data (ethnic origin, health, religious beliefs, sexual preferences, among others) through the Site.
3. Data of children and teenagers
The Academy offers classes for people of different ages. When the enrollment is for a minor, the form must be filled in and sent by their parent or guardian, who provides the data and gives consent on their behalf.
If the Academy notices that a minor sent their data without their parent or guardian, it will ask that the responsible adult continue the conversation.
4. Purposes of processing
Primary purposes, needed to handle your request:
- Handle your enrollment request for group classes or one-on-one sessions.
- Give you information about disciplines, schedules, availability, prices and performances.
- Follow up on your enrollment.
Secondary purpose, which requires your consent and which you can refuse or withdraw at any time without affecting the primary ones: produce Site usage statistics to improve its content and operation.
We don't use your data for advertising or to build commercial profiles, and we don't sell your personal data.
5. Use of students' images
The Site shows photos of Academy classes and performances. Authorization to publish each student's image is collected in writing on the Academy's enrollment form; for minors, it is given by their parent or guardian.
This authorization can be withdrawn at any time. While a withdrawal is being handled, the Academy may blur or hide the image and name of the person pictured.
If you appear in a Site photo (or a minor in your care does) and want it removed, you can request it through the channels in section 9; the image will be removed promptly.
6. Providers and data transfers
To run the Site, the Academy relies on the following providers, which process data only to provide their service:
- Netlify: Site hosting; it logs technical data of each visit (such as the IP address) for security and operational reasons.
- Google: Google Tag Manager and Google Analytics, only if you accept analytics cookies; and Google Maps, which shows the Academy's location map.
- WhatsApp: the channel through which your request is sent and the conversation continues.
- Onca Vega: Site development and technical maintenance, without storing or using form data for its own purposes.
Some of these providers are located outside Mexico, mainly in the United States, so your data may be processed there under their own privacy policies. Beyond these cases, the Academy doesn't transfer your personal data to third parties, except when required by a competent authority.
8. Options to limit the use or disclosure of your data
You can refuse or withdraw analytics cookies at any time from "Cookie preferences". For any other limitation, request it through the channels in section 9, stating which use or disclosure you want to limit.
9. Access, rectification, cancellation and objection (ARCO) rights, and withdrawal of consent
You have the right to access, rectify and cancel your personal data, or object to its processing (ARCO rights), and to withdraw any consent you have given.
To exercise them, send your request via WhatsApp (from the form on the Enroll page, writing your request in the message) or by direct message to the Academy's official Instagram account (@academia_luzdeluna), including:
- Your full name and, where applicable, that of your representative or of the minor in your care.
- A document proving your identity or the representation.
- A clear description of the data and the right you want to exercise.
- A way to send you the answer.
The Academy will respond within the legal deadlines. If you believe your rights weren't respected, you can turn to the personal data protection authority (as of this notice, Mexico's Secretaría Anticorrupción y Buen Gobierno).
10. Changes to this Notice
The Academy may update this Privacy Notice due to legal changes, changes in its practices or in the Site's services. Any change will be published on this page, updating the version date shown at the top.
If a change affects cookies or their categories, we'll ask for your choice again when you visit the Site.