Who is responsible?
Trayanka Krastanova, a self-employed entrepreneur, is responsible for the processing of personal data described in this policy.
What information do we process?
The information we hold depends on how you interact with us. This website itself has no intake form or checkout.
- When visiting the website: technical data such as IP address, browser type and request time, insofar as the host processes it to display and secure the site.
- When contacting us by email or social media: your name, contact details, username and message content.
- When purchasing or participating: contact, order, invoice and payment data, and information needed to provide access or coaching.
- During coaching: goals, training and nutrition information, progress, feedback, photos and any health information you choose to share that is relevant to coaching.
Why do we use information?
We use contact details to answer questions and, if you wish, discuss a possible coaching program. We do so to take steps before entering into a contract or based on our legitimate interest in communicating with you.
For coaching, products, clinics and events, we use information needed to perform our contract. We process payment, bookkeeping and invoice data to perform the contract and meet legal accounting duties. Technical website data may be needed for site operation and security.
We do not automatically use progress photos or client stories in marketing. Separate consent is required before publication and should specify how the material may be used.
Health information
Information about symptoms, injuries or health is sensitive personal data. When needed for coaching, we process it only where there is an appropriate legal basis and a condition for processing sensitive data, such as your separate, explicit consent. We ask only for information relevant to coaching.
You may withdraw consent for this processing. Withdrawal does not affect processing that was lawful before it. Without information necessary for safe coaching, some guidance may not be possible. Please avoid sending medical records through public comments or social media direct messages.
Who may receive your information?
Depending on the service, team members involved in coaching, our accountant and suppliers may access information for their tasks. Examples include website and email hosting, Vytal for nutrition, TeamBuildr for training, Plug&Pay for orders and Mollie for payments. Payment providers also process data under their own terms. We do not sell personal data.
If you contact us on Instagram or Facebook, Meta processes data on its platform. TikTok and YouTube process information when you use their services. This website links to those platforms; their own privacy policies apply there.
Processing outside Europe
Some suppliers or social platforms may process information outside the European Economic Area. Where such a transfer takes place under our responsibility, a valid GDPR transfer mechanism is required, such as an adequacy decision or appropriate contractual safeguards. The exact location may differ by provider and service.
How long do we keep information?
We retain information no longer than necessary for its purpose. We keep an inquiry as long as needed to answer and follow it up. We retain client information during the program and afterwards as needed to complete the service, maintain records or handle a potential dispute. We delete or anonymize data that is no longer necessary where possible.
We generally retain financial records for seven years, or longer if a specific legal duty applies. Material published with consent is used for the agreed purposes; you may withdraw consent for future use. Content already shared or copied by others may remain outside our control.
How do we protect information?
We limit access to people who need the information for their work and use the security features of the systems we work with. We consider the nature of the data when selecting appropriate technical and organizational safeguards. No form of digital storage or communication can guarantee absolute security.
Website, cookies and external links
At present, this landing page has no contact form, advertising pixel or analytics tracker of its own. The hosting provider may process necessary technical data and, where applicable, functional cookies to deliver and secure the website. If we add analytics or advertising technology later, we will update this policy and seek consent where required.
Links to Instagram, Facebook, TikTok and YouTube take you to another platform. Their own settings and privacy policies apply there.
Your rights and how to contact us
You may request access, correction or deletion of your information, restriction of processing or data portability. You may object to processing based on legitimate interests and withdraw consent where processing relies on it. Some rights do not apply in every situation; legal duties may require us to retain certain information.
Email your request to trayanka@trayanka.nl. We generally respond within one month. We may ask for more information if we need to confirm your identity. You may also lodge a complaint with the Dutch Data Protection Authority. We do not make decisions about your participation based solely on automated processing.
Dutch Data Protection AuthorityChanges to this policy
We update this policy if our practices, suppliers or legal obligations change. The date at the top shows when this version was last updated.