PRIVACY POLICY GEBOREN ZWEMMERS
At Geboren Zwemmers, we deeply respect the privacy of our students and their parents. We also are firm believers in transparency. Therefore, we have developed this policy regarding the processing of personal data. In this document, we explain how we process personal data and for which purposes, how long we keep your records and what measures we have taken to protect your personal data in our records.
The privacy statement made available to you is the only applicable version, until a new version replaces the current version.
Responsibility for this Privacy Policy
The responsible person for this policy, as referred to in the General Data Protection Regulation (GDPR) is:
Geboren Zwemmers
Attn. Hanneke Deen – van Tol
Draaischijf 41
6596GG Milsbeek
Processing your Personal Data
Geboren Zwemmers may collect your personal data. Personal data means: all information about an identified or identifiable individual. An individual is considered to be identifiable as a natural person when they can be identified directly or indirectly, particularly by means of personal data such as a name, a number of identification, location data or one or more elements characterizing the physical, physiological, genetic, economic, cultural or social identity.
What User Data We Collect
We may collect the following data in the following categories:
I) Students
- First name or given names
- Surname
- Date of birth
- Address, zip code and place of residence
- If applicable, allergies or health-related information.
II) Parents/guardians
- First name or given names
- Surname
- Address, zip code and place of residence
- Telephone number
- Account information (IBAN)
- Payment information.
III) Suppliers
- Company name and registration number Chamber of Commerce (KvK)
- First and last name of contact
- Business e-mail address
- Business phone number
- Billing information
- Services or goods provided.
IV) Recipients newsletter
- First and last name
- E-mail address
Why We Collect Your Data
We process your personal data for the following predetermined purposes. These purposes are relevant to our business operations and compliance with laws and regulations. We collect your data for:
- Executing an agreement,
- Planning swimming classes with parents,
- Compliance with laws and regulations,
- Sending newsletters and
- Maintaining relationships.
Automated decision-making
At Geboren Zwemmers, we do not use automated decision–making, meaning decision–making without the intervention of a natural person. We choose to operate this way, because automated decision–making can have major consequences for the legal position of the data subject and these consequences are not always clear.
Transfer of your personal data
We only process your personal data within the European Economic Area, or EEA. This means that your data is not stored outside the EEA or sent to parties outside the EEA. If we do store your personal data outside the EEA, we will inform you in a timely manner and take the necessary precautions to protect the safety of your personal data.
Security of personal data
We take technical and organizational measures to protect your personal data. For example, the personal data cannot be accessed by unauthorized individuals. Wherever necessary, our files are also physically secured by means of lockable storage spaces in the rooms.
Your Personal Data and Third Parties
We process your personal data within our company and, in principle, do not provide the present data to third parties. However, we can provide your personal data to third parties if they require this data for the execution of (part of) the agreement, for example for the execution of payment. We will not provide your personal data to third parties for commercial purposes, unless you have given explicit permission to do so.
In addition, we can provide the personal data we have collected to government institutions that have a statutory task and require the personal data to perform this task, such as the Tax and Customs Administration (‘de Belastingdienst’).
Your Rights regarding Your Personal Data
Under the GDPR, you have the right to inspect, change or delete your personal data. You can also request a limited processing of your personal data. This requires a motivation to support your request. You can also transfer your data to another service provider if you no longer wish to make use of our services. This is called data portability. You can exercise your rights by contacting us at info@geborenzwemmers.nl. You can also reach us by mail via the postal address stated on the first page of this privacy statement.
Any request regarding your personal data must be accompanied by a copy of a valid identity document, which has your signature. You can black out your personal identification number (‘Burgerservicenummer’ or’BSN’), passport number and image.
Retention period of personal data
We do not store your personal data any longer than necessary. As a rule of thumb, we use a two-year retention period for newsletters, communication and marketing purposes. For financial data, we are obliged to use a minimum retention period of 7 years or longer. We can keep your data for an extended period of time if required by laws and regulations.
Applicable law
Dutch law applies to this privacy statement. The Court of Gelderland, location Arnhem, has exclusive jurisdiction in any dispute regarding this privacy statement, subject to legal exceptions.
Subject to changes
Geboren Zwemmers reserves the right to change this privacy statement. We will publish the most current privacy statement on our website. We therefore recommend that you consult the website for the most recent version of this privacy statement.
