Privacy Statement

Last updated: 19 August 2026

We consider it important that your personal data is handled carefully and confidentially. This privacy statement explains which personal data we process through vvdespuyt.nl, why we process it, how long we retain it and what rights you have.

This privacy statement has been prepared in accordance with the General Data Protection Regulation (GDPR).

1. Who are we?

The website https://vvdespuyt.nl is operated by:

Volleybalvereniging De Spuyt
Korte Leidsedwarsstraat 86
1017 RD Amsterdam
The Netherlands
Email: bestuur@vvdespuyt.nl
Website: https://vvdespuyt.nl

Volleybalvereniging De Spuyt is the data controller for the personal data processed through this website.

If you have any questions about this privacy statement or about the processing of your personal data, please contact us at bestuur@vvdespuyt.nl.

2. What personal data do we process?

Depending on how you use our website, we may process the following personal data:

your name;
your email address;
your IP address;
technical information about your browser and device;
information that you provide yourself in a form or comment;
information necessary for the operation and security of the website;
information necessary to manage a user account, if you have an account.

We do not process more personal data than is necessary for the purpose for which the data is collected.

3. Why do we use your personal data?

We process personal data for the following purposes:

providing and maintaining our website;
responding to questions and messages submitted through the website;
processing applications and communicating with prospective and existing members;
publishing and managing comments, where this functionality is available;
managing user accounts and access rights;
securing the website and preventing spam, abuse and other forms of unauthorised use;
ensuring the technical operation of the website;
complying with legal obligations.

We do not use personal data for purposes other than those for which it was collected, unless this is legally permitted or necessary for another compatible purpose.

4. What is the legal basis for processing personal data?

We only process personal data when there is a legal basis for doing so. Depending on the situation, this may be:

consent;
necessary for the performance of a contract;
necessary to comply with a legal obligation;
necessary for the purposes of our legitimate interests.

Where we process personal data based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Contact forms and other forms

When you contact us through our website, we process the information you enter in the relevant form. This may include your name, email address and the contents of your message.

We use this information solely to handle your message and, where necessary, respond to you.

We do not retain this information for longer than necessary to handle your request, unless we are legally required to retain it for a longer period.

The website may also contain links to external forms, for example forms used for activities or tournaments. When you use an external form, the information you enter is processed directly by the provider of that form. The privacy statement of that external provider applies to that processing.

6. Comments

If you leave a comment on our website, we process the information you provide with the comment. Technical information, such as your IP address and browser information, may also be processed to detect spam and abuse.

A comment and its associated metadata may be retained for as long as necessary to manage the website and recognise and moderate follow-up comments.

If you do not want your name or other information to be publicly displayed, we recommend that you do not include such information in the public part of a comment.

Note: this section only applies if comments are actually enabled on the website.

Gravatar

If comments on our website use Gravatar, an anonymised version (hash) of your email address may be provided to the Gravatar service operated by Automattic to determine whether you use a profile image there.

More information about the processing of personal data by Automattic can be found in its privacy statement:

https://automattic.com/privacy/

If your comment is approved and you use Gravatar, your profile image may be publicly visible alongside your comment.

Note: this section only applies if Gravatar is actually used on the website.

7. Images and media files

If you upload images to our website, we recommend that you do not upload images containing location information (EXIF GPS data).

Visitors to the website may be able to download and extract such location information.

Our website may also contain photographs of activities, matches and other association-related events. When publishing photographs, we take applicable privacy legislation and any objections from individuals concerned into account.

8. Cookies

Our website uses cookies. A cookie is a small text file that can be stored on your computer, tablet or smartphone by a website.

We distinguish between:

Functional cookies

Functional cookies are necessary for certain parts of the website to function properly. Consent is not required for these cookies when they are used solely for the operation of the website.

Preference cookies

These cookies may be used to remember your preferences, for example when you have previously entered certain information on the website.

Analytical cookies

If we use analytical cookies to analyse the use of our website, we will inform you about this and ensure that these cookies are configured appropriately.

Tracking and marketing cookies

If we use tracking or marketing cookies that collect personal data or track visitors across different websites, these cookies will only be placed after you have given your consent.

