Privacy and Cookie Statement FitForMe

This privacy and cookie statement was last updated on 31 October 2026.

Your privacy is of great importance to Fit For Me B.V. (hereinafter: "FitForMe"). We therefore comply with the relevant laws and regulations on privacy, including the General Data Protection Regulation (hereinafter: "GDPR"). As part of the services we provide, we process personal data. In this privacy and cookie statement you can read which personal data we process about you and what we do with it.

Contact details FitForMe

• Fit For Me B.V.
• Weena 784
• 3014 DA Rotterdam
• Email address: info@fitforme.com
• Phone number: +31 10 – 22 355 28
• Chamber of Commerce number: 24375270

Contact details Data Protection Officer

• Email address: a.roelenga@ictrecht.nl

Our privacy and cookie statement in brief

When processing personal data, we comply with privacy legislation. This means that we:

• Clearly set out our purposes before we process your personal data, through this privacy and cookie statement.
• Store as little personal data as possible and only the data that is necessary for our purposes.
• Explicitly ask for consent for the processing of your personal data, where consent is required.
• Take the necessary security measures to protect your personal data. We also impose these obligations on parties that process personal data on our behalf.
• Respect your rights, such as the right to access, correct or delete your personal data that we process.

For what purposes do we use your personal data?

In this privacy and cookie statement we explain what we at FitForMe do with information we obtain about you when you use our services or visit our websites fitforme.com and careers.fitforme.com. By ordering our products or visiting our website, we obtain different kinds of personal data from you.

Below, for each purpose, we indicate what data we obtain from you, for what purpose we process this data and for how long the data is stored. If you have any questions or want to know exactly what we hold about you, please contact us using the contact details at the top of this privacy and cookie statement.

Contact and complaint handling

When you send us an email, fill in a contact form on the website, contact us by phone, or get in touch with us in any other way, we process your personal data. We process this personal data on the basis of our legitimate interest in being able to handle questions, requests and complaints. We have balanced our interest against your privacy interests. In doing so, we have assessed that our interest in handling your request outweighs yours, because it concerns contact that you yourself initiate with us and we only process the data necessary for this purpose.

For this we process the following personal data:

• first and last name;
• contact details (email address, phone number);
• the content of your message.

We retain this data for up to 2 years after handling your request, unless a longer retention period is necessary in connection with an (impending) dispute or legal obligation.

Placing and processing orders

When you place an order on our website, we process the personal data you provide to us. We need this data because of the purchase agreement that is concluded between you and FitForMe. We process this data on the basis of performance of the contract and, where applicable, to comply with legal obligations (such as tax retention obligations).

For this we process the following personal data:

• first and last name;
• contact details (email address, phone number);
• address details;
• billing details;
• payment details;
• ordered products;
• date of surgery;
• clinic.

We retain order data for the duration of the customer relationship and for up to 24 months thereafter in connection with warranty, complaints and our evidential position. Financial data we retain for 7 years, in accordance with the tax retention obligation.

Creating an account and logging in

After your first order, you can use a personal account ("My FitForMe"). This account is automatically created for you based on the details you provided at the time of your order. With your account you can log in to our website to view the progress of your order and manage your details. On your first login you will receive an email to set a password. We process this data on the basis of performance of the contract and, where the account offers additional functionality, on the basis of our legitimate interest in providing ease of use.

For this we process the following personal data:

• first and last name;
• contact details (email address, phone number);
• password;
• order and subscription details;
• payment and billing details (insofar as these are part of your orders and visible in your account);
• address details.

We retain account data until you delete your account. After deletion we retain data that we are legally required to retain (such as billing data) for the applicable period.

Advice from nutritionists

If you need personalised and expert advice, you can submit a request via our website for a phone appointment with one of our nutritionists. In this context, you can enter personal data and provide additional information in a free text field.

We process your personal data to receive and assess your request and to contact you, and (where applicable) to put you in contact with a nutritionist. This processing is based on our legitimate interest in supporting you with advice and improving our service. We have balanced our interest against your privacy interests. Since you yourself take the initiative to contact us and we only process the data necessary for this purpose, we consider this processing to be justified.

For this we process the following personal data:

• first and last name;
• contact details (phone number, email address);
• type of advice (as selected in the form);
• the content of your message.

If you provide data about your health in your request, we process this data solely on the basis of your explicit consent. Providing this data is entirely voluntary.

We retain this data for the duration of the customer relationship and for up to 24 months thereafter, unless a longer retention period is necessary. You can withdraw your consent to the processing of health data at any time easily by contacting us.

Customer retention analyses

To retain you as a customer and to improve our service, we carry out analyses on the personal data you have provided to us. This data may, where relevant, be supplemented with publicly available information, such as information from public social media profiles. We use this data to gain insight into the use of our products and to improve our service. In doing so, we only process data that is necessary for this purpose and we take your privacy into account. We base this processing on our legitimate interest.

In this context, we may analyse data to distinguish customer groups and to better understand how our products and services are used.

For this we process the following personal data:

• unique identifier (such as a customer number or account ID);
• interactions with our website, emails and customer service;
• transaction data;
• demographic data.

