1. Who is responsible for your data
Sebastian Buurma, operating as a sole trader (eenmanszaak) under his own name — Sebastian Buurma is also the trade name — registered with the Dutch Chamber of Commerce (KvK) under number 42028086, established in Amersfoort, is the controller for the personal data described in this Privacy Policy ("Sebastian", "I", "me"). This Policy applies to visitors of sebastianbuurma.nl and to anyone who contacts Sebastian about his coaching services ("you").
If you have questions about how your data is handled, contact sebastian@sebastianbuurma.nl, or see more general information from the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
2. What personal data is collected, and why
| Category | Examples | Why it's collected |
|---|---|---|
| Contact details | Name, email address, phone number, and — for a minor — a parent/guardian's name and contact details | To respond to enquiries and arrange coaching |
| Communication | Messages exchanged by email (Google Workspace) and WhatsApp | To schedule and deliver coaching, and stay in touch between sessions |
| Coaching/session information | Notes from sessions, observations about mental and performance-related topics discussed, exercises used | To prepare for and deliver coaching tailored to you |
| Billing details | Name, address, invoice and payment details, processed via Moneybird | To invoice for Services and meet bookkeeping obligations |
Notes from coaching sessions can include information about your mental or psychological state, which is a "special category" of personal data under the GDPR. Sebastian only records what is relevant to the coaching itself, keeps it separately from general administration, and does not share it with your team, sponsors, or anyone else without your (or, for a minor, your parent/guardian's) explicit consent, except where Section 5 or the law requires otherwise.
3. Legal basis for processing
Sebastian relies on the following legal bases, depending on the data involved:
- Performance of a contract — to arrange and deliver the Services you've booked (contact details, scheduling, billing).
- Explicit consent — for special-category data discussed in coaching sessions (your mental/psychological state), and for any case where consent is the appropriate basis (e.g. a minor's guardian agreeing to the engagement).
- Legal obligation — to keep certain financial records for Dutch tax purposes.
- Legitimate interest — for basic website and business administration that doesn't rely on the bases above, balanced against your privacy.
4. Minors
For a Client under 18, Sebastian collects a parent or legal guardian's contact details and asks for their consent before coaching starts and before any special-category information (see Section 2) is discussed or recorded. The guardian can exercise the rights in Section 9 on the young driver's behalf, and can withdraw consent at any time, which ends the engagement.
5. Who else sees your data
| Party | Role |
|---|---|
| Google (Google Workspace: Gmail, Calendar, Drive) | Processes email, scheduling, and stored documents on Sebastian's behalf |
| WhatsApp (Meta) | Carries day-to-day messages between Sebastian and you; governed by WhatsApp's own terms once a message is sent |
| Moneybird | Processes invoicing and bookkeeping data on Sebastian's behalf |
| Strato | Hosts sebastianbuurma.nl and may keep standard server (access) logs |
| YouTube / Spotify | Embedded on the website to show a video and podcast episodes; loading these may set their own cookies (see the Cookie Policy) |
| Claude (Anthropic) | Used by Sebastian for his own business tasks (drafting, admin, website content). Sebastian aims not to enter a Client's special-category/health data into Claude beyond what a specific task needs |
Sebastian does not sell personal data, and does not use ActiveCampaign, Jotform, or similar marketing tools on sebastianbuurma.nl. Data is only disclosed beyond what's listed here where required by law (e.g. a legitimate request from a public authority).
6. International data transfers
Google and WhatsApp (Meta) are based in the United States, though both offer EU-based processing options. Where personal data is transferred outside the European Economic Area, Sebastian relies on the safeguards these providers have in place, such as the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.
7. How long data is kept
| Data | Retention |
|---|---|
| Enquiry / contact details that don't lead to a booking | 12 months after last contact |
| Coaching/session notes (incl. special-category data) | For the duration of the coaching relationship, plus 2 years afterward, unless you ask for earlier deletion |
| Invoicing and bookkeeping data | 7 years, as required by Dutch tax law |
| WhatsApp/email correspondence | Kept until no longer needed for the purpose it was sent for, or until you ask for deletion |
Where a retention period isn't fixed by law, Sebastian keeps data only as long as needed for the purpose it was collected for.
8. Security
Sebastian takes reasonable technical and organisational measures to protect your data, including relying on the built-in security of Google Workspace, WhatsApp, and Moneybird, limiting access to coaching notes to Sebastian himself, and keeping the website itself as a static site with no database that could be hacked for personal data (sebastianbuurma.nl does not run a server-side contact form or store submissions).
9. Your rights
Under the GDPR, you (or, for a minor, your parent/guardian) have the right to:
- Access the personal data Sebastian holds about you
- Correct inaccurate data
- Request erasure of your data
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, email sebastian@sebastianbuurma.nl. Sebastian will respond within one month, or let you know if more time (up to two further months) is needed for a complex request.
10. Complaints
If you're unhappy with how your data is handled, you can first contact Sebastian directly at sebastian@sebastianbuurma.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), autoriteitpersoonsgegevens.nl.
11. Cookies
sebastianbuurma.nl uses cookies only to the extent described in the separate Cookie Policy. At the time of writing, the site itself does not set any analytics or marketing cookies; the embedded YouTube video and Spotify player may set their own.
12. Changes to this policy
Sebastian may update this Privacy Policy from time to time, for example if the tools or services used to run the practice change. The version published on sebastianbuurma.nl, dated at the top of this page, is always the current one.
13. Contact
- Name: Sebastian Buurma
- KvK number: 42028086
- Address / city: Amersfoort, The Netherlands
- Email: sebastian@sebastianbuurma.nl
- Website: sebastianbuurma.nl