1. Who is responsible for your data?
The data controller for the personal data described in this policy is:
The Moving Body
Zaandam, The Netherlands
KVK-nummer: 74087142
Email: privacy@themovingbody.nl
If you have any questions about your personal data or this Privacy Policy, please contact us using the details above.
2. What information do we collect?
The information we collect depends on how you interact with us.
When you book a class or create an account
Bookings, memberships and class administration are handled through our booking provider, Momoyoga.
Depending on how you use the booking system, information processed may include:
- Your name
- Email address and contact details
- Account information
- Classes you book and attend
- Passes and memberships
- Payment and transaction information
- Other information you choose to provide through the booking system
We use this information to administer bookings, memberships and payments, communicate with you about your bookings, and provide the classes and services you have requested.
When you subscribe to our newsletter
If you subscribe to our newsletter, we collect your email address and any other information you voluntarily provide through the subscription form.
We use this information only to send you newsletters and information about classes, workshops, events and related studio news.
You can unsubscribe at any time using the unsubscribe link in our emails.
When you visit our website
We collect limited technical and usage information through our self-hosted analytics system in order to understand how the website is being used.
We do not use this information to build advertising profiles or track you across other websites.
3. Our legal bases for processing
Under the GDPR, we must have a legal basis for processing personal data.
Performance of a contract
When you book a class, purchase a pass or membership, register for a workshop or otherwise purchase a service from us, we process the information necessary to provide that service.
Consent
We use your consent when you voluntarily subscribe to our newsletter.
You can withdraw your consent at any time by unsubscribing. Withdrawing consent does not affect processing that took place before you withdrew it.
Legitimate interests
We may process limited information where necessary for our legitimate interests in operating and improving our website and services, provided those interests do not override your privacy rights.
This includes privacy-friendly, aggregate website analytics.
Legal obligations
We may retain certain information where required to comply with legal obligations, including applicable accounting, tax and administrative requirements.
4. Booking through Momoyoga
We use Momoyoga to manage our class schedule, registrations, bookings, memberships, passes and related administration.
When you register or make a booking, your personal data is processed through Momoyoga.
For personal data that Momoyoga processes on our behalf in connection with our studio, we are the data controller and Momoyoga acts as our data processor.
Momoyoga may also process certain information for its own purposes in accordance with its own privacy documentation.
You can review Momoyoga's own privacy information for more information about how its platform handles personal data.
5. Website analytics
We use a self-hosted instance of Umami Analytics to understand how visitors use our website.
Our analytics setup does not use cookies and is not used for advertising or cross-site tracking.
The information is used to understand things such as which pages are visited, how visitors reach and navigate the website, and general technical information about website usage.
Analytics data is hosted and controlled by us rather than being sent to an external advertising or analytics provider.
We use this information only to monitor and improve the website.
6. Newsletter
We use a self-hosted instance of Keila to manage our newsletter.
When you subscribe, your email address and subscription information are stored in our Keila system.
We process this information based on your consent.
You can withdraw your consent at any time by clicking the unsubscribe link included in every newsletter.
After you unsubscribe, we will stop sending you marketing newsletters. We may retain limited information where necessary to record that you have unsubscribed and ensure that you are not accidentally subscribed again without your consent.
We do not track whether you open newsletter emails or which links you click.
7. Cookies
Our website does not use analytics or advertising cookies.
Our self-hosted Umami analytics setup operates without cookies.
Third-party services that you choose to access through our website, such as Momoyoga, may have their own cookies or similar technologies. Those services are governed by their own privacy and cookie policies.
If we introduce cookies or other technologies that require consent in the future, we will update this policy and request consent where required.
8. Who receives your personal data?
We do not sell your personal data.
We share or make personal information available only where necessary to operate our services, fulfil our obligations, or comply with the law.
Momoyoga
Used for class bookings, memberships, passes and related administration.
Our hosting infrastructure
Used to host our website and our self-hosted services.
Keila
Used as our self-hosted newsletter management software.
Email delivery infrastructure
Used to deliver newsletters and transactional communications.
Payment providers
Used where necessary to process payments associated with bookings or purchases.
Other service providers may process information where necessary to provide their services to us and are subject to applicable data-protection requirements.
9. How long do we keep your information?
We keep personal data only for as long as necessary for the purpose for which it was collected or where we are required to retain it by law.
- Booking and membership information is retained while necessary to administer your relationship with us and meet applicable legal obligations.
- Financial and transaction records may be retained for the period required by Dutch tax and accounting law.
- Newsletter subscription information is retained while you remain subscribed.
- Unsubscribe information may be retained where necessary to respect your decision not to receive marketing.
- Analytics information is retained only for the period we consider necessary for understanding and improving the website.
When personal information is no longer required, we delete or anonymise it where reasonably possible.
10. International transfers
We aim to use services and infrastructure that process personal data within the European Economic Area where reasonably possible.
Where a service provider processes personal data outside the EEA, we will ensure that an appropriate legal mechanism or safeguard is used where required by the GDPR.
11. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.
Our analytics and newsletter systems are self-hosted, which allows us to maintain direct control over the data stored in those systems.
No internet-based system can be guaranteed to be completely secure, but we take reasonable measures appropriate to the nature of the information we process.
12. Your rights
Under the GDPR, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete information
- Request deletion of your personal data
- Restrict how your data is processed
- Object to certain processing
- Receive certain personal data in a portable format
- Withdraw consent where processing is based on consent
- Lodge a complaint with a supervisory authority
These rights are subject to the conditions and exceptions provided by applicable law.
To exercise any of these rights, contact us at privacy@themovingbody.nl
We may need to verify your identity before completing a request.
13. Complaints
If you have concerns about how we handle your personal data, please contact us first so that we have an opportunity to address them.
You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.
14. Children's privacy
Our website and services are not intended to collect personal information directly from children without appropriate involvement of a parent or legal guardian where this is required by law.
If you believe personal information relating to a child has been provided to us inappropriately, please contact us.
15. Links to other websites
Our website may contain links to third-party websites and services.
We are not responsible for the privacy practices of those third parties. When you leave our website, we recommend reviewing the privacy information provided by the relevant service.
16. Changes to this Privacy Policy
We may update this Privacy Policy when our services, technology or legal obligations change.
The current version will always be published on this page, together with the date it was last updated.
If a change materially affects how we process your personal data, we will provide additional notice where appropriate.
17. Contact
For questions about this Privacy Policy or the way we handle your personal data, please contact:
The Moving Body
Zaandam, The Netherlands
privacy@themovingbody.nl
Contact us