Legal

Privacy Policy

This policy explains what personal data we collect, why we collect it, how long we keep it, and the rights you can exercise under the General Data Protection Regulation (GDPR / AVG).

Last updated 26 August 2026

1. Who is responsible for your data

Fit4Tomorrow Leadership is the data controller for the personal data described in this policy.

We are a small organization and do not have a statutory obligation to appoint a Data Protection Officer. Questions about this policy are handled directly by Robert F. Feddes.

2. What data we collect

Data you give us

When you complete a form on this website — a contact request, a scan, or a programme enquiry — we process the information you enter. Depending on the form, that may include your name, email address, telephone number, company name, your role, company size, and the content of your message.

Data collected automatically

Our web server records standard technical information for security and reliability purposes: IP address, browser type, requested page, and timestamp. These logs are not used to build profiles and are retained for a limited period.

Assessment and scan responses

If you complete one of our diagnostic instruments, your answers and the resulting scores are personal data. They are used to produce your report and to inform any engagement you commission. They are not sold, shared, or used to train third-party systems.

3. Why we process your data, and on what legal basis

  • To answer your enquiry — legitimate interest, and the steps preceding a contract (Art. 6(1)(b) and 6(1)(f) GDPR).
  • To deliver a product, scan, or programme you purchased — performance of a contract (Art. 6(1)(b)).
  • To send you insights and offers by email — your explicit consent (Art. 6(1)(a)), which you may withdraw at any time.
  • To meet our accounting and tax obligations — legal obligation (Art. 6(1)(c)).
  • To keep the website secure and available — legitimate interest (Art. 6(1)(f)).

We do not make automated decisions with legal effect about you, and we do not engage in profiling for advertising purposes.

4. How long we keep it

  • Enquiries that do not lead to an engagement: up to 24 months, then deleted.
  • Client records and scan results: for the duration of the engagement and 7 years thereafter, where required by Dutch tax law.
  • Email marketing consent records: until you unsubscribe, plus a short period to evidence the withdrawal.
  • Server logs: a limited technical retention period set by our hosting provider.

5. Who we share it with

We share personal data only with service providers who need it to operate this business, and only under a data processing agreement. These currently include our web hosting provider, our email and form-handling providers, and our accountant.

Where a provider processes data outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision. We do not sell personal data, and we do not share it with advertising networks.

6. Cookies and tracking

This website currently uses no advertising or profiling cookies. See our Cookie Policy for the full picture, including what will change if and when advertising tools are introduced.

7. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased, where no legal retention obligation applies;
  • restrict or object to our processing;
  • receive your data in a portable format;
  • withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these, email robertfeddes@fit4tomorrowleadership.nl. We respond within one month. If you are not satisfied with our response, you may lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

8. Security

The website is served over TLS. Access to enquiry and client data is limited to those who need it. Form submissions are protected against automated abuse. No system is absolutely secure, but we take proportionate technical and organizational measures and review them periodically.

9. Children

Our services are directed at organizations and their leadership. We do not knowingly collect data from anyone under 16.

10. Changes to this policy

We may update this policy to reflect changes in our services or in the law. The date at the top of this page shows when it was last revised. Material changes affecting how we use your data will be communicated directly where we have your contact details.