You can withdraw your consent to such cookies at any time. Withdrawing consent must be as easy as giving it.

The actual cookies and external services used on the website may change over time. We will ensure that this privacy statement and any cookie settings are kept consistent with such changes.

9. Login and administrator functions

The website contains a WordPress login through which authorised users can access certain functions.

If you have a user account, WordPress may use cookies to maintain your login session and remember certain user preferences.

These cookies are used for the operation and security of the relevant functionality.

If you choose to remain logged in, the login session may be retained for a longer period.

When you request a password reset, technical information such as your IP address may be used when processing and securing the request.

10. Embedded content from other websites

Pages and posts on our website may contain embedded content, such as videos, images, maps or other external content.

For example, the contact page contains an embedded external map/iframe.

Embedded content from other websites may behave in the same way as if you had visited the external website directly. These external parties may therefore process your IP address, place cookies or collect information about your interaction with the embedded content.

This may, for example, apply to services such as YouTube, Google Maps, Vimeo or other external platforms, where such services are used on the website.

When we use such services, the processing of personal data may also be subject to the privacy statement of the relevant external party.

11. Who do we share your personal data with?

We do not provide personal data to third parties unless this is necessary for the operation of the website, for providing a service requested by you, where you have given your consent, or where we are legally required to do so.

We may share personal data with, for example:

our hosting provider;
parties that technically maintain the website;
providers of necessary website functionality;
security and spam detection services;
external services whose content is displayed on our website;
providers of external forms or other services to which we link from our website.

Where necessary, we enter into appropriate agreements with parties that process personal data on our behalf to protect that data.

When you use an external website or service through a link on our website, that external party is responsible for processing the personal data you provide there, insofar as we have no control over that processing.

12. Transfers outside the European Economic Area

If we use services provided by organisations that process personal data outside the European Economic Area (EEA), we ensure that such processing takes place in accordance with the GDPR.

If personal data is transferred to a country for which the European Commission has not issued an adequacy decision, we ensure that appropriate safeguards are in place as required by the GDPR.

13. How long do we retain your data?

We do not retain personal data for longer than is necessary for the purpose for which it was collected, unless a statutory retention period applies.

The specific retention period depends on the type of data and the purpose of the processing.

Examples:

contact details submitted through a contact form: for as long as necessary to handle your question or request;
user account data: for as long as the account is active or as long as necessary to manage and secure the account;
comments on the website: for as long as necessary to manage the website, unless deletion is requested and we have no legitimate interest or legal obligation to retain them;
technical and security data: for as long as necessary for security, troubleshooting and abuse prevention;
administrative data: for as long as legally required.

14. How do we protect your data?

We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, alteration or disclosure.

The website is maintained and secured to minimise risks to personal data as far as reasonably possible.

However, no method of storage or transmission over the internet can guarantee complete security.

15. What rights do you have?

Under the GDPR, depending on the circumstances, you have the following rights:

the right to access your personal data;
the right to have inaccurate personal data corrected;
the right to have your personal data erased;
the right to restrict the processing of your personal data;
the right to object to certain processing activities;
the right to data portability where provided for by law;
the right to withdraw previously given consent.

You can submit a request by contacting bestuur@vvdespuyt.nl.

We may ask you to provide sufficient information to verify your identity. This is done to prevent personal data from being disclosed to the wrong person.

We will generally respond to your request within one month. In certain circumstances, this period may be extended as permitted by the GDPR.

16. Complaints

If you believe that we are not processing your personal data correctly or are not handling your privacy appropriately, please contact us first at bestuur@vvdespuyt.nl so that we can try to resolve the issue.

You also have the right to lodge a complaint with the Dutch supervisory authority:

Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

The Autoriteit Persoonsgegevens supervises compliance with privacy legislation in the Netherlands.

17. Automated decision-making and profiling

We do not use automated decision-making or profiling through this website that produces legal effects concerning you or otherwise significantly affects you.

18. Changes to this privacy statement

We may amend this privacy statement when our website, services or applicable laws and regulations change.

The most recent version will always be available on this page. The date at the top of this statement indicates when it was last updated.

Last updated: 19 August 2026