Privacy Policy

Privacy Policy

Last updated: 24 October 2026

At The Changing Room, your privacy matters.

My work is built around creating spaces where people can feel safe to show up as they are. The same care applies to the personal information you choose to share with me.

This Privacy Policy explains how The Changing Room collects, uses, stores and protects your personal data in accordance with Regulation (EU) 2016/679 – the General Data Protection Regulation (GDPR), known in the Netherlands as the Algemene verordening gegevensbescherming (AVG), as well as applicable Dutch data protection legislation, including the Uitvoeringswet Algemene verordening gegevensbescherming (UAVG).

It also explains why your information may be collected, the legal basis on which it is processed, how long it may be retained, with whom it may be shared, and what rights you have regarding your personal information.

1. About The Changing Room

The Changing Room is the brand under which Anita Puskas Breathwork, a business registered in the Netherlands, offers its services.

For the purposes of this Privacy Policy and applicable data protection legislation, Anita Puskas Breathwork is the legal entity responsible for the processing of your personal data (the data controller).

Throughout this Privacy Policy, the name “The Changing Room” is used to refer to Anita Puskas Breathwork and the services offered under The Changing Room brand, unless otherwise stated.

Official business name: Anita Puskas Breathwork
Brand name: The Changing Room
Owner: Anita Répási-Puskás
Registered in: The Netherlands
Chamber of Commerce (KvK) number: 97121282
Business address: Veldmaarschalk Montgomerylaan 573, 5612 BM Eindhoven
Email: anita.puskas.breathwork@gmail.com
Website: thechangingroom.nl

For questions about this Privacy Policy or about how your personal data is handled, you can contact me using the email address above.

2. What personal data do I collect?

The information I collect depends on how you interact with The Changing Room and which services you use.

Contact information

This may include:

  • your name;

  • email address;

  • telephone number;

  • information you provide when contacting me, making an enquiry, booking a session or registering for an event.

Booking and payment information

This may include:

  • services, sessions, workshops or events you book;

  • booking history;

  • payment and invoicing information;

  • billing address where applicable.

I do not normally receive or store your complete bank or card details when payments are processed through an external payment provider.

Information related to sessions, workshops and events

When you participate in BBTRS®, Contact Beyond Contact, retreats or other offerings, I may ask you to provide information that helps me facilitate the experience safely and appropriately.

Depending on the offering, this may include:

  • information provided through an intake form;

  • relevant physical or mental health information;

  • injuries, pregnancy or medical conditions relevant to participation;

  • medications or other information relevant to contraindications;

  • emergency contact information;

  • information you voluntarily share with me before, during or after our work together.

I aim to collect only information that is relevant and reasonably necessary for the particular service or experience.

Health information and special-category data

Some information requested through intake forms may constitute data concerning health and therefore special-category personal data under Article 9 of the GDPR.

Special-category personal data receives additional protection under European and Dutch data protection law.

Where I process health-related information on the basis of consent, I ask for your explicit consent in accordance with Article 9(2)(a) GDPR.

This information is collected only where relevant for purposes such as assessing contraindications, understanding whether participation in a particular offering may be appropriate, and supporting your safe participation in sessions, workshops or events.

Consent for processing health-related information is requested separately and clearly from other agreements, such as acceptance of general terms or a liability waiver.

You may withdraw your consent to the processing of your health-related information at any time by contacting me. Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.

Where particular health-related information is necessary for me to determine whether I can safely offer a service, choosing not to provide that information or withdrawing consent may mean that I am unable to offer that particular service.

Newsletter information

If you subscribe to The Changing Room newsletter, I may process your:

  • name;

  • email address;

  • subscription preferences;

  • information relating to your subscription and interaction with communications, where provided by the email platform.

You can unsubscribe at any time using the unsubscribe link included in each newsletter.

Website information

When you visit thechangingroom.nl, certain technical information may be collected automatically, depending on the cookies and services active on the website.

