Who We Are

Win and Swim (KvK 89298993) provides adult swimming lessons in Amsterdam.
Controller: Win and Swim, Pretoriusstraat 42, 1092 GH Amsterdam.
Contact: vladpaturca@winandswim.nl | +31 6 53768251.

This Privacy Policy applies to winandswim.nl, blog.winandswim.nl and to the booking and customer support channels we operate.

Scope and Roles

• Win and Swim controls data collected via our website, blog, and direct communications.

• Bookings and accounts are handled on the Eversports platform. For those activities, Win and Swim and Eversports act as joint controllers. Please also read the Eversports Privacy Policy.

Data We Collect

We process the following categories of personal data:

• Identity and contact details: name, email, phone number.

• Booking and attendance data: chosen lessons, check-ins, cancellations.

• Payment references: payment status, method, transaction references (card details remain with the payment provider).

• Communications: emails, messages, and support interactions.

• Technical data: IP address, browser/device data, cookie preferences.

• Preferences and consents: marketing subscriptions and opt-outs.

• Optional health information you share for safe participation (e.g. injuries, allergies, accessibility needs).

Purposes and Legal Bases

We process personal data for the following purposes:

• To provide lessons and manage your bookings: contract performance (Art. 6(1)(b) GDPR).

• To process payments and invoices: contract and legal obligation (Art. 6(1)(b),(c)).

• To comply with Dutch tax law: 7-year retention obligation (Art. 6(1)(c)).

• To send operational updates: legitimate interest (Art. 6(1)(f)).

• To send marketing communications: consent (Art. 6(1)(a)).

• To use photos/videos for marketing: consent (Art. 6(1)(a)).

• To ensure safety using optional health data: explicit consent (Art. 9(2)(a)), or vital interests in emergencies.

• To operate our website and analytics: consent for non-essential cookies (Art. 6(1)(a)); necessary cookies without consent.

Minors

Our lessons are intended for adults (16+). If a participant under 16 is admitted, parental or guardian consent is required and recorded. The Eversports platform requires users to be at least 16 years old.

Data Sources

• Directly from you when you contact us or book lessons.

• From your activity on the Eversports platform when you book with us.

Recipients

We share data only when necessary:

• Eversports (joint controller for platform use).

• Payment service providers via Eversports.

• Website hosting and email service providers.

• Venue operators where required for lesson delivery.

All processors operate under strict contracts (Art. 28 GDPR).

International Transfers

If data is transferred outside the EEA, we rely on adequacy decisions (e.g. EU-U.S. Data Privacy Framework) or Standard Contractual Clauses with supplementary measures.

Retention

• Booking and attendance data: 24 months after last activity.

• Support communications: 12 months after closure.

• Marketing consents and opt-outs: as long as needed to honor your choice.

• Photos/videos: until consent is withdrawn or for a maximum of 3 years.

• Finance and invoicing data: 7 years (Dutch tax law).

• Security logs: up to 90 days, unless extended for incident review.

Cookies

We use necessary cookies to operate our website. Non-essential cookies (analytics, marketing) are set only with your consent, which you can give or deny via our banner. Consent can be withdrawn at any time. Only “beperkt analytische” cookies with no or minimal privacy impact may be used without consent, under article 11.7a Telecommunicatiewet.

Your Rights

You have the right to:

• Access, rectify, or erase your data.

• Restrict or object to processing.

• Data portability.

• Withdraw consent at any time.

• File a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

To exercise your rights, email us at vladpaturca@winandswim.nl.

Security

We apply TLS encryption, access controls, vendor due diligence, and data minimization. We will notify you and the Autoriteit Persoonsgegevens if required in case of a personal data breach.

Joint Controller Notice (Eversports)

For all bookings and account activities on the Eversports platform, Eversports and Win and Swim act as joint controllers. Please review the Eversports Privacy Policy for details.

Changes

We may update this policy to reflect changes in our practices. The latest version will always be available on this page.