We retain this data for the duration of the customer relationship and up to a maximum of 24 months thereafter for analysis and improvement purposes.

You can object to this processing at any time. In that case we will cease the processing, unless we have compelling legitimate grounds to continue. You can contact us for this via the contact details at the top of this privacy and cookie statement.

Service communication

We use your personal data to inform you about your order and subscription. Think of messages about your order, renewals, changes and other service updates. This communication may take place via email or post. We process this personal data because this is necessary for the performance of the contract.

For this we process the following personal data:

• first and last name;
• contact details (email address);
• address details;
• order and subscription details.

We retain this data for the duration of the customer relationship and for up to 24 months thereafter in order to provide service communication.

Marketing communication

Inspiration emails

Via our website you have the option to sign up for our inspiration emails. In these emails we periodically inform you about topics related to weight loss surgery and our related products. We process your email address on the basis of your consent.

In addition, we may measure open and click behaviour in these emails to analyse how our emails are used and to improve them. We only do this if you have given separate consent for this. This consent is separate from your sign-up for the inspiration emails.

For this we process the following personal data:

• contact details (email address);
• source of sign-up;
• open and click behaviour in emails (provided you have given your consent for this).

We retain this personal data for as long as you are subscribed to the inspiration emails. You can unsubscribe at any time by clicking 'unsubscribe' at the bottom of the email. The above personal data will then be deleted. If you have given your consent for the measurement of open and click behaviour, you can also withdraw this consent separately.

Other marketing communication

We may also use your personal data to send you offers and information about our products and services, such as comparable or complementary products that connect to your previous purchase. This is separate from the inspiration emails for which you can sign up separately.

For marketing by post we use your personal data on the basis of our interest in maintaining and developing our customer relationship. We only use data that is necessary for this purpose. You can object to this at any time.

For marketing by email we only use your personal data if you have given your consent, or if we are able to rely on the exception for existing customers.

For this we process the following personal data:

• first and last name;
• contact details (email address);
• address details;
• order and subscription details.

We retain this data for marketing purposes until you unsubscribe or object to receiving marketing communication.

You can always object to marketing by post. For email marketing, you can unsubscribe at any time via the unsubscribe link in the message or by contacting us via the contact details at the top of this privacy and cookie statement. If you unsubscribe or object, we will no longer send you any marketing communication.

Social media advertising

We need your personal data when you become a customer. We will also use your email address to show relevant and tailored advertisements on our websites, and on websites of third parties, namely Facebook and Google. For this purpose we provide your email address in hashed form to Facebook and Google. These platforms will link the hashed data to your social media account, in order to show you relevant advertisements. For this, we also use information that we, Facebook and Google collect via cookies (only after you have given consent for this). We have a legitimate interest here, namely a direct marketing interest. We use your personal data for this purpose until you have objected to us about no longer receiving direct marketing. You always have the right to object to this by sending us an email via the contact details at the top of this privacy and cookie statement.

Working at FitForMe

Have you responded to one of our vacancies or submitted an open application? Then we process your personal data in order to be able to handle your application and to prepare for the possible conclusion of an employment contract.

For this we process the following personal data:

• first and last name;
• contact details (email address, phone number);
• photograph;
• curriculum vitae (CV);
• motivation letter;
• link to LinkedIn profile;
• any other information you send with your application.

We retain your application data for up to 6 weeks after the position has been filled. We retain this data so that we can contact you in the event that the position becomes available again within the probationary period. If we are unable to offer you a position at this time, we may – with your consent – retain your application data for another year. You can withdraw your consent at any time by sending us an email.

A social media and internet search may be part of the application process. This is necessary to ensure that our image is maintained when hiring new staff and to assess whether you are suitable for the role. We therefore do this on the basis of our legitimate interest. We have balanced our interest against your privacy interests. In doing so, we have assessed that our interest outweighs yours because the search is limited to publicly accessible and relevant information and is carried out carefully and proportionately. We will not ask you to give us access to a protected social media page or to connect with us. The results of the search will be discussed with you. If you object to this, you can indicate this by email at the time of your application.

Training purposes

When you contact us by telephone, we may record the call for training purposes. We process your personal data on the basis of our legitimate interest.

For this we process the following personal data:

• personal data disclosed during the call.

We retain the audio recording for training purposes for a period of 3 months. We retain a transcript of the recording for longer, but it is stored in anonymised form. You can always object to the recording by contacting us through our usual channels.

When can we share your personal data with third parties?

We only share your personal data with third parties when permitted under current legislation. It may occur that we provide your personal data to third parties because:

• we have engaged them to process certain data;
• this is necessary to perform the contract with you;
• you give consent for this;
• we have a legitimate interest in doing so;
• we are legally obliged to do so (for example, if the police demand it when they suspect a crime).

The parties that process personal data on our behalf are:

• IT suppliers and service providers;
• cookie service providers;
• hosting parties;
• payment service providers and debt collection agencies;
• mail-order companies and distribution centres;
• review parties;
• analytics parties.

