Privacy Policy

Last updated: December 2024

gaetanofyu B.V. ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website gaetanofyu.top or use our services at our functional training facility in Groningen, Netherlands.

Data Controller

gaetanofyu B.V. is the data controller responsible for your personal data. Our contact details are:

• Company: gaetanofyu B.V.
• Address: Marktplein 242, 9726 YR Groningen, Netherlands
• Email: privacy@gaetanofyu.top
• Phone: +31 106253015
• Registration Number: B52632502
• VAT Number: NL620321546B01

Data Collection and Sources

The data we collect includes personal information such as your name, email address, phone number, and fitness-related information when you interact with our services. We collect this information directly from you when you:

• Fill out contact forms on our website
• Sign up for our training programs
• Visit our facility and complete membership forms
• Communicate with us via email or phone
• Participate in movement assessments or fitness evaluations
• Subscribe to our newsletters or updates
• Use our website and accept cookies

How We Use Your Information

We explain how we use your information to provide and improve our functional training services. The use of your data is based on the following legal grounds under GDPR:

• Contract Performance: To provide our training services, process membership applications, and manage your account
• Legitimate Interests: To improve our services, send relevant fitness tips, and maintain our facility operations
• Consent: For marketing communications and cookies (where required)
• Legal Obligation: To comply with health and safety regulations and tax requirements

Specifically, we use your information to:

• Provide functional training services and personal coaching
• Respond to your inquiries and provide customer support
• Process payments and manage memberships
• Conduct movement assessments and track your fitness progress
• Send important updates about our services and facility
• Ensure the safety and security of our facility
• Comply with legal and regulatory requirements
• Improve our website and services based on your feedback

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances:

• With your explicit consent
• To comply with legal obligations or court orders
• With trusted service providers who assist us in operating our business (under strict confidentiality agreements)
• In case of a business transfer, merger, or acquisition
• To protect the safety and security of our facility, staff, or members

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Specifically:

• Membership and training records: 7 years after membership ends (for tax and legal compliance)
• Contact form submissions: 2 years from submission date
• Marketing communications: Until you unsubscribe or withdraw consent
• Website cookies: As specified in our Cookie Policy
• Financial records: 7 years as required by Dutch law

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data under certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure data transmission using SSL encryption
• Regular security assessments and updates
• Access controls and staff training on data protection
• Secure storage of physical and digital records
• Regular backups and data recovery procedures

International Data Transfers

Your personal data is primarily processed within the European Union. If we need to transfer data outside the EU, we ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Cookies and Website Analytics

Our website uses cookies to improve your browsing experience and analyse website performance. For detailed information about our cookie usage, please refer to our Cookie Policy. You can manage your cookie preferences through your browser settings or our cookie consent banner.

Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy, want to exercise your rights, or need to contact us regarding your personal data, please contact us at:

• Email: privacy@gaetanofyu.top
• Phone: +31 106253015
• Address: gaetanofyu B.V., Marktplein 242, 9726 YR Groningen, Netherlands

Supervisory Authority

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data in accordance with GDPR requirements:

• Website: autoriteitpersoonsgegevens.nl
• Phone: +31 70 888 85 00
• Address: Autoriteit Persoonsgegevens, Postbus 93374, 2509 AJ Den Haag, Netherlands