WOMEN OF ANCIENT FUTURES
PRIVACY STATEMENT
Your privacy is very important to Women of Ancient Futures. Therefore, we process and use your personal data securely and in full compliance with the General Data Protection
Regulation (GDPR). In this privacy statement, we explain which information we collect from
you, why we collect it and how we use it. We also explain your rights with regard to the
processing of your personal data.

Women of Ancient Futures takes appropriate technical and organisational measures to
protect personal data against loss, misuse, unauthorised access, disclosure or alteration.
Access to personal data is restricted to persons who require the data in order to perform
their duties.

Please contact us at [email protected] if you have any further questions about your privacy.

Article 1 Who are we?
Women of Ancient Futures is a company with its registered office in the Municipality of
Amsterdam, The Netherlands. We are registered in the commercial register of the Dutch Chamber of Commerce under registration number 87623773.

Women of Ancient Futures acts as the data controller with regard to the personal data
processed as described in this privacy statement.

Article 2 Which data do we use?
Below we provide an overview of the personal data we process, the purpose of the
processing, the legal basis and how long we store the data.

We process your name, company name (if applicable), company details, address, date of
birth, telephone number, email address and social media accounts. We use this data in
order to perform our agreement with you and provide our services. We will keep this data for
up to 7 years after the termination of the agreement.

When you register for a retreat, we process your name, email address, address, date of birth and information related to health, medication or dietary requirements. Health-related information is processed only with the explicit consent of the participant and solely for the purpose of organising the retreat safely and responsibly.

In addition, we may process special personal data by including you and other people
involved in our retreats in photographs or other visual material.

We use a portfolio on our website and social media channels to show our work to potential
customers. We process images made during our work, including the names of the creators
of the content. Your name may be included if you are visible in the image material and if you did not indicate any objection when entering into the agreement. We store this material in
our archive indefinitely, unless you request its removal.

For billing and financial administration purposes, we process your name, company name, Chamber of Commerce data, VAT number, billing address, email address, bank details and outstanding balance. We cannot process payments without this information. Dutch tax authorities require us to store this data for 7 years. After this period, the data will be anonymised.

In the unlikely event that you have a complaint about our services, we process your name,
email address and communication regarding the complaint in order to find the best possible
solution. We store complaint-related data for 1 year after processing.

We have a commercial interest in using some of your personal data for marketing purposes.
We process your name and email address for direct marketing and newsletters.

We delete this information as soon as you unsubscribe from our newsletter or indicate that you no longer wish to be contacted. An unsubscribe option is included at the bottom of each newsletter.

We process your name, company name, address, email address, website or social media account and bank account number for affiliate marketing purposes. We delete this data as soon as the affiliate cookie period has ended or when you stop being part of the affiliate program.

If we act as an affiliate for one of our partners, these partners may place cookies on our
website. In that case, no personal data about you will be shared with us.

In addition, Facebook collects target group statistics using a first-party cookie. This
information allows us to place more targeted advertisements. However, data collected by
Facebook using this cookie is passed on to us anonymously.

We also use the Facebook Conversions API. No cookies are used in this process. Certain
first-party data, such as your name, email address, telephone number and location, may be sent directly from our server to Facebook in order to measure advertising performance and
improve advertisements using custom audiences.

To enable reviews about our services, we process your name, company name, photo and
the content of your message. This information becomes visible when you post a review. We
may publish these reviews on our website or social media channels where this serves our
commercial interests. Reviews will be removed if they are no longer representative or upon
request.

If you contact us via the website, we ask for your name and email address. The information
you submit through the contact form will be visible to us. We delete the data once your
request has been completed, unless it results in an agreement.

When you respond to articles or posts, we process your name, email address, gravatar
image, website and message content. This information becomes publicly visible and remains available until you delete the response or we remove the post.

When you register for a webinar, training, course or free resource, we process your name
and email address to provide access to the content and potentially send additional relevant information. This data will be deleted after completion of the relevant activity, unless it
concerns a paid training. In that case, invoice data will be stored for 7 years as required by
law.

We also process a password for your personal account in the online learning environment.
The password is encrypted and stored together with your email address to prevent security
fraud. This account information is stored until you delete your account.

Article 3 How do we obtain this information?
We obtain the above-mentioned information directly from you when you provide it to us as a
customer, participant, contact person or website visitor.

Article 4 What rights do you have regarding your data?
Under the General Data Protection Regulation you have several rights regarding your
personal data:
Access – You may request to view your personal data at any time.
Correction – You may request correction, supplementation or deletion of your data. Some
data can also be adjusted within your personal account.
Objection – You may object to the processing of your personal data.
Data portability – You may request that we transfer your data to another provider in a
commonly used digital format.
Automated decision making – You have the right to express your view on automated
decisions and request reconsideration by a person.
Withdrawal of consent – When data is processed based on your consent, you may
withdraw that consent at any time.

To exercise your rights, please send a request together with a copy of your ID (with your
BSN and photograph obscured) to:
[email protected]
We will respond to your request within 30 calendar days.


Article 5 Who receives your data?
We do not share your personal data with third parties unless this is necessary for business
operations or required by law.

To execute our services, data may be shared with processors and partners involved in the
delivery of our services, such as coaches or technical service providers. We conclude data
processing agreements with these parties to ensure the protection of your privacy.
We will never sell your personal data to third parties.

If personal data is processed outside the European Union, we will take appropriate
safeguards to ensure adequate protection.

Article 6 Automated decision making
We may use automated decision-making based on information, actions or omissions
provided by you. As a result, certain services may not be available to you.


Article 7 Data security and data breaches
Women of Ancient Futures takes appropriate technical and organisational security measures
to protect personal data.
In the event of a data breach, we will act in accordance with the reporting obligations set out in the General Data Protection Regulation.

Article 8 Cookies
Our website may use cookies or similar technologies to improve website functionality and analyse website usage. Cookies may also be used for marketing purposes. Where required, you will be asked for consent before cookies are placed.

More information can be found in our cookie policy in the cookie banner.

We recommend that you review this privacy statement regularly, as we may update it from
time to time.

If you have any questions about this privacy statement or how we process your data, please
contact us at:
[email protected]

If you have a complaint about how we handle your personal data, you may also file a
complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).