Who are we and what do we do?
We are FITsociety B.V. We respect your privacy and private life, but sometimes we need Personal Data from you. This statement explains which Personal Data we use and why. It also explains how we store, protect and process this Personal Data.
This privacy policy applies to our website www.fitsociety.nl (the Website), our online application FITsociety (the App) and the services we offer (the Services). We handle your Personal Data in accordance with the General Data Protection Regulation (the GDPR) and other relevant laws and regulations in the field of Personal Data protection, such as the Dutch Telecommunications Act for the use of cookies. We refer to all legislation mentioned here collectively as the Relevant Legislation.
Younger than 16 years
If you are under 16 years old, you need permission from your parents or legal guardian to use our Website, App and Services.
Protection of Personal and Sensitive User Data
We take the protection of your personal and sensitive data very seriously. All data we collect is encrypted both in transit and at rest to prevent unauthorized access, alteration, loss or destruction. We use advanced security measures, such as encryption and access management, to ensure that your data remains secure. In addition, we regularly conduct security audits to protect our systems against unauthorized or unlawful access.
Processing and Protection of Sensitive User Data
- Access to Sensitive User Data: We collect and process sensitive user data, such as health data, only after obtaining the user's explicit consent.
- Collection, Use and Sharing of Data: Sensitive data is collected solely to improve the functionality of our application. This data is not shared with third parties, except where this is necessary for the operation of the app, as required by law, or after the user's explicit consent.
- Consistency with App Store Data Safety Labels: Our privacy policy is consistent with the data safety labels as displayed in both the Google Play Store and the Apple App Store. We ensure that the information we provide is consistent with these labels.
- Use of Data: Sensitive data, including data collected through HealthKit or Health Connect, is not used for advertising purposes and is used solely to improve users' health and well-being.
- User Consent: Data is collected and processed only after obtaining the user's explicit consent. Users may withdraw their consent at any time.
- Protection of Data: All sensitive user data is protected against unauthorized or unlawful access, destruction, loss, alteration or disclosure through advanced security measures, such as encryption and access control.
- Deletion of Data: Users have the right to delete their data at any time through the application settings.
- External Sharing of Data: HealthKit and Health Connect data is not shared with third parties without the user's explicit consent, except where legally required.
Use of Google API data and Limited Use
When users choose to connect their Google account to FITsociety, we may request access to certain Google API data, such as Google Calendar data. This access is used only for features the user actively enables, such as calendar connection, availability, scheduling, blocking time and synchronizing appointments.
FITsociety's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google Calendar data is used only to provide and improve the requested calendar and scheduling features within FITsociety. This data is not sold, not used for advertising purposes and not shared with third parties, except when necessary to provide the requested functionality, when the user gives consent, or when required by law.
We do not use Google Calendar data to train general AI models. If calendar data is used for smart scheduling or optimization within FITsociety, it is used solely to help the user or coach with their own scheduling and availability within the application.
Users can revoke the Google connection at any time through their Google account or through the settings within FITsociety, where this option is available.
Personal Data
To provide our Website, App and Services, we process Personal Data. The term Personal Data means information by which you can be identified directly or indirectly as a person. This definition is consistent with the Relevant Legislation.
We also process special categories of Personal Data, such as data from which race or ethnic origin may be apparent and data concerning biometric data and health. We process these special categories of Personal Data only with your explicit consent.
Who is the controller of your Personal Data?
FITsociety is the controller responsible for processing your Personal Data within the meaning of the Relevant Legislation. At the bottom of this privacy policy you will find our contact details and the contact details of our data protection officer.
Which Personal Data do we process and for what purposes do we use it?
To use our Website, Apps and Services, we need a number of items of Personal Data from you. We may process your Personal Data because we comply with the Relevant Legislation. We use your Personal Data only if we need it to perform our agreement, if we need it to comply with a legal obligation, if we have a legitimate interest in doing so or if you have given us consent.
