Introduction and General Principles

 

Data protection is of a particularly high priority for ONE WITH NUTRITION. The use of our website is possible without any indication of personal data; however, if a data subject wants to use our specialized services, the processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain consent from the data subject.

​

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject, shall always be in line with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018 (DPA 2018). As a nutritional therapy practice, we also process Special Category Data (sensitive personal data) relating to the health of our clients. This data protection declaration informs the general public of the nature, scope, and purpose of the personal data we collect, use, and process, and outlines the rights of the data subject.

​

As the controller, ONE WITH NUTRITION has implemented numerous technical and organisational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g., by telephone.

 

1. Controller Details

 

Company: ONE WITH NUTRITION

Controller: Jorien Spoorenberg

Email: info@one-with-nutrition.com

Website: https://www.one-with-nutrition.com

 

2. Terminology and Definitions

 

The data protection declaration of ONE WITH NUTRITION is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Key terms used in this declaration include:

• Personal Data: Any information relating to an identified or identifiable natural person. This includes, but is not limited to, Special Category Data (sensitive data) such as health information, medical history, and clinical notes.

• Data Subject: Any identified or identifiable natural person whose personal data is processed by the controller.

• Processing: Any operation performed on personal data, whether or not by automated means (e.g., collection, storage, retrieval, use, disclosure).

• Special Category Data: Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health, or data concerning a natural person's sex life or sexual orientation (Article 9).

• Consent: Any freely given, specific, informed, and unambiguous indication of the data subject’s wishes.

• Other defined terms: Restriction of Processing, Profiling, Pseudonymization, Controller, Processor, Recipient, and Third party. (Full definitions remain as per the original text).

 

3. Data Collection and Usage

 

Website Activity and Cookies

 

The website of ONE WITH NUTRITION uses cookies (text files stored on a computer system). Through cookies, we provide user-friendly services and optimize information based on user needs.

• General Data: We collect general data (browser type, operating system, IP address, time of access) for system security, website optimization, and long-term viability. This data is analysed statistically and anonymously.

• Cookie Management: The data subject may, at any time, prevent the setting of cookies through browser settings, though this may impact the full functionality of the website.

 

Newsletter Subscription and Tracking

 

When subscribing to our newsletter, personal data is collected via an input mask. We use the double opt-in procedure to ensure valid consent.

• Purpose: To send regular newsletters about enterprise offers and relevant information.

• Data Stored: Valid email address, IP address, date, and time of registration.

• Tracking Pixels: The newsletter contains tracking pixels to enable log file recording and analysis of marketing campaign success (e.g., email opens and link clicks).

• Profiling: We use this data to segment our audience (e.g., grouping subscribers interested in 'Neurodiversity' vs. 'Women's Health') to ensure you receive only the most relevant content, which is a form of profiling. You consent to this tracking upon confirming your subscription.

• Revocation: Consent may be revoked at any time via the unsubscribe link found in each newsletter.

 

Contact via Website

 

If a data subject contacts us by email or via a contact form, the personal data transmitted voluntarily is stored for the purpose of processing the inquiry or contacting the data subject. There is no transfer of this personal data to third parties.

 

4. Legal Basis for Processing

 

We process personal data based on the following legal grounds:

GDPR Article Legal Basis Purpose

Art. 6(1) lit. a Consent Newsletter subscription and specific processing operations where consent is requested.

Art. 6(1) lit. b Performance of a Contract Processing necessary for the supply of services, products, or pre-contractual measures (e.g., booking a Clarity Call).

Art. 6(1) lit. c Legal Obligation Processing required for tax obligations or other statutory requirements.

Art. 6(1) lit. f Legitimate Interests Carrying out our business in favour of the well-being of the business and clients (e.g., general website security and optimization).

Art. 9(2) lit. h Special Category Data (Health)Processing health data (e.g., medical history, symptoms related to Neurodiversity, functional test results) is carried out by a professional subject to the obligation of professional secrecy.

Art. 9(2) lit. a Explicit Consent Used for specific collection of Special Category Data during client onboarding (e.g., comprehensive intake forms).

 

5. Retention and Erasure

 

Period for which the personal data will be stored

 

The criteria used to determine the storage period is the respective statutory retention period.

• Clinical Records: For client health and clinical records, we adhere to professional guidelines, which typically require records to be stored for a minimum of 7 years following the date of the last consultation with an adult client.

• General Data: After expiration of the retention period, or if the storage purpose is no longer applicable, the corresponding data is routinely blocked or erased.

 

Routine Erasure and Blocking

 

If the storage purpose is not applicable, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.

 

6. Rights of the Data Subject

 

The data subject is entitled to the following rights:

• Right of Confirmation

• Right of Access

• Right to Rectification

• Right to Erasure (Right to be forgotten)

• Right of Restriction of Processing

• Right to Data Portability

• Right to Object (including to direct marketing and profiling)

• Right to Withdraw Data Protection Consent

• Right concerning Automated Individual Decision-Making (We do not use automatic decision-making or profiling for core services).

(Full explanations of these rights remain as per the original text, and employees can be contacted to exercise them.)

 

7. Additional Provisions

 

• Data Protection for Applications: Personal data of applicants is processed for the application procedure and automatically erased two months after refusal unless employment is secured.

• Provision of Personal Data: We clarify that the provision of personal data is partly required by law or contract, and failure to provide necessary data may prevent the conclusion of a contract.