Privacy Policy

Introduction

hallucdrop B.V. ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, process, and protect your data when you use our fitness membership services, visit our website at hallucdrop.top, or interact with our facilities located at Vijverweg 42, 9750 FM Groningen, Netherlands.

As a Dutch company (Registration Number: N63207416, VAT: NL967415632B02), we comply with the General Data Protection Regulation (GDPR) and all applicable Dutch and European privacy laws.

Data Controller

hallucdrop B.V. acts as the data controller for the personal information we collect and process. Our contact details are:

Data Collection

The data we collect includes personal information that you provide directly to us and information we automatically collect when you use our services. We collect this information to provide you with our fitness membership services, improve your experience, and comply with legal obligations.

Information You Provide Directly

• Personal details: name, address, phone number, email address, date of birth
• Membership information: membership type, payment details, emergency contacts
• Health and fitness information: medical conditions, fitness goals, dietary requirements
• Communication records: emails, phone calls, chat messages, feedback forms
• Facility usage: check-in/check-out times, class bookings, personal training appointments

Information We Collect Automatically

• Website usage data: IP address, browser type, pages visited, time spent on site
• Device information: device type, operating system, unique device identifiers
• Location data: approximate location based on IP address (if consent is provided)
• Cookies and tracking technologies as described in our Cookie Policy

How We Use Your Information

We use your information for various purposes based on different legal grounds. Here's how we use your data and why:

Service Provision (Contract Performance)

• Processing and managing your membership subscription
• Providing access to our fitness facilities and services
• Scheduling personal training sessions and group classes
• Processing payments and managing billing
• Providing customer support and responding to inquiries

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract performance: To fulfill our membership agreement with you
• Legitimate interests: To improve our services and ensure facility security
• Legal compliance: To meet regulatory requirements and tax obligations
• Consent: For marketing communications and optional services (where applicable)

Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information in the following limited circumstances:

• Service providers: Payment processors, IT support, cleaning services (under strict data processing agreements)
• Legal requirements: When required by law, court order, or to protect our legal rights
• Emergency situations: To protect health and safety of members or staff
• Business transfers: In case of merger, acquisition, or sale of business assets

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this privacy policy and to comply with our legal obligations. Our retention periods are:

• Active membership data: For the duration of your membership plus 1 year
• Financial records: 7 years after membership termination (Dutch tax law requirement)
• Health and safety records: 3 years after membership termination
• Marketing data: Until you withdraw consent or 3 years of inactivity
• Website analytics: 26 months from collection date

After these periods, we securely delete or anonymize your data unless we have a legal obligation to retain it longer.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your data (subject to legal obligations)
• Right to restrict processing: Limit how we use your data in certain circumstances
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for marketing
• Right to withdraw consent: Where processing is based on consent

To exercise any of these rights, please contact us at privacy@hallucdrop.top. We will respond within 30 days.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure data backup and recovery procedures
• Physical security measures at our facilities

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the European Commission
• Standard contractual clauses approved by the European Commission
• Binding corporate rules for multinational service providers

Cookies and Tracking

We use cookies and similar tracking technologies on our website. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered members
• Displaying prominent notices at our facility

Your continued use of our services after any changes indicates your acceptance of the updated privacy policy.

Contact Information

If you have any questions about this privacy policy or how we handle your personal data, please contact us using the following information:

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe we have not handled your personal data in accordance with the law. In the Netherlands, the supervisory authority is: