PRIVACY
STATEMENT

CrossFit Scheveningen - Hybrid Athletics

1. Data Controller

CrossFit Scheveningen VOF, operating under the name CrossFit Scheveningen – Hybrid Athletics.

Email: iris@crossfit-scheveningen.nl

2. What Personal Data Do We Process?

We may process the following personal data:
- First and last name, address, email address, phone number, date of birth
- IBAN (for SEPA direct debit)
- Reservations and training history via the SportBit App
- Invoice and payment details
- Newsletter and marketing data
- Photo and video material

3. Purposes of Processing

- Execution of the membership agreement
- Administration and invoicing
- Communication regarding classes and activities
- Marketing (where legally permitted)
- Compliance with legal obligations

4. Legal Basis

Processing is based on the performance of a contract, legal obligations, legitimate interest, or consent where required.

5. Retention Periods

Personal data will not be retained longer than necessary, subject to applicable legal retention obligations
(such as the 7-year fiscal retention period).

6. Sharing with Third Parties

Data may be shared with accounting firms, IT providers (such as SportBit), debt collection agencies, and newsletter software providers. We do not sell personal data to third parties.

7. Security

We implement appropriate technical and organizational measures to protect personal data.

8. Data Subject Rights

You have the right to access, rectify, erase, restrict, transfer your data, and to object to processing.
Requests may be sent to: iris@crossfit-scheveningen.nl

9. Image Material

Photos and videos may be taken during training sessions for promotional purposes. You may object via the SportBit App
or by email.

10. Complaints

You may submit a complaint via iris@crossfit-scheveningen.nl or to the Dutch Data Protection Authority.