In short: we use only the information needed for our training, administration, safety and communications you choose. Marketing, identifiable image publication and necessary health information are handled separately.
Last updated: 24 August 2026
1. Who is responsible?
Kalah Amsterdam is a trade name of Stenhuijs Training en Coaching, registered at Elstarstraat 65, 1036 LH Amsterdam, the Netherlands, with the Dutch Chamber of Commerce under number 85963798. The visiting and training address is Chasséstraat 59, 1057 JA Amsterdam.
Email for privacy questions and requests: team@kalah-amsterdam.nl. Telephone: +31 6 27095746.
2. Scope
This policy applies when you visit our website, request information, book a trial session or appointment, register for training or an event, receive personal training, contact us, submit a business enquiry, receive our newsletter or otherwise interact with Kalah Amsterdam.
3. Data we process
Depending on the interaction, we process names, email addresses, telephone numbers, addresses, date of birth or age, registration and membership data, attendance and training data, communications, appointments, preferences, payment and invoice data, direct-debit mandates and information required for business assignments.
For safe participation, we may process limited information about injuries, physical or psychological limitations, pregnancy or other circumstances requiring an adjustment. We do not request a full diagnosis where a functional limitation is sufficient. Emergency contact details are collected only when appropriate for training safety.
Website data may include IP address, device and browser details, cookie identifiers, pages visited, referrer and interactions. Identifiable photos and videos are also personal data.
4. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Handle enquiries, trial sessions, registration and training | Contact, registration, appointment, training and attendance data | Contract or steps requested before a contract |
| Provide safe, adjusted training | Strictly necessary functional health or safety information | Explicit consent for special-category data; legitimate interests for general safety administration |
| Payments, invoicing and direct debit | Payment, invoice and mandate data | Contract and legal obligation |
| Answer questions and complaints | Contact data and correspondence | Contract or legitimate interests |
| Newsletter and marketing | Name, email, preferences and consent evidence | Consent; the existing-customer exception only where legally available |
| Business enquiries and quotes | Business contact and organisation details | Pre-contractual steps and legitimate interests |
| Website security and essential operation | Technical data and strictly necessary cookies | Legitimate interests and necessary technical storage |
| Analytics, advertising pixels and tracking | Online identifiers and usage data | Consent, unless a statutory exemption demonstrably applies |
| Internal training recordings | Image and sound | Legitimate interests after prior notice and a genuine opt-out, or consent for more intrusive recording |
| Website or social-media publication | Identifiable photos and videos | Separate consent |
| Incident handling and legal claims | Facts, people involved, communications and strictly necessary health data | Legitimate interests; a valid Article 9 exception for special-category data |
5. Health and safety information
Health data is special-category personal data. We therefore collect only what is necessary to offer safe or adjusted training. Please describe what you can or cannot do rather than providing your complete medical history.
Where we store this information digitally, we request separate explicit consent. You may withdraw consent without affecting earlier lawful use. Withdrawal may require us to assess with you whether safe participation remains possible. In a genuine emergency, we may use information where necessary to protect vital interests.
Health information is deleted when no longer required and no later than three months after training ends, unless an incident, legal claim or legal duty requires separately justified retention.
6. Minors
The normal minimum age is 16. Kalah Amsterdam may offer an adjusted programme to younger participants. A parent or legal guardian registers the minor and confirms the necessary arrangements. We normally process only the child’s name and age, plus strictly necessary safety information.
A parent or legal guardian is asked separately for consent before identifiable images of a minor are published. Refusal does not affect participation.
7. Photos and videos
Training may be recorded for internal instruction, quality improvement or evaluation. We announce this in advance and provide a practical way to remain out of frame. Internal recordings are not automatically posted online.
We request separate, specific consent for identifiable publication on our website, social media, advertising or promotional material. Consent may be refused or withdrawn. Withdrawal applies to future use; material already printed cannot always be recalled.
8. Newsletter, email and WhatsApp
Service messages about a booking, registration, training, payment or change are part of our service. We normally request prior consent for newsletters and digital marketing. The marketing choice is voluntary, unticked by default and separate from participation.
We use the existing-customer exception only within applicable law, for our own similar services, and only where a free and simple opt-out was offered both when the address was collected and in each message. You can unsubscribe through the email link or team@kalah-amsterdam.nl.
WhatsApp is used for practical communications and for commercial follow-up only with a valid legal basis. Do not send medical details through WhatsApp unless necessary and agreed with us.
9. Website, cookies and tracking
Our website uses WordPress and Google Tag Manager and may use Google Analytics, Meta Pixel, TikTok Pixel and similar technologies. Strictly necessary cookies may be used without consent. Analytics or marketing technologies that do not qualify for an exemption are activated only after consent.
Our separate cookie policy and consent interface identify the actual cookies, providers, purposes and retention periods. The interface allows consent to be accepted, refused or changed. Refusal of non-essential cookies does not block the core website.
10. Recipients
We use providers for CRM and forms (HubSpot), appointments (SimplyMeet.me), events (Eventbrite), administration and direct debit (Moneybird, banks and payment providers), payments (PayPal and Eventbrite Payments), website and hosting (WordPress and hosting or plugin providers), email and office tools (Google Workspace/Gmail), communications (WhatsApp/Meta), analytics and advertising (Google, Meta and TikTok), and social media.
Providers receive only the data required for their role or may act as independent controllers for parts of their service. We enter into processor terms where required and review settings, permissions and retention. We may share data with business clients where necessary to organise a training programme.
11. Transfers outside the EEA
Some providers or group companies may be located outside the European Economic Area, including in the United States. Where a transfer occurs, we use a valid mechanism such as an adequacy decision, the EU-US Data Privacy Framework for certified recipients, or European Commission standard contractual clauses with supplementary safeguards where needed. Current details are available from team@kalah-amsterdam.nl.
12. Retention
| Category | Normal retention period |
|---|---|
| Enquiries without registration | Up to 12 months after the last substantive contact |
| Membership, training and contact data | Up to three months after termination for closure; then delete or anonymise |
| Emergency contact details | Until participation ends, or earlier when no longer needed |
| Health and adjustment information | Only while necessary and no later than three months after termination, unless a justified exception applies |
| Invoices, payments and tax records | Seven years, or longer where legally required |
| Direct-debit mandate | For the mandate period and as long as evidence is needed for payment, dispute or statutory records |
| Newsletter data | Until opt-out; minimal suppression data afterwards as needed to honour the opt-out |
| Consent evidence | During the processing and up to five years afterwards for accountability or disputes |
| Incident file | Normally up to five years after closure; longer only for a pending claim or legal need |
| Internal training recordings | Up to three months unless a shorter or justified longer period was announced |
| Cookies and analytics | As specified in the cookie policy and provider settings; kept as short as possible |
13. Security
We use appropriate technical and organisational measures, including limited access, strong authentication where available, secure connections, current software, careful provider selection, backups and incident and breach procedures. No system is entirely risk-free.
14. Your rights
You may request access, correction, erasure, restriction, portability and, where applicable, object to processing. You may withdraw consent and always object to direct marketing. Contact team@kalah-amsterdam.nl. We may request reasonable identity verification and normally respond within one month.
You may also complain to the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl. Contacting us first is appreciated but not required.
15. Automated decision-making
Kalah Amsterdam does not make decisions producing legal or similarly significant effects based solely on automated processing.
16. Changes and language
We may update this policy when our services, systems or law change. The current version is published on our website. We will provide additional notice of material changes where reasonably necessary. Version 1.0, last updated 24 August 2026. If the versions differ, the Dutch version prevails.