International transfer of personal data

Some of our suppliers are located outside the European Economic Area (hereinafter: "EEA"). When sharing your personal data with these parties, we take appropriate safeguards to protect your privacy.

The European Commission has adopted an adequacy decision for certain countries. On the basis of an adequacy decision, personal data can be safely transferred from the EEA to companies in those countries, without additional data protection safeguards being required.

If we share data with companies in other countries without an adequacy decision (or American companies that do not fall under the EU-US Data Privacy Framework), we take additional protective measures in the form of so-called appropriate safeguards. This means that we take additional action to protect your personal data. We use, among other things, standard contractual clauses for this.

Social media buttons

On our website we use social media buttons, which redirect you to the social media platforms. You thereby have the option to follow us and to share content within the network. You will also encounter advertisements on your social media page. The buttons work because of pieces of code that originate from the social media networks. If you want to know what the social media platforms do with your personal data, please read the relevant privacy and cookie statement:

• Facebook (privacy statement)
• Instagram (privacy statement)

Cookies

On our website we use cookies from ourselves and from third parties. Cookies are small information files that, when visiting a website, can automatically be stored on or read from the device (such as PC, tablet or smartphone) of the website visitor. This happens via the web browser on the device.

We use the following types of cookies:

Functional cookies

These cookies ensure that the website functions properly. Functional cookies:

• remember your login details;
• store your language preferences;
• keep track of products in your shopping basket;
• ensure optimal display of the website on your screen.

We do not need consent for these cookies.

Analytical cookies

Based on this information, we can make our website more user-friendly. These cookies give us insight into how visitors use our website, for example:

• the number of visitors;
• the most visited pages;
• the average visit duration;
• devices and browsers used.

This information helps us to improve the website. We use these cookies in a privacy-friendly way so that they do not have a significant impact on your privacy. Insofar as these cookies process personal data, we ask for your consent for this.

Marketing cookies

These cookies make it possible, among other things, to display personalised advertisements via our advertising partners.

These cookies may collect the following data from you, among other things:

• name;
• screen display options;
• IP address;
• cookie ID;
• website and click behaviour;
• referrer URL;
• behaviour within the application.

We need your consent for these cookies. When you visit our website for the first time, we display a cookie notification. In this we ask for your consent for the placement of the marketing cookies (and in some cases certain analytical cookies). You can continue to use our website if you do not give consent for these cookies: only the functional cookies will then be placed. You can always withdraw the consent you have given.

Below you will find a link to an overview of the cookies used on our website, including the provider, the purpose and the retention period. This overview is updated automatically.

View the complete cookie overview

Enabling and disabling cookies

In your web browser you can set it so that the storage of cookies is only accepted when you consent to it. For more information, consult the manual of your browser. Please note: many websites do not function optimally when cookies are disabled.

Deleting cookies

Most cookies have an expiry date. If an expiry date is set, the cookie is automatically deleted when the expiry date elapses. You can also choose to delete the cookies manually, before the expiry date has passed. Consult the manual of your browser to do this. Below you will find, per browser, a link to the website of the provider where it is described step by step how you can block or delete cookies:

• Google Chrome
• Firefox
• Edge
• Safari

How is your personal data secured?

The security of personal data is of great importance to us. We therefore take appropriate technical and organisational measures with regard to the processing of personal data to be carried out, against loss or against any form of unlawful processing (such as unauthorised access, impairment, modification or disclosure of the personal data). We continuously adapt our security measures and pay close attention to what could go wrong.

What privacy rights do you have?

• Right of access: you have the right to access the personal data that we process about you.
• Right to rectification: you have the right to correct or supplement the personal data we process about you, if it is incorrect or incomplete.
• Right to object: you can object to the processing of your personal data, including to direct marketing.
• Right to erasure: you can request us to delete your personal data.
• Right to withdraw your consent: if you have given us consent to process personal data, you can withdraw this consent at any time.
• Right to data portability: where technically possible, you have the right to have the personal data we process about you transferred to a third party.
• Right to restriction of processing: in some cases you can request us to restrict the processing of your personal data (temporarily or otherwise).
• Right not to be subject to solely automated decision-making: decisions are not made entirely by an algorithm or automated system without human intervention.

At the time of your request, we may ask you to identify yourself. We only request the data necessary to ensure that you are the right person to whom the personal data belongs. We will in principle comply with your request within one month. This period may, however, be extended by two months for reasons related to the specific privacy rights or the complexity of the request. If we extend this period, we will notify you in a timely manner.

If you wish to exercise any of your rights, you can notify us via: privacy@fitforme.nl.

Scope and changes

This privacy and cookie statement applies solely to the services of FitForMe and not to other websites accessible via our website. When our service changes, we naturally need to adapt the privacy and cookie statement as well. Therefore, always pay attention to the date at the top of this document and check regularly for new versions.

Ask questions or file a complaint

If you have any questions or would like to file a complaint about the use of your personal data, please contact us via the contact details at the top of this privacy and cookie statement. We address any questions and complaints internally and communicate this further with you. If you feel that we are not helping you in the right way, you have the right to file a complaint with the supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens.