Privacy Policy

Introduction

extensgxrk B.V. ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you use our services, visit our website at extensgxrk.top, or interact with our CrossFit studio located at Molenweg 275, 5096 PT Tilburg, Netherlands.

As the Data Controller, extensgxrk processes your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch privacy laws. Our legal basis for processing includes legitimate business interests, contractual necessity, and your consent where required.

Data Collection

The data we collect includes personal information that you provide to us directly and information we collect automatically when you use our services. This includes your name, email address, phone number, emergency contact information, health and fitness data, payment information, and usage data from our website and services.

We collect this information when you register for our services, book classes, make payments, communicate with us, visit our website, or participate in our programs. We may also collect information from third parties such as payment processors or fitness tracking applications with your consent.

How We Use Your Information

We explain how we use your information to provide and improve our services, process payments, communicate with you about our services, ensure safety during workouts, comply with legal obligations, and enhance your fitness experience at extensgxrk.

Our use of your data includes managing your membership, scheduling classes, providing personalised fitness coaching, sending important updates about our services, processing payments, maintaining safety records, and improving our facilities and programs based on member feedback and usage patterns.

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information with service providers who assist us in operating our business (such as payment processors, scheduling software providers, and email service providers), emergency contacts when necessary for your safety, and legal authorities when required by law or to protect our rights and property.

All third-party service providers are required to maintain appropriate security measures and are prohibited from using your personal data for any purpose other than providing services to extensgxrk.

Data Retention

We retain your personal data only for as long as necessary to provide our services and comply with legal obligations. Membership data is retained for the duration of your membership and up to 7 years thereafter for financial and legal compliance purposes. Health and safety data is retained for 7 years following your last visit to our facility.

Website usage data and cookies are typically retained for 2 years unless you opt out earlier. Marketing communications data is retained until you unsubscribe or request deletion. We will securely delete or anonymise your data when it is no longer needed.

Your Rights

Under GDPR, you have several rights regarding your personal data, including the right to access your data, correct inaccurate information, delete your data in certain circumstances, restrict processing, data portability, and object to processing based on legitimate interests.

You also have the right to withdraw consent at any time where processing is based on consent, and the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your data appropriately.

Cookies and Website Data

Our website uses cookies and similar technologies to enhance your browsing experience, analyse website usage, and provide personalised content. We use essential cookies for website functionality, analytics cookies to understand how visitors use our site, and marketing cookies to show relevant advertisements.

You can manage your cookie preferences through our cookie consent banner or your browser settings. For detailed information about our cookie usage, please refer to our Cookie Policy.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, regular security assessments, staff training on data protection, and secure data storage systems.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but will notify you of any data breaches as required by law.

International Data Transfers

As extensgxrk operates primarily in the Netherlands, your data is processed within the European Union. If we need to transfer data outside the EU for service provision, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Children's Privacy

Our services are primarily designed for adults. We do not knowingly collect personal data from children under 16 without parental consent. If you are under 16, please have a parent or guardian contact us before providing any personal information. For members under 18, we require parental consent and emergency contact information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, sending you a notification. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding your personal data, please contact us using the following information: