Privacy Policy

1. Overview

Tango City (the "Service") processes personal information lawfully and safely in accordance with the Personal Information Protection Act of Korea (PIPA) and other applicable laws. This policy explains what information we collect, why we use it, how long we keep it, and how you can manage your information.

2. Information We Collect

Sign-up and login

• Required: email address, password
• Social login (Google): email address, name, profile photo (received from the login provider)

Profile (optional)

• Name, profile photo, nationality, tango role (leader/follower, etc.), year you started dancing tango

Information created while using the Service

• Reservations, lesson applications, and world event registrations: number of attendees (leaders/followers), registration type, and a note. We do not collect names, phone numbers, or other contact details
• Posts: question and answer content, and the time of posting
• Info suggestions: the link you submit and an optional note (no contact details)
• Activity: bookmarks and subscriptions

Information collected automatically

• Access logs (time of access, browser and device information), cookies and device storage values
• Web analytics and performance data (pages visited, loading performance — statistical data that does not identify individual users)

Push notifications (optional)

If you turn notifications on: the subscription address (endpoint) and encryption keys issued by your browser, the time you subscribed, and the version of this policy you agreed to.

Contact details in listings

Phone numbers, email addresses, and messenger IDs entered by organizers or operators are personal data processed for the purpose of publishing a listing. Only items for which "Show on detail page" was selected are displayed to visitors; all other items are visible to editors only.

3. Why We Use Your Information

• To identify members, handle logins, and manage accounts
• To deliver reservations and lesson applications to organizers and process them
• To operate the Q&A board
• To review suggested information for listing
• To receive reports and inquiries and notify you of the outcome
• To deliver device notifications about important changes to your reservations, lesson applications, and bookmarked items (only when you have notifications on)
• To operate and improve the Service and prevent abuse
• To comply with legal obligations

4. Retention Periods

Where the law requires longer retention, we keep the data separately for that period and then destroy it. To prevent abuse by repeatedly withdrawing and re-registering, we keep only a hash of your email address for 30 days; all other account information is destroyed immediately upon withdrawal.

5. Sharing with Third Parties

We do not share your personal information with third parties in principle. The following are exceptions.

• Reservations and lesson applications: the number of attendees and your note are delivered to the editor (organizer) of the milonga, practica, or lesson you applied to. This is the essential function of reservations, and organizers may not use the information for any other purpose
• Where law enforcement or other authorities lawfully request it

6. Processors and Cross-Border Transfers

We entrust personal data processing to the following providers, which involves cross-border transfers.

• When and how: transferred over encrypted networks when you use the Service
• Purpose: limited to performing the entrusted task
• Retention: until the processing agreement ends or you delete your account
• We specify data-protection obligations in our agreements and supervise our processors

7. Sources of Information

The Service provides tango event information that our operators compile from public sources or that organizers manage directly. For information we have collected, we record and manage the source and the date of collection. If you request it, we will tell you the source in accordance with Article 20 of PIPA. You can request correction or deletion of inaccurate information using the methods in Section 8.

Contact details collected from public sources are stored as private by default, and only items the organizer or operator has chosen to publish are displayed. If you do not consent to publication or want it stopped, you can request it using the methods in Section 8, and we will make the item private without delay.

8. Your Rights and How to Exercise Them

You may exercise the following rights at any time.

• Request access to, correction of, deletion of, or suspension of processing of your personal information
• Delete your account

How to exercise them:

• You can correct your information or delete your account directly in the profile settings
• You can turn device notifications off from the Notifications setting on the My tab; turning them off deletes your push subscription
• You can email us at tangocity24@gmail.com; we will act without delay
• You may act through an authorized representative (with documents such as a power of attorney)

9. Cookies and Device Storage

We use cookies and device storage to keep you logged in and remember your preferences.

You can refuse cookies in your browser settings. However, if you refuse essential cookies, some features such as login will not work.

10. How We Destroy Information

• We destroy personal information without delay once the retention reason arises
• Electronic files are deleted in a way that cannot be recovered

11. Security Measures

• Encryption in transit (HTTPS)
• Least-privilege database access (row-level security)
• Passwords stored using one-way encryption

12. Children Under 14

We do not collect personal information from children under 14 and restrict sign-up accordingly. If we confirm that a user is under 14, we delete the account.

13. Privacy Officer

For questions, complaints, or rights requests regarding personal information, contact:

• Jaehong Kim, Privacy Officer
• Email: tangocity24@gmail.com

14. Changes to This Policy

If this policy changes, we will announce the effective date and the changes on the Service. Changes that materially affect your rights are announced at least 15 days before they take effect. Changes required urgently by law or for security take effect immediately and are announced afterwards.

15. Additional Provisions for EU Users

Users residing in the EU/EEA are additionally protected by the EU General Data Protection Regulation (GDPR).

Legal bases for processing — We process personal data on the following bases.

• Providing the service (accounts, login, delivering reservations): performance of a contract or steps prior to entering into a contract (GDPR Art. 6(1)(b))
• Operating and improving the service and preventing abuse: our legitimate interests (GDPR Art. 6(1)(f))
• Complying with legal obligations: legal obligation (GDPR Art. 6(1)(c))
• Optional processing such as cookie consent: consent (GDPR Art. 6(1)(a)) — you may withdraw consent at any time

Additional rights — In addition to the rights in Section 8, you have the right to:

• Restriction of processing (GDPR Art. 18)
• Object to processing (GDPR Art. 21)
• Data portability — receive the information you provided in a structured format (GDPR Art. 20)
• Lodge a complaint with your data protection supervisory authority (GDPR Art. 77)

Children — In the EU, processing the personal data of children under 16 (13–16 depending on the country) requires parental consent. We may restrict registration for EU residents below the applicable age.

Representative — We will appoint a representative (GDPR Art. 27) for users in the EU as soon as possible and publish their details in this policy and Section 15 of the Terms.

16. Language and Priority

This policy is provided in multiple languages. Translations are for reference only, and the Korean version prevails in case of any discrepancy.