Privacy Statement MindBodyFitness B.V.
1. Introduction
MindBodyFitness B.V. ("MindBodyFitness", "we", "us" or "our"), located in Hyde Park, Hoofddorp with its registered address at Eiffelstraat 11, 2132 HS Hoofddorp, values your privacy and handles your personal data with care. This Privacy Statement explains which personal data we collect from our members, guests, and website/app visitors, why we process this data, how long we retain it, and which rights you have under the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (UAVG).
This Privacy Statement applies to all visitors, members, and users of the MindBodyFitness club, website, and mobile application.
2. Who is Responsible for Your Data
MindBodyFitness B.V.
Donauweg 8 C, 1043 AJ Amsterdam, the Netherlands
Chamber of Commerce number: 98411217
Email: info@mindbodyfitness.nl
MindBodyFitness B.V. is the controller (verwerkingsverantwoordelijke) for the processing of your personal data as described in this Privacy Statement.
3. What Personal Data We Process
Depending on your relationship with us (prospect, member, guest, or website/app visitor), we may process the following categories of personal data:
- Identification and contact data: first and last name, address, date of birth, gender, telephone number, email address;
- Membership data: membership number, membership type, start and end date, class bookings, day pass usage, check-in/visit history;
- Financial data: IBAN/bank account number, payment history, invoices;
- Photograph: for identification purposes and access control;
- Health-related declarations: where relevant for participation in certain activities (e.g. medical declarations submitted for termination on medical grounds), processed only with your explicit consent;
- App and booking data: data generated through Sportivity (member management and bookings) and Mywellness by Technogym (workout tracking), such as booked classes, training history, and personal fitness goals, to the extent you choose to enter or link this information;
- CCTV footage: images of you recorded by our security cameras in public areas of the club;
- Photographs and videos for promotional purposes: where we take images or video during events or classes for marketing purposes (see Section 8);
- Communication data: correspondence with our reception, customer service, or personal trainers.
4. Purposes and Legal Bases for Processing
We only process your personal data where we have a valid legal basis under Article 6 GDPR:
| Purpose | Legal basis |
|---|---|
| Entering into and performing the membership agreement (registration, access, billing, class bookings) | Necessary for performance of a contract (Art. 6(1)(b) GDPR) |
| Processing payments and handling non-payment | Necessary for performance of a contract (Art. 6(1)(b) GDPR) |
| Security and safety through CCTV in public areas | Legitimate interest (Art. 6(1)(f) GDPR) |
| Sending service-related communications (e.g. changes to opening hours, membership terms) | Legitimate interest / performance of a contract |
| Sending marketing communications and newsletters | Consent (Art. 6(1)(a) GDPR) or legitimate interest, subject to opt-out |
| Processing a medical declaration for termination or the Ladies Only class policy justification | Explicit consent (Art. 9(2)(a) GDPR), given the sensitive nature of health data |
| Use of the Mywellness/Sportivity apps for training and booking purposes | Consent / performance of a contract |
| Compliance with legal obligations (e.g. tax and accounting rules) | Legal obligation (Art. 6(1)(c) GDPR) |
5. Special Categories of Personal Data (Health Data)
Where you voluntarily submit a medical declaration (for example, to support early termination of your membership on medical grounds, or in the context of the freeze/bevriezing policy for illness or injury), we only process this data with your explicit consent. Medical declarations are:
- stored separately and with restricted access, limited to staff who need this information to process your request;
- secured through appropriate technical and organisational measures in accordance with the GDPR and UAVG;
- retained no longer than necessary to process the relevant request, after which they are securely deleted.
You are free to withdraw your consent at any time, although this may mean we are unable to grant the request for which the declaration was submitted.
6. CCTV / Camera Surveillance
- MindBodyFitness uses CCTV cameras in the public areas of the club (fitness area, group class studio, reception, MindBody Café, corridors) for the prevention and detection of crime and to safeguard the safety of members, staff, and visitors.
- No cameras are placed in changing rooms, toilets, or other areas where members have a heightened expectation of privacy.