We will use your Personal Data only for the purposes below, or for a purpose closely related to them. This means that your Personal Data will never be used by us in an unexpected way.
Customers with an account
Personal dataContact details
First and last name and email address.
If you want to create an account with us, it is mandatory to provide this Personal Data so that we can provide our Service.Purpose(s)
- create a personal account for you on our platform
- address you correctly in correspondence
- contact you
- send the newsletter. You can always unsubscribe from the newsletter
Legal basis
- Performance of the agreement
- Legitimate interest
Personal dataPersonal account details
Name, date of birth, place of residence, profile photo.
To get the most out of our Service, you can choose to complete your profile in full.Purpose(s)
- create a personal account for you on our platform
Legal basis
- Consent
Personal dataFit Passport
Training goal, number of active years, number of training days per week, height, weight, target weight, body fat percentage, nutritional intake, BMI, allergies, sleep registration, calorie expenditure, information relating to the type, frequency and intensity of physical movements, fluid measurements, physical measurements, gender, occupation and shoe size.
It is your own choice whether to supplement your profile with this Personal Data. With a fully completed profile, you can get the most out of our Service. You can enter, change or delete this Personal Data at a later time.Purpose(s)
- enable you, alone or together with a sports provider, to create and keep track of a personalized training and/or nutrition plan
- coach you optimally to achieve your sporting goals
- keep your personal sports diary
Legal basis
- Consent
Personal dataLocation data
IP address and GPS coordinates.
You can give permission through your web browser or in the App to share your location.Purpose(s)
- connect you with a sports provider near you
Legal basis
- Consent
Personal dataFiles
Photos, media and other files.
You decide yourself whether you want to provide this data.Purpose(s)
- enable you, alone or together with your sports provider, to track the progress of your training and nutrition plan
Legal basis
- Consent
Personal dataChat messages
First and last name and chat content such as photos, media and other files.
You decide yourself whether you use this Service.Purpose(s)
- easily bring you into contact with your sports provider
- enable your sports provider to coach you optimally by keeping track of and reviewing contact moments and the progress of your sporting goals
Legal basis
- Consent
Personal dataPayment details
Personal dataBrowsing data
Browsing behavior on our Website.Purpose(s)
- ensure that our Website and App function optimally and to improve them where necessary
Legal basis
- Legitimate interest
Personal dataReview of App or sports provider
First and last name and review.
You decide yourself whether you give a review or feedback.Purpose(s)
- determine the quality of the sports provider
Legal basis
- Consent
Personal dataMarketing research and/or prize draws
First and last name and email address.
You may voluntarily participate in market research or a prize draw.Purpose(s)
- conduct market research
- organize a prize draw and announce the prize winner
Legal basis
- Consent
If you leave a comment through our comment form on the Website
Personal dataContact details
First and last name and email address.Purpose(s)
- contact you when you post a comment under a blog or news item
Legal basis
- Consent
Why may we process Personal Data?
There are different legal bases from the Relevant Legislation on the basis of which we may process your Personal Data.
- Performance of the agreement: some Personal Data, such as contact details, is necessary to perform the agreement we enter into with you.
- Consent: some Personal Data, such as health data, is needed to make optimal use of our Services. We process this data only if you provide it to us voluntarily and of your own free will. The processing therefore takes place with your consent.
- Legitimate interest: the processing of some Personal Data is necessary for the purposes of our legitimate interests.
How do we obtain your Personal Data?
Personal Data received directly from you:
We receive Personal Data directly from you when you create an account on our App or leave a comment on our Website.
Personal Data of third parties that you provide to us:
It is also possible that you provide us with Personal Data of other persons. We would like to point out that it is your own responsibility to verify whether this person agrees to the provision of his or her Personal Data.
Automated decision-making
We do not use automated decision-making or profiling.
