Privacy statement Sportcentrum Olympos

Sportcentrum Olympos is managed and operated by the Utrechtse Studenten Sportstichting Mesa Cosa and is committed to the privacy of its customers and visitors. Customers' personal data are strictly confidential and are processed solely and exclusively by Sportcentrum Olympos itself for its own administrative and communication purposes. These data will not be made available to third parties for commercial purposes.

Sportcentrum Olympos endorses the need to handle your personal data properly and responsibly, in accordance with laws and regulations of the Dutch AVG (Algemene Verordening Gegevensverwerking, or General Data Processing Regulation).

This statement applies to all activities (including activities through the website) of Sportcentrum Olympos and describes your rights and obligations with respect to processing of personal data through our websites and applications and the use of cookies.

Processing of personal data
At Sportcentrum Olympos, your personal data will only be processed to the extent necessary to carry out our services to you, in the performance of our legal obligations or if you have given us specific consent to do so. In addition, Sportcentrum Olympos reserves the right to use the data for academic research. In this case, the data will be anonymized and cannot be traced back to individual persons.

Among other things, personal data may be collected by us when registering on our website, when registering for participation in our activities, or during email exchanges with our staff. The processing of your personal data takes place on the valid basis of Dutch legislation: “uitvoering van de lidmaatschapsovereenkomst” (execution of the membership agreement).

By entering into membership with Sportcentrum Olympos, customers give permission to Sportcentrum Olympos to process some data. These include:

  • first and last name,
  • date of birth,
  • email address,
  • telephone number (optional),
  • postal code (optional),
  • data showing which customer category a person belongs to (student, employee, etc.),
  • a photograph for identification,
  • camera images for safety,
  • visitor data.

Sportcentrum Olympos processes this data for the purposes of membership administration, information provision and access provision and control. Personal data is in most cases provided by the individual in question.

Furthermore, your data may be used to inform you about interesting products and services of Sportcentrum Olympos.

Sportcentrum Olympos offers various activities that can only be carried out by using your personal data. For example, your email address for sending reminders, a digital newsletter or promotional emails. You will only receive the digital newsletter if you have given your explicit consent. In doing so, you will always be offered the opportunity to withdraw this consent.

For some of our services, we use third parties. We have established conditions with these third parties in which your privacy is safeguarded as much as possible. An overview of these third parties can be found in Appendix 1.

Guarantees

  • Sportcentrum Olympos stores your personal data and its backup in secure data centers in the European Economic Area (EEA);
  • Your personal data will not be shared with third parties outside the Netherlands without your explicit consent;
  • All personal information provided by you which is relevant to the provision of services to you will be treated in the strictest confidence;
  • Furthermore, the personal data you provide will only be used for the above-mentioned purposes and shared with those persons within our organization, or third parties engaged by us, who necessarily need to know your personal data in order to provide you with a good service;
  • Only in certain cases will Sportcentrum Olympos provide third parties with your personal data. For example, if required by law or if you, the data subject, have given your consent to do so. We only provide your data if Sportcentrum Olympos believes the submission is necessary to:
    • comply with legal ordinances or legal processes related to Sportcentrum Olympos or the websites;
    • protect the rights and property of Sportcentrum Olympos and related websites;
    • protect your personal safety in critical circumstances.
  • The data processed are accessible to employees of Sportcentrum Olympos who work with this data by virtue of their position (front desk staff, teachers, administration, communications and management).
  • Sportcentrum Olympos employees only have access to processed data using login codes.
  • All employees of Sportcentrum Olympos have a confidentiality clause and within our organization regular attention is drawn to privacy monitoring of personal data. There is also a Data Breach Protocol that must be acted upon in case of a (possible) data breach. All data breaches are recorded and improvement actions are agreed upon if possible and necessary.
  • Sportcentrum Olympos does not use automated decision making or profiling.

 

Standard Measures

The standard measures taken by Sportcentrum Olympos to minimize any loss or unlawful processing of personal data are as follows:

  • Sportcentrum Olympos ensures proper, organizational and technical security of the office and the (customer) systems it uses.
  • If employees work from home, they should take privacy measures in the home situation.
  • Sportcentrum Olympos websites and applications use appropriate security and encrypted connections to protect your personal data from loss or any form of unlawful processing.
  • If Sportcentrum Olympos uses third parties, we impose at least the same security requirements on that third party.
  • Sportcentrum Olympos will not store (personal) data longer than strictly necessary, but at least during the legal retention period applicable to Sportcentrum Olympos.
  • If you have made use of one of the rights of data subjects, Sportcentrum Olympos will process your request in accordance with the applicable legislation and within the time limit set for that purpose.

