Privacy policy

Who is responsible?

RijnmondFit B.V., trading under the name 365Fit, is the data controller for the personal data described in this statement. This applies to all 365Fit locations.

RijnmondFit B.V. · 365Fit
Viaductweg 89
3161 RX Rhoon
Chamber of Commerce registration number 84915730
info@365fit.nl
085 041 04 32

What data do we process?

We only process data that is necessary for your membership, access to the gym, payments, security and communication with you. Below, for each type of data processing, you will find the purpose, the legal basis and the retention period.

The details marked as mandatory during registration are required to take out and manage your membership. Without these details, we cannot provide you with a membership or access.

Membership and account

Details: Name, address, postcode, town/city, email address, telephone number, date of birth, gender, chosen location, account details and membership information.
Objective: Signing up, managing your membership, managing your account, communicating about the service and granting access to the 365Fit app.
Foundation: The performance of the contract and steps leading up to the contract.
Save: For up to 2 years after the subscription ends, except for data subject to a statutory retention obligation.

Payment and invoicing

Details: Payment, billing and transaction details relating to the subscription.
Objective: Processing payments and invoices and managing the financial administration.
Foundation: The performance of the contract and statutory tax obligations.
Save: We retain invoices and data forming part of our tax records for 7 years.

Access registration

Details: The QR code used, the location and the time of entry or check-in.
Objective: To provide 24/7 access, ensure safety and prevent misuse of access.
Foundation: The performance of the contract and 365Fit’s legitimate interest in ensuring secure and reliable access.
Save: Up to 2 years.

CCTV

Details: CCTV footage from fitness centres where CCTV surveillance is in use.
Objective: The safety of visitors and staff and the protection of property.
Foundation: 365Fit’s legitimate interest in ensuring the safety of people and property.
Save: Up to 31 days.

Optional emergency contact

Details: Name and telephone number of an emergency contact, only if you provide this information.
Objective: We can contact the person you have designated if necessary in an emergency.
Foundation: The legitimate interest in safety and assistance in an emergency. Providing an emergency contact is not compulsory.
Source: The member who provides the contact details.
Save: For up to 2 years after your membership ends, or sooner if you remove your emergency contact details.

Enquiries and customer service

Details: Your contact details and the content of your enquiry or message.
Objective: Answering your enquiries, booking appointments and providing support with your membership.
Foundation: The performance of the contract, steps taken prior to entering into the contract, or the legitimate interest in handling enquiries effectively.
Save: For members, data is retained for a maximum of two years after the membership ends. We do not retain one-off enquiries for longer than is necessary to deal with them.

Cancellation via the website

Details: Name, date of birth, email address and the technical details needed for spam protection.
Objective: Identifying your membership, processing your cancellation and sending confirmation.
Foundation: The performance of the contract and the legitimate interest in processing cancellations reliably.
Save: For members, data is retained for a maximum of two years after the membership ends. We do not retain a one-off request for longer than is necessary to deal with it.

We use two data processors to provide our services. They are only permitted to process personal data for the agreed services:

Training: Membership administration, accounts, subscriptions, communications, invoicing, the 365Fit app and access.
Univora Connect: the technical set-up required for live sessions.

In addition, we may disclose data where required by law, for example to a competent supervisory authority or law enforcement agency. In such cases, we will not disclose more data than is necessary.

Website, cookies and external services

The website uses essential local browser storage to remember your cookie preferences. This setting does not contain a unique identifier and is stored on your device for a maximum of 12 months. Essential storage cannot be disabled, as otherwise we would be unable to respect your preferences.

The following external services will only be loaded once you have given your consent for each category. The basis for this use is your consent:

Font: Google Fonts for Open Sans;
Maps and reviews: Google Maps and Google Places for maps and up-to-date review information;
Video and 3D tour: YouTube for a feel for the atmosphere and Matterport for the virtual tour;
Live occupancy: Univora Connect for real-time occupancy data at a venue.
Spam protection: Google reCAPTCHA to protect the cancellation form against spam and misuse.

When you enable this external content, your browser connects directly to the relevant provider. In doing so, that provider may receive technical data, such as your IP address, browser and device details. The provider may process data outside the European Economic Area in accordance with its own privacy policy.

For reCAPTCHA, your browser connects to Google reCAPTCHA. Google may receive technical data such as your IP address and browser details. Read more about how Google data from websites using Google services and take a look Matterport’s privacy policy. We do not load these external components without your consent. The website does not currently use any first-party analytics or marketing cookies.

You can opt out of external services without losing access to the basic website. You can always change your selection for each category using the button Cookie preferences bottom left of the website.

How long do we retain data?

The specific retention periods are set out above for each type of data processing. Once the retention period has expired, we will delete or anonymise the data, unless a legal obligation or an ongoing dispute requires certain data to be retained for longer.

How do we protect data?

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access and unlawful use. Only those who need the data for their work are granted access. We also enter into security agreements with our data processors.

Your privacy rights

Depending on the situation, you can ask us to:

access to the personal data we process about you;
to correct any incorrect or incomplete information;
delete data;
to temporarily restrict processing;
to transfer data digitally;
to object to processing on the grounds of a legitimate interest;
to withdraw previously given consent.

Withdrawing consent does not affect the lawfulness of processing carried out prior to withdrawal. Please send your request to info@365fit.nl. We may ask for further information if necessary to verify your identity thoroughly. We aim to respond to privacy requests within one month.

Contact and complaints

Do you have a question or a complaint regarding the processing of your personal data? Please contact us first via info@365fit.nl or call 085 041 04 32.

You also have the right to lodge a complaint with the Dutch Data Protection Authority.

Changes

If our services or data processing practices change, we will update this statement. The date of the last update is always shown at the top. In the event of significant changes, we will inform members via an appropriate communication channel.