Privacy 
Policy

Privacy Policy — MANA® Social Performance Club Eindhoven

Last updated: November 2025

This Privacy Policy explains how Club Eindhoven B.V., trading as MANA® Social Performance Club (“MANA”, “we”, “our”, “us”), processes and protects your personal data when you visit our club, website, or app, or otherwise interact with our services.

We comply with the General Data Protection Regulation (GDPR) and all applicable Dutch and EU privacy laws.

1. Controller Information

Club Eindhoven B.V.

Nieuwe Emmasingel 12–14

5611 AM Eindhoven

KVK: 98428004

Questions or requests:

clubs@join-mana.com

2. Scope of This Policy

This policy applies to all situations where MANA collects or processes personal data, including:

• Membership registrations and payments
  
  
• Access to and use of the Club
  
  
• Class bookings and app bookings
  
  
• Communications via email, chat, or app
  
  
• Marketing and promotions
  
  
• Use of the MANA App and website
  
  

This policy does not apply to external websites or services linked from our platforms.

3. Data We Collect

Depending on your interaction with MANA, we may collect:

3.1 Identification and Contact Data

• First and last name
  
  
• Date of birth, gender
  
  
• Address and postcode
  
  
• Email address and phone number
  
  
• Member photo (optional, for access control)
  
  

3.2 Membership & Transaction Data

• Membership type and contract information
  
  
• Payment method (IBAN, card details via secure processor)
  
  
• Billing cycles, invoices, and payment history
  
  
• Attendance and check-in records
  
  

3.3 Health & Fitness Data (Limited)

• Injuries, preferences, or goals you voluntarily provide
  
  
• Participation in classes or programs
  
  

This data is processed only to provide appropriate training guidance and safety.

3.4 Technical & Digital Data

• IP address, device type, browser, OS
  
  
• App usage, website analytics, cookie identifiers
  
  
• Login credentials and security tokens
  
  

3.5 Communications & Media

• Emails, chats, support requests
  
  
• Photos or videos taken during events (see Section 9)
  
  
• Feedback, surveys, testimonials (if voluntarily given)
  
  

4. How We Use Your Data

We use your data to operate, improve, and secure our services.

4.1 Membership Management

• Registering and maintaining your membership
  
  
• Processing payments and renewals
  
  
• Granting access to facilities
  
  
• Handling member service and support
  
  

4.2 Training & App Services

• Managing bookings for classes and personal training
  
  
• Providing training schedules and progress features
  
  
• Enabling use of the MANA App
  
  

4.3 Communication

• Sending confirmations, reminders, and notifications
  
  
• Contacting you regarding updates, changes, or service issues
  
  
• Responding to questions and feedback
  
  

4.4 Marketing (With Consent)

• Newsletters, offers, promotions, event invitations
  
  You may withdraw consent at any time (see Section 10).
  
  

4.5 Legal & Safety

• Ensuring club and member safety
  
  
• CCTV for security and incident prevention (if applicable)
  
  
• Compliance with legal, tax, and administrative obligations
  
  

5. Legal Bases for Processing

We process your personal data based on:

• Performance of a contract – to manage your membership
  
  
• Legal obligation – tax, accounting, administrative duties
  
  
• Legitimate interest – safety, club operations, fraud prevention
  
  
• Consent – marketing, optional preferences, optional photos
  
  

You may withdraw consent at any time via clubs@join-mana.com.

6. Data Sharing

We do not sell or rent your personal data.

We only share data when necessary or legally required.

6.1 Processors & Service Providers

Trusted partners may process data under GDPR-compliant Data Processing Agreements, such as:

• Payment providers (e.g., Mollie, Stripe)
  
  
• Booking and membership platforms (e.g., Gymly or equivalent)
  
  
• Email and communication tools
  
  
• IT, hosting, and security providers
  
  
• Analytics tools
  
  

6.2 Legal Requirements

We may disclose data to authorities if legally required.

6.3 Internal Access

Data is only accessible to staff who need it for their role (reception, coaching, finance).

7. Retention Periods

We retain personal data only as long as necessary:

Category

Retention Period

Membership & billing data

7 years (legal requirement)

Access & attendance data

12 months

Health & training notes

Deleted after membership ends

Email & chat history

12 months

CCTV footage (if used)

30 days

Marketing data

Until consent is withdrawn

8. Security Measures

We apply technical and organizational security measures including:

• Encrypted data transfers
  
  
• Secure hosting environments
  
  
• Access controls and employee confidentiality
  
  
• Regular security monitoring
  
  

However, no system is fully immune to risks. You use digital services at your own discretion.

9. Photography & Media

Photos or videos taken inside the club may capture members in the background.

For promotional content:

• We will never publish identifiable images of a member without explicit consent.
  
  
• You can request removal of any image of yourself at any time.
  
  

10. Your Rights

You have the following rights under GDPR:

• Right of access – request a copy of your data
  
  
• Right to rectification – correct inaccurate data
  
  
• Right to erasure – request deletion (when allowed by law)
  
  
• Right to restrict processing
  
  
• Right to data portability
  
  
• Right to object to marketing
  
  

Requests: privacy@join-mana.com

We will respond within 30 days.

11. International Transfers

If data is transferred outside the EU (e.g., for hosting), this is done under GDPR safeguards such as:

• Standard Contractual Clauses (SCCs)
  
  
• Adequacy decisions
  
  
• Approved processor agreements
  
  

12. Changes to This Policy

We may update this Privacy Policy periodically.

