1. Who We Are
B-Sthenos ASBL is a non-profit calisthenics and street workout association based in Brussels, Belgium.
Contact: Info@bsthenos.com | +32 483 701 396 | Rue Borrens 51, Ixelles
2. What Data We Collect
We collect and process the following personal data:
General membership data:
Full name, date of birth, nationality
Email address and phone number
Profile photo
Membership number and payment history
CaliPass system data:
Calisthenics progression ranks achieved (Λ to ΛΛΛΛΛ)
Skills validated by certified coaches, including date, coach name and club
Attendance history
Sports federation affiliation and license number
Sports insurance information
Validation transaction history
Pass Amateur, Pass Pro, Pass Freestyle and Diploma status
Public profile data (only if activated by you):
Name, photo, ranks achieved, validating coach and club, federation affiliation, sports insurance status
3. Why We Collect Your Data
We process your data for the following purposes:
Managing your club membership and training sessions
Tracking and validating your CaliPass progression
Issuing digital certificates and diplomas
Processing payments for sessions and validations
Generating your public athlete profile and QR code (with your consent)
Communicating with you about sessions, events and club news
Complying with our legal obligations as a registered ASBL
4. Legal Basis (GDPR)
We process your data based on:
Your explicit consent (Art. 6.1.a GDPR) — for public profile, marketing communications and CaliPass data sharing
Contract performance (Art. 6.1.b GDPR) — for membership management and session booking
Legal obligation (Art. 6.1.c GDPR) — for financial and accounting records
Legitimate interest (Art. 6.1.f GDPR) — for club security and fraud prevention
5. Who We Share Your Data With
Your data may be shared with:
Supabase (database hosting, servers located in Europe, GDPR compliant)
Stripe (payment processing, PCI-DSS certified)
Brevo (email communications, GDPR compliant)
Belgian Calisthenics Federation (BCF) — only your federation data, with your consent
ICSWF (International Calisthenics & Street Workout Federation) — only for diploma validation, with your consent
Accredited coaches and clubs — only the progression data relevant to your validation request
We never sell your data to third parties.
6. Your Public Profile and QR Code
Your public athlete profile is disabled by default. You must explicitly activate it in your account settings.
Once activated, the following information becomes publicly visible via your unique URL and QR code:
Your name and photo
Ranks and skills achieved
Coach and club that validated each rank
Federation affiliation
Sports insurance status (valid/not valid, no sensitive details)
You can deactivate your public profile at any time from your account settings. Deactivation takes effect immediately.
7. CaliPass Financial Transparency
Every validation transaction processed through the CaliPass system includes:
A 1% fee returned to the originating club
A 10% contribution to the Espoir Scholarship Fund
These percentages are displayed in real time on every transaction. The Espoir Fund total is publicly visible on our platform.
8. How Long We Keep Your Data
Active membership data: for the duration of your membership
CaliPass progression records: for the duration of your membership plus 3 years
Financial transaction records: 7 years (Belgian legal requirement)
Public profile data: until you deactivate your profile or request deletion
Marketing data: until you withdraw consent
9. Your Rights
Under the GDPR, you have the right to:
Access — request a copy of all data we hold about you
Rectification — correct any inaccurate data
Erasure — request deletion of your data (“right to be forgotten”)
Portability — receive your data in a structured, machine-readable format
Restriction — request that we limit how we process your data
Objection — object to processing based on legitimate interest
Withdraw consent — at any time, without affecting previous processing
To exercise any of these rights, contact us at: Info@bsthenos.com
We will respond within 30 days.
10. Data Security
We protect your data using:
Encrypted connections (SSL/HTTPS) across all our platforms
Secure database hosting with access controls (Supabase)
Regular security audits via Really Simple Security plugin
Automatic backups via UpdraftPlus
Two-factor authentication for administrative access
11. Cookies
We use cookies to manage your session, remember your preferences and analyse site traffic. You can manage your cookie preferences at any time via our cookie consent tool (Complianz) visible at the bottom of our website.
For full details see our Cookie Policy.
12. Complaints
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Belgian Data Protection Authority:
Autorité de Protection des Données (APD)
www.autoriteprotectiondonnees.be
contact@apd-gba.be
+32 2 274 48 00
13. Changes to This Policy
We may update this policy as our systems evolve. We will notify you by email of any significant changes. The current version is always available at bsthenos.com/privacy-policy