• Home
  • Privacy Policy

Privacy Policy

HULAYA – PRIVACY POLICY

Version 1.0 — December 2025
This Privacy Policy explains how Len Rieder – Hulaya (“Hulaya”, “we”, “us”, “our”) collects, uses, stores, and protects personal data when you use the platform hulaya.com (“Platform”).

We comply with:

  • Swiss Data Protection Act (DSG 2023)

  • EU General Data Protection Regulation (GDPR)

By using the Platform, you agree to the practices described in this Privacy Policy.

1. Data Controller

The data controller responsible for processing personal data is:

Len Rieder – Hulaya
Einzelunternehmen
Stuckishausstrasse 11
3037 Herrenschwanden
Switzerland
CHE-144.657.890
Email: hulayaofficial@gmail.com

2. What Data We Collect

We collect the following categories of data:

2.1 Account Information

  • Full name

  • Email address

  • Phone number (optional)

  • Password (encrypted)

  • Profile photo (optional)

  • Location / city (optional)

2.2 Event Booking Data

  • Events booked

  • Tickets purchased

  • Payment status

  • Communication with organizers

2.3 Organizer Data

For users who list events:

  • Event descriptions

  • Photos & videos

  • Pricing

  • Availability & schedules

  • Refund rules

  • Stripe Connect ID

  • Verification details (KYC required by Stripe)

2.4 Payment Data

Handled by Stripe (not stored by Hulaya):

  • Card details

  • Billing address

  • Payouts for Organizers

  • Fees & transaction history

We do not store full credit card numbers.

2.5 Usage Data & Technical Data

Collected automatically:

  • IP address

  • Browser type

  • Device information

  • Operating system

  • Date & time of access

  • Cookies

  • Log files

  • Pages viewed

  • Referring URLs

2.6 Communication Data

  • Messages sent between Dancers and Organizers

  • Emails exchanged with support

  • Notifications and settings

2.7 Newsletter Data

If you subscribe:

  • Email address

  • Usage data (opens, clicks)

Processed via Mailchimp.

3. How We Use Your Data

We use personal data for:

  • Creating and managing user accounts

  • Enabling event bookings

  • Processing payments via Stripe

  • Facilitating communication between Dancers and Organizers

  • Providing Organizer dashboards

  • Preventing fraud and misuse

  • Improving user experience

  • Customer support

  • Analytics and performance monitoring

  • Marketing communications (if you subscribed)

4. Legal Basis for Processing

We process data based on:

  • Art. 6(1)(b) GDPR – Contract performance

  • Art. 6(1)(a) GDPR – Consent (newsletter, cookies, optional features)

  • Art. 6(1)(f) GDPR – Legitimate interest (security, improvement, fraud prevention)

  • Swiss DSG 2023 – For Swiss-based users

5. Cookies & Tracking

We use cookies for:

  • Essential platform functions

  • Authentication

  • Security

  • Analytics (if activated)

  • Preferences

  • Payment processing (Stripe cookies)

  • Map display (Mapbox / Google Maps cookies)

A detailed list of cookie types is provided in the Cookie Policy.

You may disable cookies through your browser settings, but the Platform may not function fully.

6. Third-Party Services & Data Transfers

We use trusted third-party providers to operate the Platform.
Data may be transferred to the EU or USA under Standard Contractual Clauses (SCCs).

6.1 Stripe (Payments)

Handles:

  • Credit/debit card payments

  • Chargebacks

  • Fraud checks

  • Payouts via Stripe Connect

Stripe Privacy: https://stripe.com/privacy

6.2 Mailchimp (Newsletter)

Used for:

  • Email campaigns

  • Marketing communication

  • Subscription management

Mailchimp is located in the USA.
Data transfers follow SCCs.

6.3 Mapbox / Google Maps

Used to display event locations.
These tools may collect:

  • IP address

  • Device data

  • Location (if allowed)

6.4 Analytics Tools (Optional)

We reserve the right to activate:

  • Google Analytics 4

  • or equivalent services

If enabled, cookies and tracking technologies may apply.

6.5 Kreezalid (Platform Hosting)

Our platform runs on Kreezalid, hosted in the EU.
All personal data is stored securely on Kreezalid servers.

7. Data Sharing

We share your data only when necessary:

7.1 With Organizers

If you book an event, Organizers receive:

  • Your name

  • Email address

  • Booking details

  • Any message you provided

7.2 With Dancers

If you are an Organizer:

  • Dancers see your profile & event information

7.3 With Authorities

Only if legally required (court order, fraud, abuse).

7.4 With Service Providers

  • Stripe

  • Mailchimp

  • Kreezalid

  • Analytics providers (if activated)

8. Data Retention

We store data only as long as necessary:

  • Account data → until account deletion

  • Booking data → 10 years (legal requirement for financial records)

  • Communication data → 24 months

  • Cookies → per Cookie Policy

  • Analytics data → if activated, per Google retention rules

9. Security

We implement:

  • Encryption (HTTPS)

  • Secure servers

  • Firewalls

  • Access controls

  • Stripe-level PCI compliance for payments

No system is 100% secure, but we follow industry best practices.

10. Your Rights (GDPR & DSG)

You have the right to:

  • Access your data

  • Correct inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict processing

  • Object to processing

  • Request data portability

  • Withdraw consent at any time

  • File a complaint with:

    • FDPIC (Switzerland)

    • any EU Data Protection Authority

Contact: hulayaofficial@gmail.com

11. Account Deletion

You may delete your account at any time.

Upon deletion:

  • Data required for fiscal records is retained for 10 years

  • Other data is deleted or anonymized

Organizers remain responsible for bookings they previously accepted.

12. Children's Privacy

Hulaya does not knowingly collect personal data from children under 14.

If we become aware of unintended collection, we will delete such data.

13. International Transfers

Data may be transferred to:

  • EU

  • USA

  • other countries where processors operate

All transfers follow:

  • Standard Contractual Clauses

  • Adequacy decisions

  • Appropriate safeguards

14. Changes to This Policy

We may update this Privacy Policy at any time.
Changes are effective once posted on the Platform.

15. Contact

For all privacy-related questions:

Len Rieder – Hulaya
Stuckishausstrasse 11
3037 Herrenschwanden
Switzerland
Email: hulayaofficial@gmail.com