Privacy Policy

1. Introduction

nextoracls B.V. ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you visit our website at nextoracls.top, use our fitness center services, or interact with us in any way. We are the Data Controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Collection

The data we collect includes personal information that you provide directly to us and information that is automatically collected when you use our services. This includes your name, email address, phone number, postal address, fitness goals, health information relevant to your training, payment details, and website usage data. We collect this information when you sign up for membership, book personal training sessions, participate in group classes, contact us through our website or phone, visit our facility, or interact with our website and online services.

3. How We Use Your Information

We explain how we use your information for various legitimate business purposes. The use of your data includes providing fitness services and membership benefits, processing payments and managing your account, communicating with you about your membership and our services, sending you relevant fitness tips and promotional materials (with your consent), ensuring the safety and security of our facility, improving our services and website functionality, complying with legal obligations, and responding to your inquiries and support requests.

4. Legal Basis for Processing

Under GDPR, we process your personal data based on several legal grounds: contract performance (to provide our fitness services), legitimate interests (to improve our services and communicate with you), legal compliance (to meet regulatory requirements), and consent (for marketing communications and non-essential cookies). You have the right to withdraw consent at any time where we rely on consent as the legal basis for processing.

5. Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information with trusted service providers who help us operate our business (such as payment processors and fitness equipment maintenance companies), professional advisors (lawyers, accountants), emergency contacts in case of medical emergencies, and law enforcement or regulatory authorities when required by law. All third parties are bound by strict data protection agreements.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Membership data is retained for the duration of your membership plus 7 years for accounting and legal purposes. Health and fitness data is retained for 3 years after membership termination. Website usage data is typically retained for 2 years. Marketing consent records are kept until you withdraw consent. We regularly review and securely delete data that is no longer needed.

7. Your Rights Under GDPR

As a data subject under GDPR, you have several important rights: the right to access your personal data, the right to rectify inaccurate data, the right to erasure (right to be forgotten) in certain circumstances, the right to restrict processing, the right to data portability, the right to object to processing based on legitimate interests, and the right to withdraw consent. To exercise these rights, please contact us at privacy@nextoracls.top or +31 109752611.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption of sensitive data, secure storage systems, access controls and staff training, regular security assessments, and incident response procedures. While we strive to protect your data, no method of transmission over the internet is 100% secure.

9. International Data Transfers

Your personal data is primarily processed within the European Union. If we need to transfer data outside the EU, we ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses or transfers to countries with adequacy decisions from the European Commission.

10. Cookies and Website Analytics

Our website uses cookies and similar technologies to enhance your browsing experience and analyze website usage. For detailed information about our cookie usage, please refer to our Cookie Policy. You can manage your cookie preferences through your browser settings or our cookie consent banner.

11. Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children under 16 without parental consent. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by email. Your continued use of our services after such changes constitutes acceptance of the updated policy.

13. Contact Information

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or need to contact us regarding your personal data, please reach out using the following contact information:

14. Supervisory Authority

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data in accordance with data protection law. You can contact them at autoriteitpersoonsgegevens.nl or by phone at +31 70 888 8500.