Privacy Policy

1. Introduction

maxilines B.V. ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website maxilines.pro, use our services, or interact with us in any way.

2. Data Controller Information

The data controller responsible for your personal data is:

• Company: maxilines B.V.
• Registration Number: 73951826
• VAT Number: NL861742950B01
• Address: Kerkstraat 274, 9753 CB Groningen, Netherlands
• Email: privacy@maxilines.pro
• Phone: +31 502915650

3. Data Collection

We collect various types of information in connection with our services. The data we collect includes personal information that you voluntarily provide to us when you:

• Fill out contact forms on our website
• Book appointments or consultations
• Subscribe to our newsletter or communications
• Use our wellness services
• Communicate with us via phone, email, or in person

The types of personal data we may collect include:

• Name and contact information (email address, phone number, postal address)
• Health and fitness information relevant to our services
• Payment and billing information
• Communication preferences
• Website usage data and cookies (see our Cookie Policy)

4. How We Use Your Information

We use the personal data we collect for various purposes, including how we use your information to provide and improve our services. Specifically, we may use your data to:

• Provide, operate, and maintain our wellness services
• Process appointments and manage your bookings
• Communicate with you about our services, appointments, and updates
• Process payments and manage billing
• Improve our website and services based on your feedback
• Send you marketing communications (with your consent)
• Comply with legal obligations and protect our legitimate interests

5. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for specific processing activities
• Contract: When processing is necessary for performing our services
• Legal Obligation: When we need to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests

6. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

• With service providers who assist us in operating our business (under strict confidentiality agreements)
• When required by law or to protect our rights and safety
• In connection with a business transfer or merger (with prior notice to you)

7. Your Rights

Under GDPR, you have several rights regarding your personal data. Your rights include:

• Right of Access: You can request copies of your personal data
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Data Portability: You can request transfer of your data to another organisation
• Right to Object: You can object to certain types of processing
• Right to Withdraw Consent: You can withdraw consent for processing based on consent

To exercise any of these rights, please contact us using the contact information provided below.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer data retention period is required or permitted by law. Our data retention periods are based on:

• The length of time we have an ongoing relationship with you
• Whether there is a legal obligation to retain the data
• Whether retention is advisable in light of our legal position

Generally, we retain client data for up to 7 years after the end of our service relationship, in accordance with Dutch business record-keeping requirements.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis
• Staff training on data protection requirements

10. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and provide personalised content. For detailed information about our use of cookies, please refer to our Cookie Policy.

11. International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we need to transfer your data outside the EEA, we will ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

12. Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date.

14. Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us:

• Email: privacy@maxilines.pro
• Phone: +31 502915650
• Post: maxilines B.V., Kerkstraat 274, 9753 CB Groningen, Netherlands

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data in accordance with applicable law.

15. Governing Law

This Privacy Policy is governed by Dutch law and the General Data Protection Regulation (GDPR). Any disputes arising from this policy will be subject to the jurisdiction of the Dutch courts.