- The presence of CCTV is clearly indicated by signage at the entrance and within the club.
- Camera footage is retained for a maximum of 28 days, unless longer retention is necessary for the investigation of a specific incident, in which case footage relevant to that incident is retained until the investigation is concluded.
- Access to footage is restricted to authorised personnel who are bound by confidentiality, and access is password protected.
- Footage is only shared with police or other competent authorities where legally required, for example pursuant to a formal request in connection with a criminal investigation.
- You may request access to footage relating to yourself for a specified date, time, and location by contacting info@mindbodyfitness.nl. Requests to view footage of other individuals (e.g. suspected offenders) cannot be granted.
7. Wellness Area
The wellness area is subject to the same general house rules and privacy safeguards as the rest of the club. No CCTV cameras are placed inside the wellness area, changing rooms, showers, or sauna. These rules are intended to protect the privacy and safety of all members and visitors and do not affect the data protection safeguards described elsewhere in this Privacy Statement.
8. Photographs and Videos for Promotional Purposes
MindBodyFitness may take photographs and videos during events, classes, and general club activities for use in marketing materials, our website, and social media channels. If you do not wish to be included in such material, you may notify us at info@mindbodyfitness.nl, after which we will not use your image for future promotional purposes and will remove existing identifiable images where reasonably possible.
9. Third Parties and Processors
We work with the following categories of service providers, who process personal data on our behalf under a data processing agreement:
- Sportivity – member management and class/facility bookings;
- Mywellness by Technogym – workout tracking and personal training data;
- Buckaroo – payment service provider for processing membership payments and direct debits;
- Collection agency, where applicable, in the event of non-payment (see the General Terms and Conditions);
- IT hosting and software providers supporting our website and app.
We only share personal data with these processors to the extent necessary for the purposes described in this Privacy Statement. We do not sell your personal data to third parties, and we do not share personal data with parties established outside the European Union, except where explicitly stated otherwise or where legally required.
10. Retention Periods
- Membership data: retained for the duration of your membership and for a maximum of 2 years after termination, unless a longer statutory retention period applies (e.g. tax and accounting obligations require certain financial data to be retained for 7 years).
- CCTV footage: maximum 28 days, save for footage relevant to an ongoing incident investigation.
- Medical declarations: retained only for the duration necessary to process the relevant request, then deleted.
- Marketing/newsletter data: retained until you unsubscribe, after which your data is deleted within a reasonable period.
- Complaint-handling correspondence: retained for a maximum of 2 years after resolution.
11. Security
MindBodyFitness has implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including:
- confidentiality obligations for all staff with access to personal data;
- username and password protection on all systems;
- pseudonymisation and encryption of personal data where appropriate;
- regular back-ups and periodic testing of security measures;
- staff training on data protection obligations.
12. Your Rights
Under the GDPR and the UAVG, you have the right to:
- access the personal data we hold about you;
- rectify inaccurate or incomplete personal data;
- erase your personal data where it is no longer necessary for the purposes for which it was collected;
- restrict the processing of your personal data in certain circumstances;
- data portability, allowing you to receive your personal data in a structured, commonly used format;
- object to processing based on our legitimate interest, including for direct marketing purposes;
- withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us at info@mindbodyfitness.nl. We will respond to your request within one month, which period may be extended by two further months in case of complex requests; we will inform you of any such extension. We may ask you to verify your identity before processing your request.
13. Complaints
If you have a complaint about how we process your personal data, please contact us first at info@mindbodyfitness.nl so that we can try to resolve the matter together. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), www.autoriteitpersoonsgegevens.nl.
14. Changes to this Privacy Statement
We may amend this Privacy Statement from time to time to reflect changes in our processing activities or applicable law. The most recent version is always available at [website] and, where changes are material, we will notify members in advance.
15. Contact
MindBodyFitness B.V.
Donauweg 8 C, 1043 AJ Amsterdam
Email: info@mindbodyfitness.nl
Last updated: 26 August 2026
Privacy Statement MindBodyFitness B.V.
