Privacy Policy
1. Introduction
This Privacy Policy (“Policy”) governs the processing of personal data collected through the website markcoaching.nl (“Website”), operated by Mark Coaching (“Controller,” “we,” “our,” or “us”). We are committed to safeguarding the privacy and data protection rights of all individuals (“Data Subjects,” “you,” or “your”) in accordance with the applicable provisions of the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”) and relevant national legislation.

2. Purposes and Legal Basis for Processing
We process your personal data for the following purposes and on the respective legal grounds:

Purpose of Processing

Personal Data Categories

Legal Basis

To administer and deliver coaching services, respond to inquiries, schedule sessions

Identity and contact details (e.g., name, email, telephone)

GDPR Art. 6(1)(b): performance of a contract or pre‑contractual measures

To improve our Website and services, analyze use patterns

Technical data (e.g., IP address, usage metrics)

GDPR Art. 6(1)(f): legitimate interests of improving user experience

To send newsletters or promotional communications (only if consent is freely given)

Email address and preferences

GDPR Art. 6(1)(a): consent; revocable at any time under GDPR Art. 7(3)


3. Cookies and Tracking Mechanisms
Our Website employs:
  • Essential cookies, strictly necessary for functionality (e.g., session continuity),
  • Analytical or statistical cookies, facilitating the anonymized assessment of Website usage, deployed only with your explicit consent where required by law.
Please refer to our Cookie Notice for further particulars and your options to accept or decline.

4. Data Retention
Your personal data shall be retained only for the duration necessary to fulfil the purposes for which the data was collected or as required by applicable statutes. Upon cessation of this necessity, we will securely erase or anonymise your data.

5. Recipients of Personal Data
We may disclose your personal data to third-party processors, including service providers assisting with:
  • Scheduling and payment platforms,
  • Email and newsletter distribution services,
  • Website hosting and technical support infrastructure.
All such recipients are contractually bound to process your data exclusively under this Policy and in compliance with GDPR.
We may also disclose personal data where such disclosure is necessitated by law, regulation, court order, or mandatory request from public authorities.

6. Transfers to Third Countries
Your personal data may, subject to operational necessity, be transferred outside the European Economic Area (EEA). In such circumstances, we will ensure that appropriate safeguards are implemented, such as Standard Contractual Clauses, to guarantee adequate levels of protection as per GDPR Chapter V.

7. Data Subject Rights
You are entitled to exercise the following rights, as afforded by the GDPR:
  1. Right of access (Art. 15): You may request confirmation as to whether your personal data is being processed and obtain a copy.
  2. Right to rectify (Art. 16): You may request correction of inaccurate or incomplete data.
  3. Right to erasure (Art. 17): Also known as the ‘right to be forgotten’, where lawful grounds exist.
  4. Right to restrict processing (Art. 18): You may request a halt to processing under certain conditions.
  5. Right to data portability (Art. 20): You may request your data in a structured, commonly‑used, machine‑readable format.
  6. Right to object (Art. 21): You may object to processing based on legitimate interests or direct marketing.
  7. Right to withdraw consent (Art. 7(3)): You may withdraw your consent at any time, without prejudice to processing based on consent prior to withdrawal.
  8. Right to lodge a complaint: Where you believe processing infringes applicable law, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
To exercise any of these rights or for inquiries, please contact us as follows:
We will endeavour to respond to your request without undue delay and within the maximum statutory timeframe of one (1) calendar month, extendable by two (2) months in complex cases, pursuant to GDPR Art. 12(3).

8. Security MeasuresWe employ appropriate technical and organisational measures designed to safeguard personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include encrypted data transmission (TLS/SSL), secure server infrastructure, access controls, and regular audits.

9. Amendments to This PolicyWe reserve the right to modify this Policy as required to reflect changes in legal or operational circumstances. Any such amendments will be prominently posted on this Website and indicate the revised date of effectiveness.

End of Policy
Let me know if you’d like any specific legalese added—like references to Dutch statutory provisions—or if you want that formal tone softened just a smidge so it doesn’t feel like it was written by a court clerk.
8 August 2025
Made on
Tilda