Privacy statement

Last updated: October 2026

Your privacy is important to me. This privacy statement explains how I collect, use and protect personal information when you visit this website, submit an application or contact me.

1. Who I am

Lenny Macnack is responsible for the processing of personal data as described in this privacy statement.

Lenny Macnack
The Netherlands

Email: info@lennymacnack.com

For questions about this privacy statement or the use of your personal information, you can contact me using the email address above.

2. Personal information I collect

I may collect personal information when you use this website, contact me or complete an application form.

Depending on how you use the website, this may include:

• Full name
• Age
• Email address
• Telephone number
• Country and place of residence
• Current football club and playing level
• Playing position on the field
• Information about your sporting background, ambitions and development
• Information you voluntarily provide through an application or contact form

I only collect information that is relevant to the purpose for which it is requested.

3. Application forms

If you apply for private coaching or another service through the website, I may ask you to provide additional information about your current situation, sporting background, goals and expectations.

This information is used to assess your application and determine whether the coaching or services I offer suit your situation and goals.

Submitting an application does not automatically result in an agreement and does not guarantee acceptance.

If an application is submitted on behalf of a player by a parent, agent or club representative, I may also process information about the person submitting the application.

Certain information requested in the application form is required in order for me to assess your application and determine whether my services are suitable for you. If you do not provide the required information, I may not be able to assess or process your application.

4. Why I use your personal information

I process your personal data only when this is necessary for a clearly defined purpose and when there is a valid legal basis for doing so.

I may process your personal data for the following purposes:

Responding to questions and requests
When you contact me, I process your contact details and the information you provide in order to respond to your question or request.

Legal basis: my legitimate interest in responding to enquiries from potential clients or, where your request relates to entering into an agreement, taking steps at your request prior to entering into a contract.

Assessing and processing applications for coaching or other services
When you submit an application through my website, I use the information you provide to assess whether my services are suitable for your situation and to contact you about a potential coaching programme or other service.

Legal basis: taking steps at your request prior to entering into a contract.

Providing coaching and other agreed services
When you become a client, I process the personal data necessary to provide the agreed services, schedule appointments, maintain contact and support you throughout the programme.

Legal basis: performance of a contract.

Managing my client relationships
I may use personal data to communicate with existing clients about their programme, appointments, services and related practical matters.

Legal basis: performance of a contract and, where applicable, my legitimate interest in effectively managing my services and client relationships.

Analysing and improving my website and services
I may process information about how my website is used, such as pages visited, technical information and anonymised or pseudonymised visitor statistics. I use this information to understand how my website is used and to improve its usability and performance.

Where non-essential cookies or similar technologies are used for this purpose, I will ask for your consent in advance.

Legal basis: consent where this is required by law. For strictly necessary technical data or analytics with no or only limited impact on privacy, my legitimate interest in maintaining and improving a properly functioning website may apply where permitted by law.

Securing and ensuring the proper technical functioning of my website
I may process technical data to prevent, detect and resolve misuse, fraud, unauthorised access, technical failures and security incidents.

Legal basis: my legitimate interest in protecting my website, systems and personal data against misuse, unauthorised access and security incidents. I only process data that is necessary for this purpose and balance this interest against your privacy rights and interests.

Maintaining my administration and complying with legal obligations
I process certain personal data, such as invoice and payment information, in order to maintain my financial administration and comply with applicable legal and tax obligations.

Legal basis: compliance with a legal obligation, including applicable statutory tax retention requirements.

I do not make decisions about individuals that are based solely on automated processing, including profiling, and that produce legal effects or similarly significantly affect them.

Where I process personal data on the basis of a legitimate interest, I first assess whether the processing is necessary for that interest and whether your privacy interests and fundamental rights override my interests.

Where I process personal data on the basis of your consent, you may withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out before your consent was withdrawn.

5. Information relating to minors

Some of my services may involve young athletes. I therefore take extra care when processing the personal data of minors.