1. Introduction
MindBodyFitness B.V. ("MindBodyFitness", "we", "us" or "our"), located in Hyde Park, Hoofddorp with its registered address at Eiffelstraat 11, 2132 HS Hoofddorp, values your privacy and handles your personal data with care. This Privacy Statement explains which personal data we collect from our members, guests, and website/app visitors, why we process this data, how long we retain it, and which rights you have under the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (UAVG).
This Privacy Statement applies to all visitors, members, and users of the MindBodyFitness club, website, and mobile application.
2. Who is Responsible for Your Data
MindBodyFitness B.V.
Donauweg 8 C, 1043 AJ Amsterdam, the Netherlands
Chamber of Commerce number: 98411217
Email: info@mindbodyfitness.nl
MindBodyFitness B.V. is the controller (verwerkingsverantwoordelijke) for the processing of your personal data as described in this Privacy Statement.
3. What Personal Data We Process
Depending on your relationship with us (prospect, member, guest, or website/app visitor), we may process the following categories of personal data:
- Identification and contact data: first and last name, address, date of birth, gender, telephone number, email address;
- Membership data: membership number, membership type, start and end date, class bookings, day pass usage, check-in/visit history;
- Financial data: IBAN/bank account number, payment history, invoices;
- Photograph: for identification purposes and access control;
- Health-related declarations: where relevant for participation in certain activities (e.g. medical declarations submitted for termination on medical grounds), processed only with your explicit consent;
- App and booking data: data generated through Sportivity (member management and bookings) and Mywellness by Technogym (workout tracking), such as booked classes, training history, and personal fitness goals, to the extent you choose to enter or link this information;
- CCTV footage: images of you recorded by our security cameras in public areas of the club;
- Photographs and videos for promotional purposes: where we take images or video during events or classes for marketing purposes (see Section 8);
- Communication data: correspondence with our reception, customer service, or personal trainers.
4. Purposes and Legal Bases for Processing
We only process your personal data where we have a valid legal basis under Article 6 GDPR:
| Purpose | Legal basis |
|---|---|
| Entering into and performing the membership agreement (registration, access, billing, class bookings) | Necessary for performance of a contract (Art. 6(1)(b) GDPR) |
| Processing payments and handling non-payment | Necessary for performance of a contract (Art. 6(1)(b) GDPR) |
| Security and safety through CCTV in public areas | Legitimate interest (Art. 6(1)(f) GDPR) |
| Sending service-related communications (e.g. changes to opening hours, membership terms) | Legitimate interest / performance of a contract |
| Sending marketing communications and newsletters | Consent (Art. 6(1)(a) GDPR) or legitimate interest, subject to opt-out |
| Processing a medical declaration for termination or the Ladies Only class policy justification | Explicit consent (Art. 9(2)(a) GDPR), given the sensitive nature of health data |
| Use of the Mywellness/Sportivity apps for training and booking purposes | Consent / performance of a contract |
| Compliance with legal obligations (e.g. tax and accounting rules) | Legal obligation (Art. 6(1)(c) GDPR) |
5. Special Categories of Personal Data (Health Data)
Where you voluntarily submit a medical declaration (for example, to support early termination of your membership on medical grounds, or in the context of the freeze/bevriezing policy for illness or injury), we only process this data with your explicit consent. Medical declarations are:
- stored separately and with restricted access, limited to staff who need this information to process your request;
- secured through appropriate technical and organisational measures in accordance with the GDPR and UAVG;
- retained no longer than necessary to process the relevant request, after which they are securely deleted.
You are free to withdraw your consent at any time, although this may mean we are unable to grant the request for which the declaration was submitted.
6. CCTV / Camera Surveillance
- MindBodyFitness uses CCTV cameras in the public areas of the club (fitness area, group class studio, reception, MindBody Café, corridors) for the prevention and detection of crime and to safeguard the safety of members, staff, and visitors.
- No cameras are placed in changing rooms, toilets, or other areas where members have a heightened expectation of privacy.
