Privacy Policy

Data Controller

partylzslq B.V. is the data controller responsible for your personal data. We are registered in the Netherlands with registration number 16398572 and VAT number NL795246831B134.

Data Collection

The data we collect includes personal information such as your name, email address, phone number, health information, fitness goals, and payment details when you register for our services, book appointments, or communicate with us.

We collect information in the following ways:

• Information you provide directly when registering for services, booking appointments, or contacting us
• Health and fitness information during consultations and assessments
• Payment and billing information when you purchase our services
• Website usage data through cookies and analytics tools
• Communication records when you contact our support team

How We Use Your Information

We explain how we use your information to provide and improve our wellness services, process payments, communicate with you about appointments and services, and ensure the safety and effectiveness of our programmes.

Specifically, we use your data for:

• Providing personalised fitness and wellness services
• Processing membership registrations and payments
• Scheduling appointments and sending reminders
• Monitoring your progress and adjusting programmes
• Communicating about our services and special offers
• Ensuring health and safety compliance
• Improving our services based on feedback and usage patterns

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract performance: To provide the wellness services you have requested
• Legitimate interests: To improve our services and communicate relevant information
• Consent: For marketing communications and optional data processing
• Legal obligation: To comply with health and safety regulations
• Vital interests: In emergency situations to protect your health and safety

Data Sharing

We do not sell your personal data to third parties. We may share your information only in the following circumstances:

• With healthcare professionals when necessary for your safety
• With payment processors to handle transactions securely
• With emergency services if required for your health and safety
• With legal authorities when required by law
• With service providers who assist in delivering our services (under strict confidentiality agreements)

Data Retention

We retain your personal data only for as long as necessary to provide our services and comply with legal obligations. Specifically:

• Member information: For the duration of your membership plus 7 years for legal compliance
• Health records: 10 years from last contact as required by Dutch healthcare regulations
• Financial records: 7 years as required by tax and accounting laws
• Marketing consent: Until you withdraw consent or we determine the data is no longer needed
• Website analytics: 26 months from collection

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data under certain circumstances
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data in a structured format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for data processing at any time

To exercise these rights, please contact us at privacy@partylzslq.live. We will respond to your request within 30 days.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data during transmission and storage
• Regular security assessments and updates
• Access controls and staff training on data protection
• Secure backup and recovery procedures
• Regular monitoring for security breaches

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure adequate protection through:

• European Commission adequacy decisions
• Standard contractual clauses approved by the European Commission
• Certification schemes and codes of conduct

Cookies and Website Analytics

Our website uses cookies and similar technologies to enhance your browsing experience and analyse website usage. For detailed information about our use of cookies, please refer to our Cookie Policy.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by email.

Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please contact us:

Complaints

If you believe we have not handled your personal data in accordance with this policy or applicable law, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):