Privacy Policy

Last updated: 15 January 2026

Introduction

NovaInformium B.V. ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our fitness studio.

Data Controller Information

NovaInformium B.V. acts as the data controller for the personal information we process. Our contact details are:

• Company: NovaInformium B.V.
• Registration Number: NL56473823
• Address: Parkweg 218, 9733 XD Groningen, Netherlands
• Email: [email protected]
• Phone: +31 50 103 7662

Data Collection

The data we collect depends on how you interact with our services. We collect personal information that you voluntarily provide to us when you:

• Register for membership or services
• Contact us through our website or by phone
• Subscribe to our newsletter or communications
• Participate in fitness assessments or consultations
• Use our facilities and equipment
• Visit our website and interact with our content

The types of personal data we may collect include:

• Contact information (name, email address, phone number, postal address)
• Demographic information (age, gender, date of birth)
• Health and fitness information (medical conditions, fitness goals, exercise preferences)
• Payment information (billing address, payment method details)
• Website usage data (IP address, browser type, pages visited, time spent on site)
• Communication records (emails, phone calls, chat messages)

How We Use Your Information

We use the personal information we collect for various purposes, including how we use your information to provide and improve our services:

• Providing fitness services, personal training, and facility access
• Processing membership applications and managing your account
• Communicating with you about services, appointments, and updates
• Personalising your fitness experience and recommendations
• Processing payments and managing billing
• Ensuring the safety and security of our facilities
• Complying with legal obligations and regulatory requirements
• Improving our services and website functionality
• Marketing our services (with your consent where required)

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal information based on the following legal grounds:

• Contract: To perform our contractual obligations when you become a member or use our services
• Legitimate Interests: To operate our business, improve our services, and ensure facility security
• Consent: For marketing communications and certain data processing activities
• Legal Obligation: To comply with applicable laws and regulations
• Vital Interests: To protect your health and safety in emergency situations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

• Service providers who assist us in operating our business (payment processors, IT support, marketing platforms)
• Legal requirements or to protect our rights and safety
• Business transfers (mergers, acquisitions, or asset sales)
• With your explicit consent for specific purposes

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific data retention periods depend on the type of information and the purpose for which it was collected:

• Membership records: For the duration of your membership plus 7 years for legal and tax purposes
• Health and fitness data: For the duration of your membership plus 3 years
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics: Up to 26 months as per Google Analytics retention settings
• Financial records: 7 years as required by Dutch law

Your Rights

Under GDPR and Dutch data protection laws, you have several rights regarding your personal information:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise any of these rights, please contact us at [email protected] or +31 50 103 7662. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training on data protection
• Secure payment processing systems
• Regular backups and disaster recovery procedures

International Data Transfers

We primarily process your data within the European Economic Area (EEA). If we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or certification schemes approved by the European Commission.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Phone: +31 50 103 7662
• Address: NovaInformium B.V., Parkweg 218, 9733 XD Groningen, Netherlands

Supervisory Authority

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.