1. Which data do we process and retention periods?
We process, among others, the following personal data of members, tenants, and visitors:
Name, date of birth, and contact details (address, phone number, e-mail)
Membership type, payment details, and reservation information
School or employee status and diploma information (for alumni, maximum 3 years old)
Photo or image for verification when accessing the sports center
History of reservations, check-ins, and use of facilities
Optionally, how you came into contact with BRESS and previous memberships

BRESS does not keep your personal data longer than necessary for the purposes for which it was collected, unless required by law. In general:
Active members’ data: for the duration of your membership, plus up to 2 years after membership termination for administrative and legal purposes
Financial and payment data: up to 7 years, in accordance with tax and accounting requirements
Photos and videos for promotional purposes: up to 5 years, unless you object to their use
Data of visitors who did not become members: up to 1 year, unless otherwise agreed

2. Purposes of processing
Personal data is used for:
Management of memberships and reservations
Communication about activities, sports offerings, and changes
Marketing, only with explicit consent (opt-in)
Safety and control of access to the sports center
Photo and video material for promotional purposes, unless you object

3. Legal grounds
Personal data is processed based on:
Consent of the data subject (for example, marketing and visual material)
Necessity for the execution of an agreement
Legitimate interest, such as verification of identity, safety, and optimization of the sports offerings

4. Disclosure to third parties
BRESS only provides personal data to third parties when necessary for the execution of the service or when required by law. Agreements are made with processors to secure the data.

5. Security
Personal data is protected by technical and organizational measures against loss, misuse, or unauthorized access. Only authorized personnel have access.

6. Rights of data subjects
You have the right to:
Access your data
Correction of inaccurate data
Deletion of data, as far as legally permitted

Requests can be submitted via [info@bress.nl](mailto:info@bress.nl)
or by phone at 076 – 521 5453.

7. Responsibility
You are responsible for the confidential use of your account and access tools (such as QR code or pass).