Privacy and cookies

Groen's Fitness Forge (Christiaan Groen) is responsible for processing your personal data. You can find me at Sportcity Heerenveen, Jousterweg 38, Heerenveen. Questions about privacy can be sent to christiaangroen@groensfitnessforge.nl. Chamber of Commerce (KvK) number: 89885635. VAT number: NL004768944B40. I am a member of the KNGF, the Dutch professional association for physiotherapists, and registered with KwaliteitsHuis Fysiotherapie, the Dutch physiotherapy quality register.

• Contact form: your name, your phone number or email address, what you're coming for and your message.
• WhatsApp, phone and email: the details you share in your message.
• Treatment: if you are in treatment with me, I keep a medical record with your health data.
• Visiting the website: your IP address, to keep the site secure.
• Website use: which pages you view, which page you came from, your device and browser, and whether you came through an ad.

• Answering your question and scheduling an appointment. Basis: my legitimate interest in replying to you, or steps towards an agreement.
• Treating you and keeping your record. Basis: the treatment agreement and the legal duty to keep a record (WGBO).
• Claims to your health insurer and my accounts. Basis: legal obligation.
• Keeping the website secure. Basis: legitimate interest.
• Measuring visits and ads. Basis: my legitimate interest in knowing which pages and ads work.

These parties process data on my behalf. I have a data processing agreement with each of them.

Cloudflare, Resend, WhatsApp (Meta), Google and Microsoft are American companies or part of one. Data that goes to the US is transferred under the EU-US Data Privacy Framework: a decision by the European Commission that these companies offer adequate protection.

Cookies are small files the site places on your device. I use three kinds:

• Necessary. They protect the site against abuse (Cloudflare). These need no consent. You can object via the email address above.
• Statistics. Google Analytics measures how the site is used, so I can improve pages.
• Marketing. Google Ads and Microsoft Advertising measure whether an ad led to a message or appointment. The map on the contact page comes from Google Maps.

For this, your data goes to 2 parties: Google and Microsoft. They also use it for their own purposes; see their own privacy statements.

You can refuse or delete cookies in your browser settings.

• Messages via the contact form, WhatsApp and email: for as long as needed for our contact.
• Medical record: 20 years after the last change, as the WGBO requires. For children the 20 years start at age 18.
• Training, massage and coaching details: for as long as you train or come to me.
• Invoices and accounts: 7 years, as the Dutch tax authority requires.
• Cookies: up to 2 years, depending on the cookie.

You may view, correct or delete your data, take your data with you, and object to its use. If you gave consent, you can withdraw it at any time. Send your request to christiaangroen@groensfitnessforge.nl; you will receive an answer within a month. Do you disagree with how I handle your data? You can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

If you have a complaint, please discuss it with me first. Is it about physiotherapy and we cannot resolve it together? Then an independent complaints officer from the KNGF Klachtenregeling Fysiotherapie helps you for free. You get a written answer within 6 weeks, and if that doesn't solve it, you can go to the Geschillencommissie Fysiotherapie (the physiotherapy disputes committee). This procedure only covers physiotherapy. For personal training, sports massage and online coaching, I resolve complaints with you directly. View the complaints procedure