PRIVACY POLICY (AVG / GDPR COMPLIANT)

For the website of Debby Zagt

​

1. Who I Am

This Privacy Policy applies to the website and services of:

Debby Zagt
Business address available upon request
Email: debbyzagt@protonmail.com

I respect your privacy and handle your personal data with care, in accordance with the AVG/GDPR.

2. Personal Data I Collect

I may collect and process the following categories of personal data:

Information you provide

• Name

• Email address

• Phone number

• Information you share in messages or emails

• Information you choose to share during the intake call

• Billing details (for invoices)

Information during sessions

Sessions are personal and confidential. Notes may be made to support the coaching process, but only with your consent and only for your personal trajectory.

I do not record sessions (audio or video), unless explicitly agreed in writing.

Website usage data

Like most websites, basic analytics may be collected:

• IP address (anonymized when possible)

• Browser type

• Pages visited

• Time and date of visit

This helps improve the website but is never used to identify individuals unless required by law.

3. Purpose of Data Processing

Your personal data is used for the following purposes:

• Communicating with you

• Scheduling sessions

• Preparing and delivering coaching sessions

• Sending invoices and handling payments

• Responding to messages or questions

• Maintaining client records

• Complying with legal obligations (e.g., tax requirements)

I do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing Personal Data

Under the GDPR, personal data must be processed under a lawful basis.
I process your data based on:

1. Consent – when you contact me voluntarily

2. Performance of a contract – when you book sessions

3. Legal obligation – e.g., storing financial records for tax law

4. Legitimate interest – maintaining business operations securely

You can withdraw your consent at any time by emailing me.

5. Sharing of Personal Data

I deeply respect your privacy. Data is never sold, shared, or disclosed to third parties except in the following cases:

• To comply with legal requirements

• When you give explicit written consent

• With service providers necessary to run the business (e.g., email provider, accountant)

• If there is a serious and immediate concern for your safety or the safety of others

These providers comply with GDPR regulations.

6. Data Storage & Retention

Your personal data is kept only for as long as necessary:

• Session notes: max. 2 years after last contact (unless you request earlier deletion)

• Emails: as long as needed for communication

• Invoices & financial records: 7 years (mandatory by Dutch tax law)

• Website analytics: anonymized data only

You may request deletion earlier (except where required by law).

7. Security Measures

I take appropriate technical and organizational measures to protect personal data, including:

• Encrypted devices

• Secure passwords

• Limited access to data

• No third-party sharing without explicit permission

• GDPR-compliant service providers

8. Your Rights Under the AVG/GDPR

You have the right to:

• Request access to your data

• Correct your personal data

• Request deletion (“right to be forgotten”)

• Withdraw consent

• Restrict processing

• Object to processing

• Request data transfer (data portability)

Send any request to: debbyzagt@protonmail.com

I will respond within 30 days, as required by law.

9. Cookies

This website may use minimal cookies for functionality or analytics.
A cookie notice will appear if required.

10. Third-Party Links

This website may contain links to external sites.
I am not responsible for their privacy practices.

11. Contact

If you have questions about this Privacy Policy or how your data is handled, contact:

Debby Zagt
Email: debbyzagt@protonmail.com

​

Last updated: December 5, 2025