This may include:

  • IP address;

  • browser and device information;

  • pages visited;

  • date and time of visits;

  • cookie and similar technology information.

3. Why do I process your personal data?

I may process your personal data in order to:

  • respond to enquiries;

  • arrange discovery calls, sessions and appointments;

  • manage bookings and event registrations;

  • provide services you have booked;

  • communicate with you before and after sessions, workshops or events;

  • assess relevant contraindications and support safe participation;

  • process payments and issue invoices;

  • maintain business and financial administration;

  • send newsletters and updates where you have chosen to receive them;

  • operate and improve the website and services;

  • comply with legal and tax obligations;

  • protect legitimate business interests and, where necessary, establish or defend legal claims.

I do not use your personal information for automated decision-making that produces legal or similarly significant effects.

4. Legal bases for processing

In accordance with Article 6 GDPR, I only process personal data where there is an appropriate legal basis for doing so.

Depending on the situation, this may include:

Performance of a contract

Where processing is necessary to provide a session, workshop, retreat or another service you have requested or purchased, or to take steps at your request before entering into such an agreement.

Consent

Where you have freely and specifically agreed to a particular use of your personal data, for example where consent is an appropriate basis for receiving marketing communications.

Legal obligation

Where processing is necessary for me to comply with legal obligations, such as maintaining required financial and tax administration.

Legitimate interests

Where processing is reasonably necessary for operating, improving or protecting The Changing Room, provided that these interests do not override your fundamental privacy rights and freedoms.

Special-category data

Health information receives additional protection under the GDPR.

Where I rely on consent to process health-related information, I do so on the basis of your explicit consent under Article 9(2)(a) GDPR, in addition to having an appropriate lawful basis under Article 6 GDPR.

Where processing is based on consent, you may withdraw your consent at any time.

5. Explicit consent for health information

Where an intake form asks you to provide health-related information, you may be asked to provide explicit consent separately from other agreements.

The consent may be presented as follows:

☐ I explicitly consent to The Changing Room processing the health-related information I provide for the purpose of assessing relevant contraindications and supporting my safe participation in the service, session, workshop or event. I understand that this information constitutes special-category personal data under Article 9 GDPR and that I may withdraw my consent at any time.

This consent is separate from agreeing to participate in a service, accepting general terms and conditions, or signing a liability waiver.

6. Information shared during our work

The nature of somatic, breathwork and embodiment practices means that you may sometimes choose to share personal or sensitive experiences with me.

I treat the information you share with care and respect and aim to collect or retain only information that is reasonably necessary for providing my services.

I do not sell your personal information or use the personal content of your sessions for marketing purposes.

If I would like to use a testimonial, personal story, photograph, video or other material through which you can be identified, I will seek appropriate permission separately where required.

Participating in a session, workshop or event does not automatically mean that you consent to your image, story or personal experiences being used publicly.

7. Photos and videos at events

From time to time, photographs or videos may be taken during workshops, retreats or community events.

Where participants are recognisable, I handle this material in accordance with applicable privacy rules and seek consent where required before identifiable material is used for promotional or marketing purposes.

You are always welcome to tell me that you do not want to be photographed or filmed.

Where possible, I may also capture material in ways that do not identify participants, such as photographs of the space, movement details or images in which faces and other identifying characteristics are not visible.

8. Who may receive your data?

I do not sell your personal information.

To operate The Changing Room, I use trusted external service providers. Depending on how you interact with the business, these may include providers for:

  • website hosting and website functionality;

  • email and newsletter services;

  • event registration and booking;

  • payment processing;

  • accounting and invoicing;

  • online meetings or video calls;

  • cloud storage and email;

  • forms and questionnaires;

  • website analytics.

Services used by The Changing Room may include, where applicable, Squarespace, Flodesk, Hipsy, Meetup and e-Boekhouden, as well as other service providers necessary for operating the business.

Some providers act as processors on behalf of The Changing Room, while others may process personal data as independent controllers according to their own privacy policies and legal obligations.

