Privacy Policy

1. Introduction

This Privacy Policy describes how Ahmed Tareq, an individual entrepreneur registered in the Netherlands, collects, uses, stores, and protects your personal data when you visit this website or use my services. I am committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (Uitvoeringswet Algemene verordening gegevensbescherming, UAVG).

By accessing this website and using my services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please do not use this website or any of its services.

For any questions regarding this Privacy Policy or your personal data, you may contact me at the address provided in Section 10 of this document.

2. Data Controller

The data controller responsible for processing your personal data is:

Ahmed Tareq
Individual Entrepreneur (Eenmanszaak)
Wattstraat 56
2723 RC Zoetermeer
Netherlands
KvK Number: 89236471
VAT Number: NL003892364B01
Email: contact@ahmedtareq.nl

I am registered with the Dutch Chamber of Commerce (Kamer van Koophandel) and operate under Dutch law. As a small-scale entrepreneur, I do not have a dedicated Data Protection Officer, but I handle all privacy-related matters personally with the utmost care and attention.

3. What Personal Data I Collect

I collect and process only the personal data that is necessary for the purposes described in this policy. The types of personal data I may collect include:

3.1 Data You Provide Directly

• Contact Information: Your name, email address, and any other details you provide when filling out the contact form.
• Service Preferences: Information about which service you are interested in (The Quick Draw, The High Noon Hour, or The Long Trail).
• Message Content: The text of your message or inquiry submitted through the contact form.
• Payment Information: If you purchase a service, payment details are processed by my secure payment processor. I do not store your full credit card details on my servers.

3.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device information, and screen resolution.
• Usage Data: Pages visited, time spent on pages, referral sources, and navigation patterns on the website.
• Cookies and Similar Technologies: See Section 7 for detailed information about cookies.

3.3 Data I Do NOT Collect

I do not collect special categories of personal data as defined under GDPR Article 9 (such as data concerning health, racial or ethnic origin, political opinions, religious beliefs, etc.). I do not process biometric data or genetic data. I do not knowingly collect data from children under 16 years of age.

4. Legal Basis for Processing (GDPR Article 6)

Under the General Data Protection Regulation, I process your personal data based on the following legal grounds:

• Article 6(1)(a) — Consent: Where you have given explicit consent, such as for marketing communications or optional cookies.
• Article 6(1)(b) — Contract: Processing necessary for the performance of a contract or to take steps at your request before entering into a contract (e.g., processing your service purchase and delivering the agreed-upon sessions).
• Article 6(1)(c) — Legal Obligation: Processing necessary to comply with legal obligations, such as tax and accounting requirements under Dutch law.
• Article 6(1)(f) — Legitimate Interests: Processing necessary for my legitimate interests, such as website analytics, fraud prevention, and improving my services, provided these interests do not override your fundamental rights and freedoms.

You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

5. How I Use Your Personal Data

I use your personal data for the following purposes:

• Service Delivery: To provide the services you have purchased, including scheduling sessions, delivering materials, and maintaining correspondence for The Long Trail.
• Communication: To respond to your inquiries, send confirmations, and provide customer support.
• Payment Processing: To process payments for services through secure third-party payment processors.
• Legal Compliance: To comply with tax, accounting, and other legal obligations under Dutch and EU law.
• Website Improvement: To analyze website usage and improve user experience, content, and functionality.
• Security: To protect the website and my services from fraud, abuse, and unauthorized access.

I do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

6. Data Retention

I retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

• Contact Form Submissions: Retained for 12 months from the date of submission, unless a service contract is formed, in which case retained for the duration of the contract plus 7 years (Dutch tax retention requirement).
• Service Purchase Records: Retained for 7 years in accordance with Dutch tax and accounting laws (Burgerlijk Wetboek and Belastingwet).
• Website Analytics Data: Retained for 26 months (Google Analytics default retention period).
• Cookie Data: See Section 7 for specific retention periods.

After the retention period expires, your personal data is securely deleted or anonymized. You may request earlier deletion under the right to erasure (see Section 9).

7. Cookies and Tracking Technologies

This website uses cookies and similar technologies to enhance your browsing experience and analyze website traffic. By using this website, you consent to the use of cookies as described below.

7.1 Types of Cookies Used

• Essential Cookies: Necessary for the website to function properly. These cannot be disabled and do not require consent.
• Analytics Cookies: Help me understand how visitors interact with the website. These are set by Google Analytics and collect information anonymously.
• Preference Cookies: Remember your preferences and settings for future visits.

7.2 Third-Party Cookies

This website uses Google Analytics, which may set cookies on your device. Google Analytics collects information about your use of the website, including your IP address. This information is transmitted to and stored by Google on servers in the United States. Google uses this information to evaluate website usage and compile reports. Google may also transfer this information to third parties where required by law. For more information, please review Google's Privacy Policy.

7.3 Managing Cookies

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of this website. For detailed instructions on managing cookies, visit AboutCookies.org.

8. Data Sharing and Third Parties

I do not sell, rent, or trade your personal data. I may share your data with the following categories of recipients only when necessary:

• Service Providers: Third-party providers who assist with website hosting, email delivery, payment processing, and analytics. These providers are contractually bound to process data only on my behalf and in accordance with my instructions.
• Legal Authorities: When required by law, court order, or governmental regulation, or to protect my legal rights.
• Professional Advisors: Accountants and legal advisors, bound by professional confidentiality obligations.

All third-party service providers are located within the European Economic Area (EEA) or have adequate safeguards in place for data transfers outside the EEA (such as Standard Contractual Clauses approved by the European Commission).

9. Your Rights Under GDPR

As a data subject, you have the following rights under the General Data Protection Regulation:

• Right of Access (Article 15): You have the right to request a copy of the personal data I hold about you.
• Right to Rectification (Article 16): You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten") (Article 17): You have the right to request deletion of your personal data, subject to legal retention obligations.
• Right to Restriction of Processing (Article 18): You have the right to request that I restrict processing of your personal data in certain circumstances.
• Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Article 21): You have the right to object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent (Article 7): Where processing is based on consent, you may withdraw consent at any time.
• Right to Lodge a Complaint (Article 77): You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

To exercise any of these rights, please contact me using the details in Section 10. I will respond to your request within one month of receipt, which may be extended by two further months for complex requests.

10. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact me:

Ahmed Tareq
Wattstraat 56
2723 RC Zoetermeer
Netherlands
Email: contact@ahmedtareq.nl

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

Autoriteit Persoonsgegevens
Bezuidenhoutseweg 30
2594 AV Den Haag
Netherlands
Website: autoriteitpersoonsgegevens.nl

11. Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in my practices, legal requirements, or service offerings. Any changes will be posted on this page with an updated effective date. I encourage you to review this Privacy Policy periodically.

Significant changes will be communicated to you via email if you have an active service contract with me.

12. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of the Netherlands. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of The Hague, the Netherlands.