Short and without the legal fuss: this is what we do with your data, why we do it and how long we keep it.
Last updated on 5 October 2026.
Whole Fit, Hertzstraat 17, 2041 CT Zandvoort, the Netherlands. Registered with the Dutch Chamber of Commerce under number 99889501, VAT number NL005419677B12. You can reach us at info@whole-fit.nl or +31 23 234 0117. For everything below, we are the data controller.
If you fill in the contact form or the trial class form, we receive your name, your email address and, if you enter them, your phone number, what you are interested in and your message. We use that for one thing: getting in touch with you. We keep it for six months. If you become a member, your details move to our member administration and the periods further down apply.
If you apply for a job through the form, we keep your details until four weeks after the procedure ends. If you would like us to keep them longer for a future opening, just let us know.
The legal basis is your own request: you ask us to get in touch, and without those details we cannot.
For a single class we need your first name, last name, email address and optionally your phone number. Those details go to Virtuagym, the system that holds our schedule and member administration, so your spot is secured and you get a confirmation. If you add a note, for instance about an injury, the trainer reads it and we treat it confidentially.
For members we keep what we need to let you train and to invoice you: name, address, date of birth, contact details, your membership, your payments and your visits. That lives in Virtuagym. We keep the accounts for seven years, because Dutch tax law requires it. Anything we do not need for that, we delete within a year after your membership ends.
If you discuss your health, an injury or your pregnancy with a trainer, we note down only what is needed to train with you safely. We do that with your consent and you can always ask us to delete it.
We do not place any cookies to track you. There is no Google Analytics on this site and there are no advertising pixels.
To see which pages get read we use Umami. That is an analytics tool which sets no cookies and builds no profiles: it counts visits only, and your IP address is not stored. So it cannot tell us who you are.
We store one thing in your browser: whether you clicked to allow external content to load. That sits in your own browser storage and never reaches us.
The Google Maps map and the Virtuagym schedule both set cookies as soon as they load. That is why they only load here once you click. If you do, the privacy terms of Google and Virtuagym apply from that moment on. If you do not click, nothing happens.
We sell nothing and we pass nothing on for advertising. We do work with a few parties who help us, and who process data for that:
We have agreements with these parties about how they handle your data. Most of them sit in Europe. Where a party sits outside Europe, the transfer is based on the European Commission standard contractual clauses.
Now and then we take photos and videos in the gym, for the site and for social media. We always ask beforehand and you can always say no, including afterwards. If you are in something and want out, send us a message and we take it down. For children under sixteen we ask the parents.
The site runs over a secure connection (https). Our systems are protected with passwords and, where possible, two-factor authentication. Only Colin and the trainers who need it can reach the member administration.
You can always ask what data we hold on you, have it corrected, have it deleted, or object to how we use it. You can also ask for a copy in a common file format, so you can take it with you. Send an email to info@whole-fit.nl and you'll hear from us within a month. Usually much sooner.
If we cannot sort it out together, you can file a complaint with the Dutch Data Protection Authority.
If what we do changes, we update this statement. At the top you can see when that last happened.