 

Your rights
Your rights under the AVG include the following:

  • The right to see your personal data. You have the right to see the personal data that Sportcentrum Olympos has of you. Sportcentrum Olympos will first verify your identity and then search for your data. All data that Sportcentrum Olympos has of you will be sent to you.
  • The right to correct your personal data. You have the right to correct or supplement the personal data that Sportcentrum Olympos has of you.
  • The right to delete your personal data. You have the right to delete all or part of the personal data, which Sportcentrum Olympos has of you.
  • Right to object. If you believe that Sportcentrum Olympos is processing personal data about you inappropriately, you are invited to make this known to Sportcentrum Olympos. If your objection is justified, Sportcentrum Olympos will stop processing your personal data.
  • Right to data portability of the personal data you have provided. You have the right to digitally transfer the personal data that Sportcentrum Olympos holds about you to another entity. If you wish to do so, Sportcentrum Olympos will provide your data in a structured and common file format. Sportcentrum Olympos may only do so with personal data that you have personally provided to Sportcentrum Olympos, or that Sportcentrum Olympos has obtained through the execution of our agreement.

You can exercise these rights by sending an e-mail to the Data Protection Officer; contact details will follow later in this document.

Sportcentrum Olympos will process your request within the statutory timeframe. Contact will be made by Sportcentrum Olympos mainly by e-mail; if necessary, telephone contact will take place.

Customers may request Sportcentrum Olympos to delete their data at any time. If one does so at a time when there is still a valid membership the deletion can only take place after the end date of the membership.

Contact by e-mail
Sportcentrum Olympos broadly distinguishes two types of automated e-mail: transactional e-mail, which is initiated/requested by you and recruiting e-mail. Transactional e-mails are an essential part of the service you have chosen, such as resetting a password or confirming a subscription. Therefore, you cannot unsubscribe from these types of e-mails.

If you consent to receive solicitation mail such as newsletters, you may revoke this consent. E-mails of this type contain unsubscribe options for that mailing.

Visiting our website
Sportcentrum Olympos uses functional, analytical and tracking cookies. A cookie is a small text file that is stored in the browser of your computer, tablet or smartphone the first time you visit this website. Sportcentrum Olympos uses cookies with a purely technical functionality. These ensure that the website works properly and that, for example, your preferences are remembered. These cookies are also used to make the website work properly and to optimise it. In addition, we place cookies that track your browsing behaviour so that we can offer tailored content and advertisements. On your first visit to our website, we have already informed you about these cookies and asked your permission to set them. You can opt out of cookies by setting your internet browser to stop storing cookies. In addition, you can also delete any information previously stored via your browser's settings. For an explanation, see: https://veiliginternetten.nl/themes/situatie/cookies-wat-zijn-het-en-wat-doe-ik-ermee/

On the website you will find a number of links to other websites. Although these websites have been selected with care, we cannot accept any responsibility for the use of your data by these organizations. Please read the privacy statement of the website you are visiting.

Use of third-party apps
Sportcentrum Olympos ensures that agreements are made regarding the security of personal data stored in the cloud when using third-party apps. Nevertheless, there is a responsibility on the user himself to handle personal data wisely.

Data Protection Officer
Although Sportcentrum Olympos is not obliged to do so, Mr. E. Peeters acts as internal Data Protection Officer.

You can reach Sportcentrum Olympos' Data Protection Officer during office hours by calling 030-2533908 or e-mailing ussmesacosa@olympos.nl.

Despite the care that Sportcentrum Olympos takes with respect to your personal data, you may have a complaint about our practices.

If you are not satisfied with the handling of your complaint after consultation or handling, please contact:

Autoriteit Persoonsgegevens
Bezuidenhoutseweg 30
2594 AV  Den Haag
0900-2001201

www.autoriteitpersoonsgegevens.nl

Modification of privacy statement
Sportcentrum Olympos reserves the right to modify this privacy statement. Therefore, please review the privacy statement regularly for updates. Discussion will be based on the latest privacy statement published on our website.

Utrecht, May 19 2025

Sportcentrum Olympos
Uppsalalaan 3
3584 CT  UTRECHT
KvK Utrecht: 41184528
E: ussmesacosa@olympos.nl
T: 0302533908

Appendix 1: List of third parties that process personal data for Sportcentrum Olympos

  • Tintel B.V., Curieweg 19, 3208 KJ Spijkenisse
  • SERA Bussiness Design B.V., Raadhuisstraat 211, 2406 AC Alphen aan den Rijn
  • Uniek IT, Nokweg 38, 2451 AL, Leimuiden
  • Digifit B.V. (the company behind Virtuagym), Oudezijds Achterburgwal 55, 1012 DB Amsterdam; applicable to those who, mostly through the fitness department, use Virtuagym