RopinHealth is part of Ropinhome and processes your data as a data controller within the meaning of the GDPR. If you have any questions about this page or about how we handle your data, please use the RopinHealth contact form. We take the protection of your data seriously, particularly as a coaching programme such as this often involves sensitive, health-related information.

When you register for RopinHealth, we collect: your username and email address (via your Ropinhome account), date of birth, gender (optional), and your reason for registering. Whilst using RopinHealth, we collect the following, depending on what you enter yourself: • Body measurements: height, weight (history), body measurements (waist, hips, arms, legs), body fat percentage and muscle mass, if entered • Goals: target weight, target date, daily calorie and macro targets • Progress photos that you upload yourself • Nutrition and activity logs (calorie intake, steps, workouts) • Habits you track and daily check-ins (e.g. sleep quality, stress levels) • Messages and notes exchanged with your coach • Any Second Opinion requests, including their content and any attachments • Technical data such as IP address and login times, for security purposes We only collect what is necessary to provide you with effective support. Entering most health data (measurements, photos, additional notes) is always optional — except for what is strictly necessary to provide the service.

Health data (such as weight, body measurements and progress photos) fall under a special category of personal data within the GDPR. We process this data solely on the basis of your explicit consent, which you give when you sign up for the Weight Loss Programme and agree to this privacy policy. We process other data (account details, technical logs) on the basis of the performance of the contract that comes into effect as soon as you activate a RopinHealth account, and on the basis of our legitimate interest in maintaining a secure and properly functioning platform. You may withdraw your consent to the processing of health data at any time by cancelling your RopinHealth account. This does not affect the lawfulness of the processing prior to the withdrawal.

We adhere strictly to the ‘need-to-know’ principle: each person only has access to the exact data required for their role. • You: all your own data, at all times. • Your assigned coach: your progress, measurements, photos, messages and notes — only for as long as this coach is assigned to you. If you change coaches, the previous coach loses access. • Other coaches: no access to your data, with one specific exception: if you request a Second Opinion yourself (see point 5). • Administrators: can view data for management and support purposes, and to comply with legal obligations (including the GDPR itself). Any export or deletion of data by an administrator is automatically recorded in a secure audit log. • Third parties: we never sell your data to third parties. Data is only shared with a third party if this is necessary for the technical operation of the service (such as our hosting provider) or if we are legally obliged to do so.

When you request a Second Opinion, your request is submitted anonymously to other coaches. This is technically enforced, not just a promise: • The responding coach will never see your name, username, email address, profile picture or who your current coach is. • The coach will only see what you have explicitly ticked to share: your age (if known), gender, goal, weight/measurements and/or progress photos — all of which are optional and can be selected by you again for each request. • Progress photos that you share as part of a Second Opinion are copied to a separate, anonymous storage location with a random filename — never a reference to your original file. • Your current coach will only receive a notification that a Second Opinion is in progress, without any details of its content. • Each coach may only respond once and will never see the responses from other coaches. • Upon completion (once you have made your choice), the file remains available to administrators for a further 7 days, solely for verification and evidence purposes. After that, the entire file, including any attachments, is automatically and irreversibly destroyed.

Progress photos are voluntary and are only uploaded on your own initiative. They can never be accessed directly via a public link: every view is routed through a secure script which checks again with every request whether the person viewing them is authorised to do so (yourself or your current coach, and temporarily a specific coach if you share them as part of a Second Opinion). You can request that your photos be removed at any time by getting in touch, or by closing your account.

We do not retain data for longer than is necessary: • Regular progress data (weight, measurements, photos, messages, notes, diet/activity): for as long as you have an active RopinHealth account. • Second Opinion files: these are retained for a further 7 days after completion for administrative checks, and are then automatically and permanently destroyed — this process is fully automated, with no manual intervention. • Audit logs of GDPR exports and deletions carried out by administrators: these do not contain the content of your data, only the fact that an action took place, and are retained as legal evidence of compliance. • Following the cancellation of your account: your personal RopinHealth data will be deleted or irreversibly anonymised. Your basic account on Ropinhome itself (if you continue to use it) is subject to the separate Ropinhome privacy policy.

• Passwords are never stored in plain text, only as an irreversible hash (bcrypt). • Progress photos and documents can never be accessed directly via the internet — every request is processed via a secure script with a verification check for each request. • The connection to RopinHealth is secured via HTTPS. • Every action an administrator performs on your data (viewing, exporting, deleting) is recorded in a secure audit log, including the date, time and IP address of the administrator carrying out the action. • Access to data is technically restricted to what a person needs for their role (see point 4) — this is enforced within the software itself, not merely through internal agreements. • Second Opinion requests are technically anonymised at database level; see point 5.

As a data subject, you have the following rights, which you can exercise via the contact form or via your account settings: • Right of access: you can request a full overview of your stored data. • Right to rectification: have incorrect data corrected — you can also always amend most data yourself directly in your settings. • Right to erasure (‘right to be forgotten’): you can request that all your personal data be deleted. Following a verified request, your RopinHealth data will be permanently deleted and your account data irreversibly anonymised. • Right to restriction of processing: you can ask for processing to be temporarily paused, for example during a dispute regarding the accuracy of data. • Right to data portability: you will receive your data in a readable, structured format (PDF) that you can keep or take with you. • Right to object: you may object to a specific form of processing. We will respond to every request within the statutory period of four weeks. If you do not agree with how we have handled your request, you have the right to lodge a complaint with the Dutch Data Protection Authority.

RopinHealth uses only functional session cookies to keep you logged in. We do not use tracking cookies, advertising cookies or third-party cookies. As soon as you log out or your session expires, this cookie becomes invalid.

We may amend this privacy policy from time to time, for example when we add a feature that processes different types of data. The date of the last amendment is shown at the top of this page. In the event of a significant change to the way we handle your health data, we will inform active members of this separately.

Do you have a question about this page, would you like to exercise one of your GDPR rights, or do you have a complaint about how we handle your data? Please get in touch via the RopinHealth contact form. We will respond as soon as possible, and within four weeks at the latest to formal GDPR requests.