Privacy and Cookies Policy
About this policy
At DEBs WAY Voeding en Welzijn we value the protection of the privacy of everyone who uses our services. In this privacy policy we explain how we handle personal data and protect your privacy.
1. Contact Details
Website: www.debsway.com
Address: Uhlenbeckkade 23
Postal code: 2313 EH Leiden
Email: info@debsway.com
2. Processing of Personal Data
We only process personal data insofar as necessary to carry out our tasks. We process the following personal data: email address, first name, middle name, surname, address details, date of birth, gender, telephone number, bank details, medical history, health declaration, health data and other relevant personal data.
We use personal data only for the following purposes: to be able to stay in contact with you; performance of the agreement with you; conducting personal communication with clients by email in connection with the provision of our services; sending newsletters; informing you of new developments, including offers; complying with our administrative obligations; combating fraud.
3. Special and/or Sensitive Personal Data
We only process personal data of persons under the age of 16 if we have consent for this from the person holding parental responsibility. By offering personal data to us for processing, you declare that you are at least 16 years old, or that you have consent for the processing from a parent or other person holding parental responsibility. If we establish that a person in our records is younger than 16 and consent for the processing has not been given by a person holding parental responsibility, we will delete the personal data.
Should you have any indication that we are processing personal data of a person under 16 without the consent of the authorised person, please contact us at info@debsway.com so that we can delete the data in question.
Where we process health data, this concerns special categories of personal data within the meaning of Article 9 GDPR. This data is processed only where a legal basis exists for doing so, such as the explicit consent of the data subject or another exception listed in the GDPR, and only for the purpose established in advance.
4. Retention Period of Personal Data
To limit as much as possible the risk of loss of personal data, we retain personal data for only one year. We do this for your convenience: by retaining your personal data for a year, you do not need to provide your personal data to us again each time. If, within the year for which we retain your personal data, you once again agree to our privacy policy, we may retain your data for a further year from that moment. Only in order to comply with our statutory obligations may we retain personal data for longer, but for no more than 7 years.
5. Security of Personal Data
We take good care of your personal data, and we have therefore taken the following measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised alteration:
• The connection to the website (www.debsway.com) is established by means of a secure connection.
• The computers on which personal data is processed and stored are always equipped with the latest security updates from Windows or Apple.
• The computers on which personal data is processed and stored are equipped with adequate antivirus software.
• With all external parties who have access to personal data, appropriate contractual and/or organisational measures have been put in place, under which these third parties have committed to maintaining confidentiality and to processing personal data only on the instructions of DEBs WAY Voeding en Welzijn.
For a practice of our size, personal email communication with clients is part of the service we provide. Clients are aware of this.
Should you nevertheless suspect that your data is not properly secured, or do you have indications of misuse of your data, please let us know at info@debsway.com.
6. Sharing Personal Data with Third Parties
We naturally do not sell personal data to third parties and only provide it to others where necessary for the performance of our agreement with you or to comply with a statutory obligation. With companies that process your data, we put in place appropriate contractual and organisational measures to ensure that your personal data is processed at an appropriate level of security and confidentiality.
For the processing and storage of personal data, we use the following systems:
a. a locally secured computer with password protection and antivirus software;
b. the websites www.debsway.com and www.debsway.eu, on which personal data is processed and stored via secured WordPress environments, including forms, email marketing, appointment scheduling and client management;
c. Google Drive, provided by Google, whereby Google offers appropriate safeguards in accordance with its own privacy policy and, for the transfer of personal data outside the European Economic Area, on the basis of standard contractual clauses approved by the European Commission;
d. the payment platform Stripe, which acts as a third party for the processing of payments and applies its own privacy policy and Data Processing Agreement, which data subjects can consult via Stripe’s website;
e. the coaching platform Hubfit, which acts as a third party and applies its own privacy policy, which data subjects can consult via Hubfit’s website.
7. Cookies on www.debsway.com and www.debsway.nl
To enable our website to function optimally, we use services provided by third parties, but here too we are mindful of your privacy. The cookies on our website do not compromise your privacy. A cookie is a small text file that is stored on your computer, tablet or smartphone when you first visit our website. Cookies ensure that the website functions properly and that preference settings are retained. We, and any third parties we engage, do not process your IP address in a manner that is traceable to you. Cookies can be deleted via your browser settings. It is also possible to set your browser so that cookies are no longer stored.
8. Data Breach Procedure
In the event of a data breach that is likely to pose a risk to the rights and freedoms of data subjects, we will report this without delay and, where possible, within 72 hours, to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). If the data breach poses a high risk to data subjects, we will inform those individuals as soon as possible.
9. Rights of Persons Whose Personal Data We Process
Your data remains yours. You always have the option to view what data we process about you, and to have that data corrected or deleted. In addition, you may withdraw your consent to the processing of your data or object to our processing of your data. If you wish, we will send your data in a computer file to you or to an organisation designated by you.
A request for access, correction, deletion or transfer of personal data, withdrawal of consent given, or an objection to the processing of the data, may be sent to info@debsway.com.
10. Other
Automated decision-making and use of AI models: We do not use personal data for automated decisions. This naturally goes without saying, but we are required to state it. To support our services, we make use of AI models, in which only anonymised data is processed. Personal data is never shared with, or entered into, AI models without the explicit consent of the data subject.
Complaints to the Dutch Data Protection Authority: For completeness, we note that it is possible to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) regarding the processing of your data. This can be done via the following link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons
Changes: DEBs WAY Voeding en Welzijn reserves the right to make changes to this Privacy Policy without further notice. Such changes shall take effect immediately upon being posted on the site. This Privacy Policy was last amended on 27 July 2026.
We hope we have informed you sufficiently.
DEBs WAY Voeding en Welzijn
