GDPR Compliance

Last updated: August 14, 2026

Your Rights Under GDPR

The General Data Protection Regulation gives you specific rights regarding your personal data. Zen Yoga Centrum is committed to upholding these rights.

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.

Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, including:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restrict Processing

You have the right to request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis for processing.

Right to Withdraw Consent

Where we are processing your personal data based on your consent, you have the right to withdraw that consent at any time.

Data Protection Officer

For questions regarding GDPR compliance or to exercise any of your rights, please contact our data protection representative at: [email protected]

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, place of work, or place of alleged infringement.

In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens.

Data Processing Activities

We process personal data for the following purposes:

• Class booking management
• Customer communication and support
• Service improvement and website analytics
• Legal compliance and record-keeping

International Data Transfers

We do not transfer your personal data outside the European Economic Area. All data is stored and processed within the EU.

Automated Decision-Making

We do not use automated decision-making or profiling in our processing of your personal data.

How to Exercise Your Rights

To exercise any of your GDPR rights, please send a written request to [email protected]. We will respond within 30 days and will not charge a fee unless your request is clearly unfounded or excessive.