Privacy Policy

Introduction

SummitAdvisor B.V. ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

We are the data controller for the personal data we process, and we are committed to ensuring that your privacy is protected in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch privacy laws.

Data Collection

We collect various types of information to provide and improve our personal training services. The data we collect includes:

Personal Information

• Name, email address, phone number, and postal address
• Date of birth and emergency contact information
• Health and fitness information, including medical history and fitness goals
• Payment and billing information

Technical Information

• IP address, browser type, and operating system
• Website usage data and preferences
• Cookie and tracking technology data

How We Use Your Information

We use your personal data for legitimate business purposes and how we use your information includes:

• Providing personal training services and fitness programmes
• Communicating with you about appointments, services, and updates
• Processing payments and managing your account
• Ensuring your safety during training sessions
• Improving our services and website functionality
• Complying with legal obligations and protecting our rights

The legal basis for processing your personal data includes your consent, performance of a contract, compliance with legal obligations, and our legitimate business interests.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• With trusted service providers who assist in our business operations
• When required by law or to protect our legal rights
• In case of emergency situations to ensure your safety
• With your explicit consent for specific purposes

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal requirements.

• Client records: Retained for 7 years after the end of our business relationship
• Financial records: Retained for 7 years as required by Dutch law
• Marketing data: Retained until you withdraw consent or opt out
• Website analytics: Typically retained for 26 months

Your Rights

Under GDPR and Dutch privacy law, your rights include:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for specific processing activities

To exercise these rights, please contact us using the information provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training on data protection
• Secure storage of physical records

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data in accordance with applicable law.