1. Data Controller
‍CrossFit Scheveningen VOF, operating under the name CrossFit Scheveningen – Hybrid Athletics.

Email: iris@crossfit-scheveningen.nl
‍
2. What Personal Data Do We Process?
‍We may process the following personal data:
- First and last name, address, email address, phone number, date of birth
- IBAN (for SEPA direct debit)
- Reservations and training history via the SportBit App
- Invoice and payment details
- Newsletter and marketing data
- Photo and video material

‍3. Purposes of Processing
- Execution of the membership agreement
- Administration and invoicing
- Communication regarding classes and activities
- Marketing (where legally permitted)
- Compliance with legal obligations

‍4. Legal Basis
‍Processing is based on the performance of a contract, legal obligations, legitimate interest, or consent where required.

‍5. Retention Periods
‍Personal data will not be retained longer than necessary, subject to applicable legal retention obligations.
(such as the 7-year fiscal retention period).

‍6. Sharing with Third Parties
‍Data may be shared with accounting firms, IT providers (such as SportBit), debt collection agencies, and newsletter software providers. We do not sell personal data to third parties.

‍7. Security
‍We implement appropriate technical and organizational measures to protect personal data.

‍8. Data Subject Rights
‍You have the right to access, rectify, erase, restrict, transfer your data, and to object to processing. Requests may be sent to:

iris@crossfit-scheveningen.nl

‍9. Image Material
‍Photos and videos may be taken during training sessions for promotional purposes. You may object via the SportBit App or by email.

‍10. Complaints
‍You may submit a complaint via iris@crossfit-scheveningen.nl or to the Dutch Data Protection Authority.