- The presence of CCTV is clearly indicated by signage at the entrance and within the club.
- Camera footage is retained for a maximum of 28 days, unless longer retention is necessary for the investigation of a specific incident, in which case footage relevant to that incident is retained until the investigation is concluded.
- Access to footage is restricted to authorised personnel who are bound by confidentiality, and access is password protected.
- Footage is only shared with police or other competent authorities where legally required, for example pursuant to a formal request in connection with a criminal investigation.
- You may request access to footage relating to yourself for a specified date, time, and location by contacting info@mindbodyfitness.nl. Requests to view footage of other individuals (e.g. suspected offenders) cannot be granted.
7. Wellness Area
The wellness area is subject to the same general house rules and privacy safeguards as the rest of the club. No CCTV cameras are placed inside the wellness area, changing rooms, showers, or sauna. These rules are intended to protect the privacy and safety of all members and visitors and do not affect the data protection safeguards described elsewhere in this Privacy Statement.
8. Photographs and Videos for Promotional Purposes
MindBodyFitness may take photographs and videos during events, classes, and general club activities for use in marketing materials, our website, and social media channels. If you do not wish to be included in such material, you may notify us at info@mindbodyfitness.nl, after which we will not use your image for future promotional purposes and will remove existing identifiable images where reasonably possible.
9. Third Parties and Processors
We work with the following categories of service providers, who process personal data on our behalf under a data processing agreement:
- Sportivity – member management and class/facility bookings;
- Mywellness by Technogym – workout tracking and personal training data;
- Buckaroo – payment service provider for processing membership payments and direct debits;
- Collection agency, where applicable, in the event of non-payment (see the General Terms and Conditions);
- IT hosting and software providers supporting our website and app.
We only share personal data with these processors to the extent necessary for the purposes described in this Privacy Statement. We do not sell your personal data to third parties, and we do not share personal data with parties established outside the European Union, except where explicitly stated otherwise or where legally required.
10. Retention Periods
- Membership data: retained for the duration of your membership and for a maximum of 2 years after termination, unless a longer statutory retention period applies (e.g. tax and accounting obligations require certain financial data to be retained for 7 years).
- CCTV footage: maximum 28 days, save for footage relevant to an ongoing incident investigation.
- Medical declarations: retained only for the duration necessary to process the relevant request, then deleted.
- Marketing/newsletter data: retained until you unsubscribe, after which your data is deleted within a reasonable period.
- Complaint-handling correspondence: retained for a maximum of 2 years after resolution.
11. Security
MindBodyFitness has implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including:
- confidentiality obligations for all staff with access to personal data;
- username and password protection on all systems;
- pseudonymisation and encryption of personal data where appropriate;
- regular back-ups and periodic testing of security measures;
- staff training on data protection obligations.
12. Your Rights
Under the GDPR and the UAVG, you have the right to:
- access the personal data we hold about you;
- rectify inaccurate or incomplete personal data;
- erase your personal data where it is no longer necessary for the purposes for which it was collected;
- restrict the processing of your personal data in certain circumstances;
- data portability, allowing you to receive your personal data in a structured, commonly used format;
- object to processing based on our legitimate interest, including for direct marketing purposes;
- withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us at info@mindbodyfitness.nl. We will respond to your request within one month, which period may be extended by two further months in case of complex requests; we will inform you of any such extension. We may ask you to verify your identity before processing your request.
13. Complaints
If you have a complaint about how we process your personal data, please contact us first at info@mindbodyfitness.nl so that we can try to resolve the matter together. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), www.autoriteitpersoonsgegevens.nl.
14. Changes to this Privacy Statement
We may amend this Privacy Statement from time to time to reflect changes in our processing activities or applicable law. The most recent version is always available at [website] and, where changes are material, we will notify members in advance.
15. Contact
MindBodyFitness B.V.
Donauweg 8 C, 1043 AJ Amsterdam
Email: info@mindbodyfitness.nl
Last updated: 26 August 2026
Privacy Statement MindBodyFitness B.V.