Where personal data is transferred outside the European Economic Area (EEA), I aim to use service providers that provide an appropriate legal mechanism or safeguard for international data transfers as required under the GDPR.

9. How long do I keep your information?

I do not keep personal information longer than reasonably necessary for the purpose for which it was collected, unless I am legally required to retain it for longer.

In general:

  • enquiries that do not result in a working relationship are deleted when they are no longer reasonably needed;

  • newsletter information is kept until you unsubscribe or I otherwise remove you from the mailing list;

  • booking and client administration is kept only as long as reasonably necessary for providing the service and managing the business;

  • intake forms and health-related information are periodically reviewed and deleted when they are no longer necessary for the purpose for which they were collected, subject to any legitimate or legal need to retain particular information;

  • invoices and information forming part of my financial administration are generally retained for 7 years in accordance with applicable Dutch tax and administration requirements.

Where information is no longer required, I delete or anonymise it where reasonably possible.

10. How do I protect your information?

I take appropriate technical and organisational measures to protect personal information against accidental loss, unauthorised access, alteration, disclosure or misuse.

This includes aiming to:

  • collect only the information I reasonably need;

  • limit access to personal and sensitive information;

  • use reputable service providers;

  • protect accounts and systems used to store personal information;

  • handle sensitive and health-related information with additional care.

No online or electronic system can be guaranteed to be completely secure, but I take reasonable measures appropriate to the nature and sensitivity of the information being processed.

11. Cookies

The Changing Room website may use cookies and similar technologies.

Some cookies are necessary for the website to function. Others may be used to understand how visitors use the website or may be placed by third-party services.

Where consent is legally required for a particular type of cookie or tracking technology, it will only be used after you have been given the opportunity to make a choice.

Where available, you can manage your preferences through the cookie settings on the website. You can also manage cookies through your browser settings.

12. Your privacy rights

Under the GDPR, depending on the circumstances, you may have the right to:

  • receive information about how your personal data is processed;

  • request access to your personal data;

  • request correction of inaccurate or incomplete information;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to certain processing;

  • receive certain personal data in a portable format;

  • withdraw consent at any time where processing is based on consent.

If you would like to exercise any of these rights, please contact me at anita.puskas.breathwork@gmail.com.

I may need to verify your identity before responding to a request in order to ensure that personal information is not disclosed to the wrong person.

Withdrawing consent does not affect the lawfulness of processing that took place before the consent was withdrawn.

13. Complaints

If you have concerns about how your personal information is being handled, I invite you to contact me first so that I can understand and address your concern.

You also have the right to submit a complaint to the Dutch supervisory authority, the Autoriteit Persoonsgegevens (AP), if you believe that your personal data has been processed in violation of applicable data protection law.

14. Third-party websites and platforms

My website or communications may contain links to external websites, social media platforms, booking platforms or other services.

These third parties may process your personal information according to their own privacy policies and practices.

The Changing Room is not responsible for the privacy practices of independent third parties. I encourage you to review the privacy information of services you choose to use.

15. Changes to this Privacy Policy

I may update this Privacy Policy from time to time, for example when my services, systems, third-party providers or legal obligations change.

The most recent version will be made available through The Changing Room website. The date at the top of this Privacy Policy indicates when it was last updated.

16. Contact and questions

If you have any questions about this Privacy Policy, how your personal data is handled, or if you would like to exercise any of your privacy rights, you are always welcome to get in touch.

The Changing Room
Operated by Anita Puskas Breathwork
Owner: Anita Répási-Puskás
Email: anita.puskas.breathwork@gmail.com
Business address: Veldmaarschalk Montgomerylaan 573, 5612 BM Eindhoven
KvK: 97121282
Website: thechangingroom.nl

Your privacy is part of the trust you place in me when you enter a space offered by The Changing Room. I aim to handle the information you share with the same care, respect and consideration that I bring to the work itself.

Thank you for your trust.