Privacy Policy

Introduction

anapholbpl B.V. ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and safeguard your information when you use our home workout programs platform and related services. We are the Data Controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Collection

The data we collect includes personal information such as your name, email address, phone number, fitness goals, health information, workout preferences, and usage data from our platform. We collect this information when you register for our services, contact us, participate in our programs, or interact with our website and digital platforms.

We also collect technical information automatically, including your IP address, browser type, device information, pages visited, time spent on our platform, and cookies data. This helps us improve our services and provide a better user experience.

How We Use Your Information

We explain how we use your information in the following ways: to provide and personalize our home workout programs, communicate with you about your fitness journey, process payments, send program updates and health tips, analyze platform usage to improve our services, and ensure the security of our platform.

The use of your data is based on several legal grounds under GDPR, including your consent, the performance of our contract with you, our legitimate interests in providing and improving our services, and compliance with legal obligations.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: To fulfill our obligations under our service agreement with you
• Legitimate Interests: For business operations, service improvement, and fraud prevention
• Legal Compliance: To comply with applicable laws and regulations

Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information with trusted service providers who assist us in operating our platform, processing payments, sending communications, and analyzing data. These providers are contractually bound to protect your information and use it only for the purposes we specify.

We may also disclose your information if required by law, to protect our rights, or in connection with a business transaction such as a merger or acquisition.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Generally, we retain account information for the duration of your relationship with us and for up to 7 years after termination for legal and business purposes. Marketing communications data is retained until you unsubscribe or request deletion.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platform. For detailed information about our use of cookies, including types of cookies, purposes, and how to manage them, please see our Cookie Policy.

Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

International Data Transfers

As we serve customers across Europe, your data may be transferred to and processed in countries within the European Economic Area (EEA). Any transfers outside the EEA will be protected by appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have any questions about this Privacy Policy, want to exercise your rights, or need to contact us about data protection matters, please contact us at:

Supervisory Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with the relevant supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).