1. Introduction
MindBodyFitness B.V. ("MindBodyFitness", "we", "us" or "our"), located in Hyde Park, Hoofddorp with its registered address at Eiffelstraat 11, 2132 HS Hoofddorp, values your privacy and handles your personal data with care. This Privacy Statement explains which personal data we collect from our members, guests, and website/app visitors, why we process this data, how long we retain it, and which rights you have under the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (UAVG).
This Privacy Statement applies to all visitors, members, and users of the MindBodyFitness club, website, and mobile application.
2. Who is Responsible for Your Data
MindBodyFitness B.V.
Donauweg 8 C, 1043 AJ Amsterdam, the Netherlands
Chamber of Commerce number: 98411217
Email: info@mindbodyfitness.nl
MindBodyFitness B.V. is the controller (verwerkingsverantwoordelijke) for the processing of your personal data as described in this Privacy Statement.
3. What Personal Data We Process
Depending on your relationship with us (prospect, member, guest, or website/app visitor), we may process the following categories of personal data:
- Identification and contact data: first and last name, address, date of birth, gender, telephone number, email address;
- Membership data: membership number, membership type, start and end date, class bookings, day pass usage, check-in/visit history;
- Financial data: IBAN/bank account number, payment history, invoices;
- Photograph: for identification purposes and access control;
- Health-related declarations: where relevant for participation in certain activities (e.g. medical declarations submitted for termination on medical grounds), processed only with your explicit consent;
- App and booking data: data generated through Sportivity (member management and bookings) and Mywellness by Technogym (workout tracking), such as booked classes, training history, and personal fitness goals, to the extent you choose to enter or link this information;
- CCTV footage: images of you recorded by our security cameras in public areas of the club;
- Photographs and videos for promotional purposes: where we take images or video during events or classes for marketing purposes (see Section 8);
- Communication data: correspondence with our reception, customer service, or personal trainers.
4. Purposes and Legal Bases for Processing
We only process your personal data where we have a valid legal basis under Article 6 GDPR:
| Purpose | Legal basis |
|---|---|
| Entering into and performing the membership agreement (registration, access, billing, class bookings) | Necessary for performance of a contract (Art. 6(1)(b) GDPR) |
| Processing payments and handling non-payment | Necessary for performance of a contract (Art. 6(1)(b) GDPR) |
| Security and safety through CCTV in public areas | Legitimate interest (Art. 6(1)(f) GDPR) |
| Sending service-related communications (e.g. changes to opening hours, membership terms) | Legitimate interest / performance of a contract |
| Sending marketing communications and newsletters | Consent (Art. 6(1)(a) GDPR) or legitimate interest, subject to opt-out |
| Processing a medical declaration for termination or the Ladies Only class policy justification | Explicit consent (Art. 9(2)(a) GDPR), given the sensitive nature of health data |
| Use of the Mywellness/Sportivity apps for training and booking purposes | Consent / performance of a contract |
| Compliance with legal obligations (e.g. tax and accounting rules) | Legal obligation (Art. 6(1)(c) GDPR) |
5. Special Categories of Personal Data (Health Data)
Where you voluntarily submit a medical declaration (for example, to support early termination of your membership on medical grounds, or in the context of the freeze/bevriezing policy for illness or injury), we only process this data with your explicit consent. Medical declarations are:
- stored separately and with restricted access, limited to staff who need this information to process your request;
- secured through appropriate technical and organisational measures in accordance with the GDPR and UAVG;
- retained no longer than necessary to process the relevant request, after which they are securely deleted.
You are free to withdraw your consent at any time, although this may mean we are unable to grant the request for which the declaration was submitted.
6. CCTV / Camera Surveillance
- MindBodyFitness uses CCTV cameras in the public areas of the club (fitness area, group class studio, reception, MindBody Café, corridors) for the prevention and detection of crime and to safeguard the safety of members, staff, and visitors.
- No cameras are placed in changing rooms, toilets, or other areas where members have a heightened expectation of privacy.
