Privacybeleid.

This is the Privacy Policy of Clubsportive B.V. located at Gustav Mahlerlaan 1082 MC Amsterdam. Clubsportive B.V places great value on your privacy and the protection of your personal data. In this Privacy Policy we want to provide clear and transparent information about how we handle personal data.

We make every effort to guarantee your privacy and therefore handle personal data with care. Clubsportive B.V. adheres to applicable laws and regulations in all cases, including the General Data Protection Regulation. This implies that we at least:

• Processing your personal data in accordance with the purpose for which they were provided, these goals and type of personal data are described in this Privacy Policy;

• Processing of your personal data is limited to only those data that are minimally required for the purposes for which they are processed;

• Ask for your express consent if we need it for the processing of your personal data;

• Have taken appropriate technical and organizational measures to ensure the security of your personal data;

• Not to pass on personal data to other parties, unless this is necessary for carrying out the purposes for which they were provided;

• To be aware of your rights regarding your personal data, to point this out and to respect them.

As Clubsportive B.V. we are responsible for the processing of your personal data. Clubsportive B.V. reserves the right to change this privacy policy at any time. The most up-to-date is always on our website. We therefore advise you to visit this page with some regularity.

If, after reading our Privacy Policy, or in a more general sense, you have questions about this or wish to contact us, you can do so using the contact details at the bottom of this document.

Personal details of newsletter subscribers are published by Clubsportive B.V. processed for the following purpose (s):

• Informing the person by means of news.

The basis for this personal information is:

• The registration form Newsletter;

• Taking out a membership

For the above objective (s) Clubsportive B.V. the following personal details of your questions:

• First Name;

• Insertion;

• Last name;

• E-mail address.

Your personal data are collected by Clubsportive B.V. stored for the above processing (s) for the period:

During the period that one is registered.

Personal details of members, customers or suppliers are provided by Clubsportive B.V. processed for the following purpose (s):

• Administrative purpose;

• Automatic collection;

• Communication about the assignment and / or invitations;

• Implementing or issuing an assignment;

• Implementing the treatment agreement;

• Reserving group lessons;

• The use of the Clubsportive app;

• Contact moments with Clubsportive.

The basis for this personal information is:

• The agreed assignment;

• The agreed membership;

• Apply for a day pass;

• Collection orders;

• Email, telephone, Web chat, Social media channels or other ways

For the above objective (s) Clubsportive B.V. request the following personal data from you:

• First Name;

• Insertion;

• Last name;

• (Business) Phone number;

• (Business) email address;

• Date of birth;

• Photo;

• Sex;

• IBAN bank account.

Your personal details are provided by Clubsportive B.V. stored for the above processing (s) for the period:

• During the term of the agreement and / or membership and then only in the financial administration for a maximum of 7 years.

Personal details of prospect and / or interested parties are provided by Clubsportive B.V. processed for the following purpose (s):

• Provision of information in the form of newsletters and / or targeted contacts.

The basis for this personal information is:

• Oral permission, digital request for information;

• Issuing business card;

• Contact form website;

• via link via social among others. on LinkedIn, Facebook, instagram.

For the above objective (s) Clubsportive B.V. the following personal details of your questions:

• First Name;

• Insertion;

• Last name;

• Phone number;

• E-mail address.

Your personal data are collected by Clubsportive B.V. stored for the above processing (s) for the period:

• During the period that one is seen as a prospect, and / or interested.

We may provide the data that you give to us to third parties if this is necessary for the execution of the above described purposes.

For example, we use a third party for:

• Taking care of the internet environment of the AVG program;

• Taking care of the (financial) administration;

• Taking care of the group lesson reservation via the app;

• Taking care of newsletters and invitations.

We never pass on personal data to other parties with whom we have not entered into a processor agreement. With these parties (processors), we of course make the necessary arrangements to ensure the security of your personal data. Furthermore, we will not provide the information provided by you to other parties, unless this is legally required and permitted. An example of this is that the police request us (personal) data in the context of an investigation. In such a case we must cooperate and are therefore obliged to provide this information. We may also share personal data with third parties if you give us permission in writing.

Processing of personal data within ‘Urban Gym Group’

Urban Gym Group is the parent company, which owns the labels TrainMore, Clubsportive and BTY CLB. For certain purposes we may share your personal data within the Urban Gym Group. This may be for administrative purposes, improvement of services and internal management (internal analyses).

