Privacy Policy

Introduction

turbomonolith B.V. ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services.

We are the data controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data We Collect

We collect various types of personal data to provide and improve our fitness training services. The data we collect includes:

• Contact information (name, email address, phone number, postal address)
• Fitness and health information relevant to your training programmes
• Payment and billing information
• Communication records and preferences
• Website usage data and analytics information
• Cookie and tracking technology data

This data collection enables us to provide personalised fitness services and maintain effective communication with our clients.

How We Use Your Information

We process your personal data for various purposes based on legitimate interests, contractual necessity, and your consent. How we use your data includes:

• Providing fitness training services and personalised programmes
• Communicating about appointments, schedules, and service updates
• Processing payments and managing billing
• Improving our services and website functionality
• Marketing communications (with your consent)
• Compliance with legal obligations

The use of your data is always proportionate to the purposes for which it was collected and in accordance with applicable data protection laws.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information with:

• Service providers who assist in delivering our services
• Payment processors for billing purposes
• Analytics providers (such as Google Analytics)
• Legal authorities when required by law

All third parties are required to maintain appropriate security measures and use your data only for specified purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Client records: 7 years after the end of our service relationship
• Financial records: 7 years for tax and accounting purposes
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics: 26 months (Google Analytics default)

Data retention periods may be extended if required by law or for the establishment, exercise, or defence of legal claims.

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal data:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise any of these rights, please contact us using the information provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data
• Regular security assessments
• Staff training on data protection
• Secure data storage and transmission
• Access controls and authentication procedures

International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

• European Commission adequacy decisions
• Standard Contractual Clauses
• Binding Corporate Rules
• Other legally recognised transfer mechanisms

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date.

We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Information

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data appropriately.