The latest version will always be available at:

www.join-mana.com/privacy

Significant updates will be communicated via email or the MANA App.

13. Contact

For questions or privacy requests:

privacy@join-mana.com

Club Eindhoven B.V.

Nieuwe Emmasingel 12–14, 5611 AM Eindhoven

Privacy Policy — MANA® Social Performance Club Eindhoven

Last updated: October 2025

This Privacy Policy explains how Club Eindhoven B.V., trading as MANA® Social Performance Club (“MANA”, “we”, “our”, “us”), processes and protects your personal data when you visit our club, website, or app, or otherwise interact with our services.

We are committed to ensuring that your privacy is protected and that your personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable privacy laws.

1. Controller Information

Club Eindhoven B.V.

Nieuwe Emmasingel 12–14, 5611 AM Eindhoven

KVK: 98428004

If you have any questions or requests about how we handle your data, please contact:

clubs@join-mana.com

2. Scope of This Policy

This policy applies to all activities in which MANA collects or processes personal data, including:

• Membership registrations, contracts, and payments;
  
  
• Access to and use of the MANA Club facilities;
  
  
• Bookings via our website or third-party widgets;
  
  
• Communications via email, chat, or app;
  
  
• Marketing and promotional communications;
  
  
• Use of the MANA App for member management, training, or scheduling.
  
  

This Privacy Policy does not apply to external links or third-party websites that may be accessible via our platforms.

3. Data We Collect

Depending on your relationship with MANA, we may collect the following categories of data:

3.1 Identification and Contact Data

• First and last name
  
  
• Date of birth, gender
  
  
• Address and postcode
  
  
• Email address and phone number
  
  
• Member photo (optional for access control)
  
  

3.2 Membership and Transaction Data

• Membership type, start and renewal date
  
  
• Payment method (IBAN, card details via payment processor)
  
  
• Billing cycles, invoices, and payment history
  
  
• Attendance or check-in records
  
  

3.3 Health and Fitness Data (Limited Use)

• Optional data provided for training adjustments (e.g. injuries, goals, preferences)
  
  
• Participation in classes or training programs
  
  This data is processed only to provide appropriate fitness and safety support.
  
  

3.4 Technical and Digital Data

• Device type, IP address, browser, and operating system
  
  
• App usage, website analytics, and cookie identifiers
  
  
• Login credentials and security tokens
  
  

3.5 Communications and Media

• Emails, chats, or forms sent to our support or coaches
  
  
• Photos or videos taken during events (see Section 9)
  
  
• Customer surveys, feedback, or testimonials (if given voluntarily)
  
  

4. How We Use Your Data

We process your personal data to deliver and improve our services.

The main purposes include:

4.1 Membership Management

• Registering and maintaining your membership contract
  
  
• Processing payments and renewals
  
  
• Managing access to the club and facilities
  
  
• Handling member service requests and communication
  
  

4.2 Training and App Use

• Managing bookings for classes, sessions, or personal training
  
  
• Allowing access to the MANA App to view or update your training schedule
  
  
• Providing performance tracking and member engagement features
  
  

4.3 Communication

• Sending confirmations, reminders, and account notifications
  
  
• Contacting you regarding club updates, changes to opening hours, or membership details
  
  
• Responding to your questions and feedback
  
  

4.4 Marketing (With Consent)

• Sending newsletters, offers, and event invitations
  
  
• Promoting MANA services that may interest you
  
  You can withdraw consent for marketing at any time (see Section 10).
  
  

4.5 Legal and Safety

• Ensuring club safety and compliance with access rules
  
  
• Using CCTV (if applicable) for security and incident prevention
  
  
• Meeting legal and accounting obligations
  
  

5. Legal Bases for Processing

We process your personal data based on one or more of the following legal grounds:

1. Performance of a contract – to manage your membership and deliver services;
   
   
2. Legal obligation – to comply with tax, administrative, and accounting requirements;
   
   
3. Legitimate interest – to improve club operations, prevent fraud, and ensure safety;
   
   
4. Consent – when you opt in for marketing or provide optional information (e.g. preferences or photos).
   
   

You may withdraw your consent at any time by emailing clubs@join-mana.com.

6. Data Sharing

We never sell or rent your data.

We only share data when necessary for our operations or required by law.

6.1 Processors and Service Providers

We work with carefully selected third parties who help us operate efficiently, including:

• Payment processors (e.g., Mollie, Stripe);
  
  
• Booking and membership systems (e.g., Gymly or equivalent);
  
  
• Email and communication tools (e.g., SendGrid, Intercom alternatives);
  
  
• IT and hosting partners providing secure infrastructure;
  
  
• Analytics providers for performance measurement.
  
  

These parties act under data processing agreements (DPAs) and comply with GDPR standards.

6.2 Legal Disclosures

We may disclose your data when required by law, regulation, or a lawful request from government authorities.

6.3 Internal Use

Within MANA, your data is accessible only to staff who need it to perform their duties (e.g., reception, trainers, finance).

7. Retention Periods

We keep your personal data only as long as necessary for the purposes stated above:

ategory

Retention Period

Membership & billing data

7 years (tax/accounting law)

Access and attendance data

12 months

Health & training notes

Deleted after membership ends

Email & chat history

12 months

CCTV footage (if applicable)

30 days

Marketing data

Until consent withdrawn

ategory

Retention Period

Membership & billing data

7 years (tax/accounting law)

Access and attendance data

12 months

Health & training notes

Deleted after membership ends

Email & chat history

12 months

CCTV footage (if applicable)

30 days

Marketing data

Until consent withdrawn

‍