Terms of Use.

01

Who We Are

A Good Vibration Enterprise operates the website bastiaankollen.com and all coaching, training, and digital products offered through it. We are the data controller for personal data collected via this website.

• Business: A Good Vibration Enterprise
• Owner: Bastiaan Kollen
• Location: Utrecht, The Netherlands
• Email: [email protected]
• Phone: +31 6 48447667

02

Data We Collect

We only collect personal data that is necessary to provide our services. This may include:

• Contact information — name, email address, phone number (when you fill in a form or book a call)
• Account information — name, email, and password if you create an account through our platform (Kajabi)
• Payment information — billing name and address; payment card details are processed directly by our payment providers and are never stored by us
• Communication data — messages you send us via email, WhatsApp, or contact forms
• Usage data — pages visited, time on site, browser type, device, and IP address collected automatically via cookies and analytics tools
• Newsletter data — email address and name when you subscribe to The Golden Life Letter or download our free eBook

We do not knowingly collect data from children under 16 without verifiable parental consent.

03

How We Use Your Data

We use your personal data for the following purposes:

• To deliver coaching sessions, online programs, workshops, and events you have enrolled in
• To respond to enquiries and provide customer support
• To process payments for products and services
• To send newsletters, mindset content, and promotional emails you have opted into
• To schedule discovery calls and coaching appointments via Calendly
• To improve our website, content, and services based on how visitors interact with them
• To meet our legal and contractual obligations

We will never sell your personal data to third parties. We do not use your data for automated decision-making or profiling in any way that produces legal effects.

04

Legal Basis for Processing

Under the GDPR, we process your personal data on the following legal grounds:

• Contract performance — when processing is necessary to deliver a service you have purchased or enrolled in
• Consent — when you subscribe to our newsletter, download our free eBook, or opt into marketing communications. You may withdraw this consent at any time
• Legitimate interest — for analytics, website improvement, and business communications that do not override your fundamental rights
• Legal obligation — when required to comply with applicable Dutch or EU law

05

Sharing Your Data

We share your personal data only where strictly necessary, with the following categories of third parties:

• Kajabi — our website and course platform (USA, covered by GDPR Standard Contractual Clauses)
• Calendly — for scheduling discovery calls and appointments
• Payment processors — Stripe or other payment providers used to process transactions securely
• Email platforms — used to send newsletters and automated communications
• Google Analytics — for anonymous website usage statistics

All third-party processors are bound by data processing agreements and are required to handle your data in compliance with GDPR. We do not transfer your data outside the European Economic Area without appropriate safeguards in place.

06

Cookies

Our website uses cookies — small text files stored on your device — to make the site function properly and to help us understand how it is used.

• Strictly necessary cookies — required for the website to function (cannot be disabled)
• Analytics cookies — anonymous data about how visitors use the site (e.g. Google Analytics)
• Preference cookies — to remember your settings and choices
• Marketing cookies — used only if you have given explicit consent

You can control cookie settings through your browser preferences at any time. Disabling certain cookies may affect the functionality of the website. Our cookie consent banner will ask for your permission before any non-essential cookies are set.

07

Data Retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected:

• Client and coaching records are retained for up to 7 years after the last service delivery, in line with Dutch legal and accounting requirements
• Newsletter subscriber data is retained until you unsubscribe, after which it is deleted within 30 days
• Website analytics data is retained in anonymised form for up to 26 months
• Enquiry and contact form submissions are retained for up to 2 years unless a coaching relationship follows

08

Your Rights Under GDPR

As a resident of the European Economic Area, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data ("right to be forgotten")
• Right to restriction — to limit how we process your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

09

Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our platform (Kajabi) uses SSL encryption for all data transmission. Payment data is processed using PCI-DSS compliant systems and is never stored on our servers.

While we do our best to protect your information, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and to contact us immediately if you suspect any unauthorised access to your account.

10

Third-Party Links

Our website may contain links to external websites, including YouTube, Instagram, X (Twitter), and our merchandise shop. Once you leave our site, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any third-party sites you visit.

11

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

We encourage you to review this policy periodically to stay informed about how we protect your data.