Camera surveillance

At the request of parent company ‘Urban Gym Group’, Clubsportive uses camera surveillance. The purposes and means for such camera use as set out below are determined by Urban Gym Group (the controller) and Clubsportive acts upon its instructions in accordance with the processing agreement entered into between the parties.

Camera surveillance (where needed live) is used for the purposes of:

• Access control of clubs of Clubsportive;

• surveillance and security of goods and persons present in Clubsportive sports clubs;

• prevention and recording of nuisances, such as vandalism and violence towards individuals.

No personal data is processed other than:

• camera images of the buildings and grounds and the persons and property located therein and thereon, over which Clubsportive’s care extends;

• data relating to the time, date and place that the camera images were taken.

No hidden cameras are used.

Clubsportive is transparent about the use of cameras. Where cameras are used, this is made known, for example through stickers, signs, etc.

There are no cameras in the locker rooms and restrooms.

Implementation of camera surveillance:

• Camera surveillance is implemented in practice by the control room and staff at the location of the relevant Clubsportive branch. Occasionally, a third party is engaged to capture or monitor camera images, for example, by external control rooms when monitoring clubs that are temporarily unmanned. Urban Gym Group and the Clubsportive control room remain ultimately responsible for the implementation of camera surveillance at all times.

• Camera images will be retained for a maximum of 30 days, unless longer when necessary to deal with an identified incident.

• The control room has taken adequate measures to protect against unauthorized access or misuse of stored camera images.

• Those authorized to review images are explicitly bound to confidentiality. Access to the images is password protected.

Inspection, copies, deletion or blocking of camera images.

• A detailed request by a data subject for inspection and copies of camera images including the day, time period and location concerned can be submitted to Urban Gym Group (via privacy@urbangymgroup.com)

• A request by a data subject to remove or block the camera images can be requested if the camera images are incomplete or irrelevant for the purpose of processing or are otherwise processed in violation of a legal requirement.

• The request may be refused if inspection would harm the privacy interests of other persons.

• Release of camera images: recorded camera footage will only be provided to an authorized government body when a lawful (in principle written) order has been received from the relevant government body to do so, or when another legal regulation requires Clubsportive to do so.

No inspection is provided to private parties, except when those parties are shown in the camera footage

Within the EU

We do not provide personal data to parties which are located outside the EU.

Minors

We only process personal data of minors (persons under 16 years of age) if written permission has been given by the parent, caregiver or legal representative.

Storage period

Clubsportive B.V. does not store personal data longer than necessary for the purpose for which it was provided or required by law.

Security

We have taken appropriate technical and organizational measures to protect your personal data against unlawful processing, for example we have taken the following measures;

• All persons acting on behalf of Clubsportive B.V. to be able to take note of your details, they are obliged to maintain their confidentiality.

• We use a username and password policy on all our systems;

• We pseudonymise and ensure the encryption of personal data if there is reason to do so;

• We make back-ups of the personal data in order to be able to recover these in case of physical or technical incidents;

• We regularly test and evaluate our measures;

• Our employees have been informed about the importance of the protection of personal data.

Website Clubsportive

We use cookies on the Clubsportive website. With these cookies we can show or send you information, offers and advertisements that suit you. You read what cookies are and how we use cookies in our cookie policy.

Rights concerning your data

You have the right to inspect, rectify or delete the personal data we have received from you. You can also object to the processing of your personal data (or a part thereof) by us or by one of our processors. You also have the right to have the information provided by you transferred by us to yourself or by order of yours directly to another party. We can ask you to identify you before we can respond to the aforementioned requests. May we process your personal data on the basis of a permission given by you, you always have the right to withdraw this permission.

Complaints

If you have a complaint about the processing of your personal data, we ask you to contact us directly. If we do not come together with you then we find this of course very annoying. You always have the right to file a complaint with the Dutch Data Protection Authority, this is the supervisory authority in the field of privacy protection.

If you have any questions or comments about our Privacy Statement please contact us!

Contact details Clubsportive B.V. Gustav Mahlerlaan 24 1082 MC Amsterdam www.clubsportive.nl/contact

Company name: Urban Gym Group B.V. Company address: Silodam 402, 1013AW Amsterdam Bestuurders: Neil Randall (CEO), Pascal Averdijk (CFO) Contact method: https://clubsportive.nl/contact/ or +31 20 661 78 08 KVK number: 73124370