This statement explains which personal data I process when you visit this website, get in touch, or work with me as a coaching client. It also explains why, for how long and what you can ask of me. Langeveld Coaching is based in the Netherlands, so the General Data Protection Regulation (GDPR, in Dutch: AVG) and Dutch law apply.
1. Who is responsible
The controller for your personal data is:
Langeveld Coaching
Gabriel Langeveld
Trompenburgstraat 135-3
1079 TW Amsterdam, the Netherlands
Chamber of Commerce (KvK): 42155610
Email: gabriel@langeveldcoaching.com
I run this practice on my own, so any question about your data comes to me directly.
2. What data I process
When you get in touch. Your name and email address, your phone number, organisation and role if you share them and whatever you tell me about your situation or question. Messages sent through the contact form reach me via my website host, Netlify, which keeps a copy until I delete it.
When we work together. Contact and billing details (including those of a sponsoring organisation, where one pays for the coaching), the agreements we make and my session notes. Notes are brief, kept for continuity between sessions and seen by me only. If an organisation arranges the coaching for you, I may receive your name, role and contact details from that organisation. I also keep the contact details of the people I deal with at a sponsoring organisation.
Sensitive subjects. A coaching conversation sometimes touches on health or other personal matters. I only write such things down when it is needed for our work and you have explicitly agreed. You can withdraw that consent at any time.
Recordings. I only record a session with your explicit consent, asked for beforehand. I use a recording only for my own professional development, for example for my ICF credential. I share it only with an ICF assessor or my mentor coach, who are bound to confidentiality.
Assessments. If we decide to use a psychometric assessment (such as IDI or Hogan), your answers are processed by the provider of that assessment. I will tell you beforehand which provider it is and ask for your consent.
When you visit this website. This site uses no cookies, no analytics and no tracking tools. Its fonts and images are stored on the site itself, so your visit is not passed on to third parties. The company hosting the website may keep standard server logs (such as IP address and time of visit) for a short period, for security and to keep the site running.
3. Why and on what legal basis
- To reply to your message and plan a first conversation: at your request, before entering into an agreement and my legitimate interest in responding to enquiries (Art. 6(1)(b) and (f) GDPR).
- To deliver the coaching we agreed on: performance of the agreement (Art. 6(1)(b) GDPR).
- To invoice and keep accounts: legal obligation (Art. 6(1)(c) GDPR).
- Contact details of people at a sponsoring organisation: my legitimate interest in carrying out the engagement with that organisation (Art. 6(1)(f) GDPR).
- Notes on health or other sensitive subjects, recordings and assessments: your explicit consent (Art. 6(1)(a) and 9(2)(a) GDPR).
- Server logs: legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
You never have to give me personal data. Without your contact details I can't reply to you, though. Without the details needed for the agreement and invoicing we can't work together. I use your data for these purposes only. I do not use it for advertising or profiling, I make no automated decisions about you and I never sell your data.
4. Confidentiality in coaching
What we discuss stays between us. I share nothing about the content of our conversations with anyone, including an employer or sponsor who pays for the coaching, unless you give explicit permission beforehand. Where a sponsor is involved, we agree in writing, before we start, what (if anything) is reported back, for example that sessions have taken place.
The only exceptions are a legal obligation to disclose, or a concrete risk of serious harm to you or others. This follows my coaching agreement and the ICF Code of Ethics.
Like most professional coaches, I sometimes reflect on my work with a supervisor or fellow coaches. I always do this anonymously, so you can't be identified.
5. Who else processes your data
I use a small number of service providers to run the practice:
- my email provider and Netlify, which hosts this website and delivers the contact form;
- the video-calling platform we agree on for online sessions;
- accounting software and, where applicable, my bookkeeper or accountant;
- assessment providers, only with your consent (see section 2).
Where these parties process data on my behalf, I have a data processing agreement with them or rely on their standard terms that meet GDPR requirements. I share data with others only with your consent or when the law requires it.
6. Data outside the European Economic Area
I aim to keep your data within the EEA. Some providers, such as Netlify and video-calling platforms, may process data in the United States or elsewhere. In that case the transfer relies on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or on the European Commission's Standard Contractual Clauses.
7. How long I keep it
- Messages that don't lead to working together: deleted within 12 months, including the copy at Netlify.
- Session notes: deleted no later than 2 years after our last session, or earlier if you ask.
- Recordings: deleted as soon as the purpose you agreed to is fulfilled and no later than 12 months after the session.
- Invoices and financial records: 7 years, as required by Dutch tax law.
- Server logs: kept by the hosting provider for a short period only.
8. Security
I take appropriate technical and organisational measures to protect your data, such as password-protected devices and accounts and secure storage of session notes.
9. Your rights
You may ask me to show you the data I hold about you, to correct or delete it, to restrict its use, or to send it to you or someone else in a usable format. You may also object to processing based on legitimate interest and withdraw consent at any time. Withdrawing consent doesn't affect what I did with your data before. An email to gabriel@langeveldcoaching.com is enough. I respond within one month, or let you know within that month if I need more time for a complex request.
If you feel I have handled your data incorrectly, please tell me first. You also have the right to file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
10. Changes
I may update this statement as the practice evolves. The current version is always on this page, with its date at the top.