- The presence of CCTV is clearly indicated by signage at the entrance and within the club.
- Camera footage is retained for a maximum of 28 days, unless longer retention is necessary for the investigation of a specific incident, in which case footage relevant to that incident is retained until the investigation is concluded.
- Access to footage is restricted to authorised personnel who are bound by confidentiality, and access is password protected.
- Footage is only shared with police or other competent authorities where legally required, for example pursuant to a formal request in connection with a criminal investigation.
- You may request access to footage relating to yourself for a specified date, time, and location by contacting info@mindbodyfitness.nl. Requests to view footage of other individuals (e.g. suspected offenders) cannot be granted.
7. Wellness Area
The wellness area is subject to the same general house rules and privacy safeguards as the rest of the club. No CCTV cameras are placed inside the wellness area, changing rooms, showers, or sauna. These rules are intended to protect the privacy and safety of all members and visitors and do not affect the data protection safeguards described elsewhere in this Privacy Statement.
8. Photographs and Videos for Promotional Purposes
MindBodyFitness may take photographs and videos during events, classes, and general club activities for use in marketing materials, our website, and social media channels. If you do not wish to be included in such material, you may notify us at info@mindbodyfitness.nl, after which we will not use your image for future promotional purposes and will remove existing identifiable images where reasonably possible.
9. Third Parties and Processors
We work with the following categories of service providers, who process personal data on our behalf under a data processing agreement:
- Sportivity – member management and class/facility bookings;
- Mywellness by Technogym – workout tracking and personal training data;
- Buckaroo – payment service provider for processing membership payments and direct debits;
- Collection agency, where applicable, in the event of non-payment (see the General Terms and Conditions);
- IT hosting and software providers supporting our website and app.
We only share personal data with these processors to the extent necessary for the purposes described in this Privacy Statement. We do not sell your personal data to third parties, and we do not share personal data with parties established outside the European Union, except where explicitly stated otherwise or where legally required.
10. Retention Periods
- Membership data: retained for the duration of your membership and for a maximum of 2 years after termination, unless a longer statutory retention period applies (e.g. tax and accounting obligations require certain financial data to be retained for 7 years).
- CCTV footage: maximum 28 days, save for footage relevant to an ongoing incident investigation.
- Medical declarations: retained only for the duration necessary to process the relevant request, then deleted.
- Marketing/newsletter data: retained until you unsubscribe, after which your data is deleted within a reasonable period.
- Complaint-handling correspondence: retained for a maximum of 2 years after resolution.
11. Security
MindBodyFitness has implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including:
- confidentiality obligations for all staff with access to personal data;
- username and password protection on all systems;
- pseudonymisation and encryption of personal data where appropriate;
- regular back-ups and periodic testing of security measures;
- staff training on data protection obligations.
12. Your Rights
Under the GDPR and the UAVG, you have the right to:
- access the personal data we hold about you;
- rectify inaccurate or incomplete personal data;
- erase your personal data where it is no longer necessary for the purposes for which it was collected;
- restrict the processing of your personal data in certain circumstances;
- data portability, allowing you to receive your personal data in a structured, commonly used format;
- object to processing based on our legitimate interest, including for direct marketing purposes;
- withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us at info@mindbodyfitness.nl. We will respond to your request within one month, which period may be extended by two further months in case of complex requests; we will inform you of any such extension. We may ask you to verify your identity before processing your request.
13. Complaints
If you have a complaint about how we process your personal data, please contact us first at info@mindbodyfitness.nl so that we can try to resolve the matter together. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), www.autoriteitpersoonsgegevens.nl.
14. Changes to this Privacy Statement
We may amend this Privacy Statement from time to time to reflect changes in our processing activities or applicable law. The most recent version is always available at [website] and, where changes are material, we will notify members in advance.
15. Contact
MindBodyFitness B.V.
Donauweg 8 C, 1043 AJ Amsterdam
Email: info@mindbodyfitness.nl
Last updated: 26 August 2026