When I process personal data on the basis of consent and the player is under the age of 16, I ask for consent from the parent who has parental responsibility or from the legal guardian. I take appropriate measures to verify that this consent has actually been given by the parent or legal guardian.

From the age of 16, a young person may, in principle, give consent to the processing of their own personal data. However, this does not automatically mean that a minor may independently enter into a coaching agreement. Whether the consent or involvement of a parent or legal representative is required for this will be assessed separately in accordance with the applicable rules on entering into agreements with minors.

When an application is submitted on behalf of a minor by a parent, legal guardian, representative, agent or club representative, I may also process personal data relating to the person submitting the application. I use this information only insofar as it is necessary to assess the application, communicate about it and, where applicable, provide my services.

I limit the processing of minors’ personal data to information that is genuinely necessary for the application, communication and provision of my services. I take the player’s age into account and pay particular attention to protecting their privacy.

6. How long I keep your information

I do not retain personal data for longer than necessary for the purpose for which it was collected, unless I am legally required to keep it for a longer period.

Applications that do not result in a coaching programme
If an application does not result in an agreement, I retain the information submitted as part of the application for a maximum of 6 months after the application has been concluded. I use this period to respond to any follow-up questions and to complete the application process administratively. After this period, the data will be deleted or, where appropriate, anonymised.

Data relating to coaching clients
When a coaching programme is agreed, I retain the personal data necessary to provide the coaching services for the duration of the agreement. After the coaching programme has ended, I retain relevant coaching and communication data for a maximum of 2 years, insofar as this is necessary to respond to follow-up questions, evaluate my services or follow up on agreements made during the programme.

Data that is no longer necessary after this period will be deleted or anonymised, unless I have a legal reason to retain it for longer.

Invoices and tax records
Information that forms part of my financial and tax administration, such as invoices, payment details and information required for my accounting records, is retained for the legally required retention period. For Dutch tax records, this is generally 7 years.

This 7-year retention period does not automatically apply to the entire coaching file. Only information that must be retained in order to comply with tax or other legal obligations will be kept for this statutory period.

Where no fixed retention period can be determined
For certain personal data, it may not always be possible to determine an exact retention period in advance. In such cases, I determine the retention period based on factors including:

• the purpose for which the data was collected;
• the duration of my relationship with the individual;
• the need to retain information for follow-up questions or agreements;
• applicable legal obligations;
• possible legal claims or disputes.

When personal data is no longer necessary for the purpose for which it was collected and there is no legal reason to retain it, the data will be deleted or, where appropriate, anonymised.

7. Sharing personal data

I do not sell your personal data.

I only share personal data with third parties where this is necessary for the operation of my website, the provision of my services, or compliance with legal obligations.

Depending on the services I use, personal data may for example be shared with:

• Website and hosting providers
• Email and communication providers
• Professional advisers and administrative service providers, such as an accountant or bookkeeper, where necessary

I only share personal data with parties that need this information in order to provide services to me.

Where service providers process personal data on my behalf, I enter into a data processing agreement with them. This agreement sets out arrangements regarding matters such as security, confidentiality, the use of personal data and the obligations that apply under the GDPR.

I provide personal data to competent authorities where I am legally required to do so. Before disclosing any information, I verify whether the request has a valid legal basis. I only provide the personal data that is necessary for that purpose.

8. International data transfers

My website is hosted in the Netherlands. The hosting of the website therefore takes place within the European Economic Area (EEA).

I use Google Tag Manager to manage tags and scripts on my website and Google Analytics 4 to analyse how visitors use my website. These services are provided by Google.

When using Google services, certain personal data or technical information may be processed outside the EEA.

Where personal data is transferred outside the EEA, such transfers will only take place where an appropriate legal basis for the transfer is available. This may include an adequacy decision by the European Commission or the use of the European Commission’s Standard Contractual Clauses (SCCs).

Where required, additional technical and organisational measures are taken to protect personal data.

Google Analytics is only used in accordance with the visitor’s cookie and consent preferences where consent is legally required.