Security
We do everything we can to protect your Personal Data against loss, destruction, use, alteration or distribution of your Personal Data by unauthorized persons. This prevents people who have nothing to do with your Personal Data from accessing it. We store your Personal Data on secure servers of Digital Ocean in the Netherlands. In addition, we use the following security measures:
- Encryption of digital files that contain personal data
- Security of network connections with Secure Socket Layer (SSL), or a comparable technology
- Security of the data in accordance with the ISO 27001 standard
- Access to the data is limited to the persons who need the data
Retention period
We do not retain your Personal Data for longer than we need it for the purposes we described earlier. We delete your Personal Data as soon as it is no longer needed for the purposes for which we obtained it. We will therefore also delete all your Personal Data stored under your account when you delete your account or send us an email requesting deletion of your Personal Data.
With whom do we share your Personal Data?
Processors
It happens that other parties receive your Personal Data from us. We agree with these parties in a data processing agreement that they will handle your Personal Data carefully, and they receive only the Personal Data that is necessary to provide their service. These parties use your Personal Data only in accordance with the instructions we give and not for their own purposes. We may provide your Personal Data to service providers for: data storage, invoicing, accounting, messaging service application and sending newsletters. These parties are "processors" within the meaning of the Relevant Legislation.
Third parties
We share your Personal Data with other parties that are not processors. We agree with these parties that they will handle your Personal Data carefully. They will use the Personal Data only in accordance with the purpose for which we obtained the Personal Data from you.
We share your Personal Data with the sports provider with whom you want to come into contact through our App. For questions about how the sports provider handles your Personal Data, you can contact the relevant sports provider directly or consult the sports provider's privacy policy.
If we have a legal obligation to share your Personal Data, we will do so. This is the case, for example, if the police ask us for your Personal Data.
Transfer
We will process your Personal Data only within the European Union. Outside the European Union, we process your Personal Data only if that country offers an adequate level of protection for your Personal Data.
Without your consent, we will never transfer your Personal Data to other countries or to other parties than those mentioned above.
Links
Our Website and App may contain links to other websites. We are not responsible for the content or privacy protection of these websites. We therefore advise you always to read the privacy policy of the relevant website.
Cookies
A cookie is a small text file that is sent from a website server to the browser. The browser then stores the file on your device. Your device is assigned a unique number that allows our site to recognize the device later.
We use functional cookies and analytical cookies on our Website. We use functional cookies to ensure that the Website functions properly and to store your Personal Data when you create an account. An analytical cookie is used to improve the Website and to provide information that is interesting and important to every website visitor. We use Google Analytics for this. We have ensured that Google Analytics is configured in a privacy-friendly way so that your Personal Data is protected as well as possible.
You can always delete or disable cookies yourself through your browser settings. No more cookies will then be stored when you visit our Website. Please note: without cookies, our Website may work less well.
Changes to the privacy policy
We may amend this privacy policy. If we make material changes to the privacy policy, we will place a notification on our Website and in our App together with the new privacy policy. We will inform users who are registered with us with their email address of changes. If you are not registered as a user, we advise you to consult the Website and this statement regularly.
Your rights
You have the following rights:
- you may ask us for access to your data;
- you may ask us to correct, restrict or delete your data. In cases of fraud, non-payment or other unlawful acts, we may retain some of your data in a register or on a blacklist;
- you may ask us for a copy of your data. At your request, we may also provide this copy to another party, so that you no longer have to do this yourself;
- you can object to the processing of your data;
- you can lodge a complaint with the Dutch Data Protection Authority if you think that we are processing your data unlawfully;
- you may withdraw your consent to process your data at any time. From the moment you withdraw consent, we may no longer process any data from you.
To exercise the above rights, or if you have questions, comments or concerns about the way we process your Personal Data, you can send an email to [email protected].
Contact details
FITsociety B.V.
Zadelmakerstraat 22 B
1991JE Velserbroek
Website: www.fitsociety.nl
KVK: 87123487
BTW: NL864210115B01
Data protection officer: Mr M.S. Wessels
Last update: June 24, 2026