Ritmo Privacy Policy

1. Data controller

Ritmo is published by WEPA EVENTS (non-profit association under the French Law of 1 July 1901), the controller of the data described here. Contact for any question or request: booking@wepatv.com.

2. Your account

Data: email address, account creation date, open sessions (date, IP address and browser).

Purpose: signing you in and giving you access to videos and discounts. Legal basis: performance of the terms of use you accept.

The sign-in link is valid for 15 minutes and is only stored in hashed form. A session stays open for 30 days at most. The account is kept until it is deleted.

3. Consent log

We record each acceptance of the terms of use (with their version) and each newsletter choice, with the date and platform, to be able to prove your consent (legal obligation).

When the account is deleted, this log no longer keeps your address, only a fingerprint of it that cannot be reversed.

4. Newsletter

If you agree, we send you the Ritmo newsletter (festivals, discounts). Legal basis: your consent, which you can withdraw at any time from "My account" or through the link in every newsletter.

The mailing list is managed with the listmonk software, installed on WEPA's server. Your address is only added after it has been verified (first sign-in) and is removed when your account is deleted.

Newsletters are sent through Brevo (Sendinblue, a French company, data hosted in the European Union), which receives your address and the message content for each mailing.

5. Organiser and artist pages

Public pages show the stage name, city, disciplines, a biography and public links (website, Instagram). Some are created by WEPA from information that is already public, to showcase the Cuban dance scene. Legal basis: WEPA's legitimate interest in presenting festivals and their artists.

You can object at any time to your page being displayed or ask for it to be corrected by writing to booking@wepatv.com, or ask to manage it yourself ("This is my page").

When you manage a page, we keep your link to it, your link requests (with the verification message) and your proposed changes until your account is deleted.

6. Videos and discounts

Video access only checks that you are signed in: we do not record which videos you watch.

Clicks on discount links are counted anonymously (a simple total), without knowing who clicked.

7. Security

To protect forms against bots, we use Cloudflare Turnstile, which analyses technical information about your browser.

To limit abuse, we count sign-in link requests per address and per connection. These counters use a fingerprint of the email address and IP address and are erased after one hour.

Server logs may record IP addresses and technical information for security and diagnostics, with limited retention. Legal basis: the legitimate interest of protecting the platform.

8. Maps

Festival and artist maps use OpenFreeMap base maps. To display them, your browser downloads them from this service, which then receives your IP address.

9. Recipients and hosting

Your data is only accessible to the authorised WEPA team. Technical providers: OVHcloud (server hosting and sending sign-in links), Brevo (sending the newsletter), Cloudflare (Turnstile) and Google Drive (storage of backups, encrypted before upload: Google cannot read them).

When these providers process data outside the European Union, the transfer is covered by the safeguards provided by the GDPR (adequacy decision or standard contractual clauses).

No data is sold or used for advertising.

10. Backups

The database is backed up every day, encrypted, so it can be restored after an incident. Backups are kept for 6 months at most: deleted data therefore disappears completely from backups within that period.

11. Cookies

Ritmo only uses a session cookie, required to stay signed in, and no audience measurement or advertising tool. No cookie consent is therefore requested.

12. Your rights

You can request access to your data, its rectification, erasure or portability, the restriction of a processing operation, or object to it.

From "My account", you can ask for a copy of your data or for your account to be deleted. You can also write to booking@wepatv.com. We reply within one month.

You can lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority.

13. Changes

This policy may change as the platform evolves. The update date is shown at the top of the page.