9. Cookies and statistics

My website uses cookies and similar technologies to ensure that the website functions properly and to gain insight into how visitors use the website.

I distinguish between different types of cookies:

Necessary cookies
These cookies are required for the technical operation, security and basic functionality of the website. Consent is not required for these cookies.

Analytics cookies
I use Google Analytics 4 to gain insight into how visitors use my website, for example which pages are visited and how visitors navigate through the website.

Depending on how these cookies are configured, analytics cookies that have no or only a limited impact on your privacy may not require prior consent. Where consent is required under applicable law, these cookies will only be placed after you have given your consent.

Tracking and marketing cookies
If I use tracking or marketing cookies, these will only be placed after you have given your prior consent. These cookies may, for example, be used to track visitors across different websites or to tailor advertising to their interests.

Cookies that require consent are not placed before you have given your consent.

You can refuse the use of non-essential cookies through my cookie settings. If you have previously given consent, you can withdraw your consent at any time or change your preferences through the cookie settings on my website.

More information about the cookies and similar technologies I use, including the relevant providers, purposes and retention periods, can be found in my cookie settings and/or cookie policy.

10. Security

I take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

These measures may include, where applicable:

• the use of a secure HTTPS connection;
• restricting access to personal data to authorised persons only;
• the use of strong passwords and two-factor authentication where available;
• keeping my website, software and systems up to date;
• making regular backups;
• taking appropriate measures to prevent and detect unauthorised access or security incidents.

Although I take appropriate measures to protect personal data, no website, system or online transmission can be guaranteed to be completely secure.

If you suspect misuse of personal data or identify a security issue relating to my website or services, please contact me at info@lennymacnack.com.

11. Your privacy rights

Under applicable data protection law, including the General Data Protection Regulation (GDPR), you have the privacy rights listed below. Certain rights are subject to legal conditions and exceptions.

Certain rights are subject to legal conditions and exceptions.

• You have the right to access your personal data and receive information about how I process it.

• You have the right to have inaccurate or incomplete personal data corrected or completed.

• You may request the deletion of your personal data, provided that the applicable legal conditions are met.

• You may request that the processing of your personal data be restricted in certain circumstances.

• You may object to certain types of processing, including processing based on my legitimate interests.

• Where the processing of your personal data is based on consent, you may withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

• You may request that your personal data be provided to you or, where technically feasible, transferred directly to another organisation, insofar as the right to data portability applies.

You can exercise these rights by contacting me at info@lennymacnack.com.

I may ask you to provide additional information to verify your identity where this is necessary to ensure that personal data is not disclosed to an unauthorised person.

I will generally handle your request free of charge and within one month of receiving it. Where necessary due to the complexity or number of requests, this period may be extended by a maximum of two additional months. If I extend the response period, I will inform you within the first month and explain the reason for the extension.

You also have the right to lodge a complaint with the relevant data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

12. Third-party websites

This website may contain links to websites or services provided by third parties.

When you leave my website through such a link, the privacy policy of the relevant third party applies. I have no control over the content, privacy practices or privacy policies of these external websites or services.

I therefore recommend that you review the privacy policy of the relevant third party before providing any personal data.

This section applies to external links only. Where third-party services, videos, social media content or other external content are embedded directly on my website, the processing of personal data through those services is described separately in the relevant sections of this privacy statement and, where applicable, in my cookie settings or cookie policy.

13. Changes to this privacy statement

I update this privacy statement whenever my website, services, processing of personal data or legal obligations change.

The current version of this privacy statement is available on this page. The date on which this privacy statement was last updated is shown at the top of the page.

If I make significant changes that may affect your privacy, I will inform you actively and in a timely manner, for example by email or through a clear notice on my website. I will explain what is changing and what this means for you.

Where renewed consent is required, I will obtain your consent before the updated processing begins.

14. Contact

If you have questions about this privacy statement or the way your personal information is processed, please contact me:

Lenny Macnack
Email: info@lennymacnack.com
Phone: +31 6 24 77 26 21