Privacybeleid.

This privacy statement describes how we handle your personal data. We do everything we can to ensure your privacy and therefore handle personal data with care.

Clubsportive is a dynamic and versatile organisation focused on promoting sports and health. At Clubsportive, we combine luxury and performance to create the ultimate fitness experience. Our club is your personal oasis—a place to escape, recharge, and strengthen both your mind and body. Whether you are looking for a moment of tranquility or an intense workout, we offer an inspiring and exclusive environment where you can challenge and improve yourself. Clubsportive is part of Urban Gym Group B.V.

To provide our services, we process personal data. In this privacy statement, you can read which personal data we process and how we process it. Of course, we comply with the laws and regulations regarding data processing and privacy applicable in the Netherlands. For more information about these regulations, you can also consult the website of the Dutch Data Protection Authority.

Clubsportive BV, located at Gustav Mahlerlaan 24, 1082 MC Amsterdam, is responsible for the processing of personal data of members, customers, suppliers, and prospects.

Personal data is data that relates to an identified or identifiable natural person. It concerns information by which you can be recognised. Think, for example, of your name, (email) address, telephone number, date of birth, photo, and/or bank account number.

Below you will find the data we request from you, receive, or that you can optionally provide yourself if you wish:

• First and last name, email address, (home) address, gender, and telephone number: we use this information to execute the agreement (such as membership) and the associated communication. These details are also used for administrative purposes, such as creating the QR code for access to ClubSportive, booking group classes, requesting a day pass or trial, and using the ClubSportive app. Additionally, this personal data is processed for contact moments with ClubSportive—for example, via social media channels or other communication means.

• Date of birth: your date of birth is processed to determine if you are of legal age (16+) and thus can independently access ClubSportive and enter into a membership.

• Bank account number (IBAN): when a payment is made via the website, we automatically receive your payment details. Additionally, we process your IBAN number for automatic (monthly) direct debits for subscription fees.

• Preferences for email or SMS: you can indicate yourself if you are interested in receiving the latest offers, events, or news-related emails.

Below you will find the data we request from you, receive, or that you can optionally provide yourself if you wish:

• First and last name, email address, and telephone number: we process these details to keep people who show interest in Clubsportive informed of relevant offers and updates. This happens, for example, via newsletters and/or targeted communication when you have booked a trial.

This processing is based on your consent or our legitimate interest. You give consent when you choose to receive information, newsletters, or promotional material from us. Additionally, Clubsportive has a legitimate (commercial) interest in responding to information requests. This is the case, for example, when an interested party fills out the contact form on our website or makes a digital request (for contact) via social media platforms such as LinkedIn, Facebook, or Instagram. Clubsportive also has a legitimate (commercial) interest in convincing those who have booked a trial, through targeted information, to also take out a (continuous) paying membership instead of a one-time "introduction."

For more information, we refer you to the "Newsletter" section below.

Clubsportive relies on the processing grounds as outlined in Article 6 of the GDPR.

One of the grounds on which Clubsportive relies is the necessity to use your data to enter into and execute an agreement with you. This applies when concluding a membership (including associated possibilities such as access to Clubsportive, booking classes, using the app, and making payments) and when registering and renewing that membership.

Additionally, we may process your personal data when we have a legitimate interest. For example, we analyse your data to improve our services. We also have a legitimate (commercial) interest in informing you when you wish for more information about Clubsportive or when you have booked a trial to try to convince you to also take out a paying subscription at Clubsportive. Additionally, we will send the newsletter to members based on our commercial interest. You have the right to object at any time to this data processing for marketing purposes based on our legitimate interest, and every email contains an "opt-out" option to unsubscribe.

Furthermore, in accordance with our legitimate (informational) interest and for the execution of the agreement, we may send service-related emails (emails about renewal/change/conditions of a subscription) to members via email or SMS.

Another ground on which we may rely is consent. For example, you give consent for the use of cookies. With the help of these cookies, we can show or send you information, offers, and advertisements that suit you. What cookies are and how we handle them can be read in our cookie statement. There you can also adjust your cookie preferences.

We do not process personal data of minors (persons younger than 16 years) in principle. This is different if a minor contacts us themselves for more information and/or a trial. In this context, we do not process any sensitive or special categories of personal data.

Our newsletter contains various interesting information and offers. We send this newsletter via email and/or SMS. Based on your visits and profile, we try to tailor the content as much as possible to your interests and inspire you for a next visit.

For sending the newsletter, we use your first and last name and your email address. We send the newsletter based on our legitimate (commercial) interest.

Do you no longer wish to receive the newsletter from Clubsportive? You can unsubscribe at any time free of charge via the unsubscribe link at the bottom of the newsletter—the so-called "opt-out."

We retain your data at least as long as you are a member or subscribed to our newsletter. When your membership ends and is not renewed, or when you unsubscribe from the newsletter, your data will be automatically deleted within two years.

The retention period for the data of prospects and/or interested parties is the time during which you are considered a prospect by us. This concerns ninety (90) days.

Excluded from this are the data that we must retain longer because the law obliges us to do so or because of our legitimate interest. For example, fiscal laws and regulations oblige us to retain certain financial data for 7 years. Information about the handling of questions or complaints is retained for a maximum of 2 years after the handling thereof.

We will not share your personal data with third parties without your explicit consent, unless this is legally required. However, there are a few exceptions.

Several parties are involved in the service provision of Clubsportive who act as processors. These processors carry out certain parts of our service provision and help us fulfil our obligations to you. With these processors, we have—where necessary—concluded processor agreements, in which it is clearly stated which personal data they may process and for which specific purposes. For those involved whose personal data are processed, Clubsportive remains the first point of contact for questions or concerns regarding data processing.

These processings relate to, among other things:

• Systems for booking group classes;

• Providing a personal QR code in the Club Sportive app for access to the club;

• Realising (and using) the Clubsportive App;

• Managing the financial administration;

• Ensuring GDPR standards for our online environment; and

• Sending newsletters and invitations for events.

Furthermore, we will not provide the data you have provided to other parties unless this is legally required and permitted. An example of this is that the police, in the context of an investigation, request (personal) data from us. In such a case, we must cooperate and are also obliged to provide this data.

In certain cases, you may have granted us permission to share your browsing behavior and preferences with third parties. With this consent, we may provide you with relevant information or offers when you visit a third-party website. In such instances, we only share your IP address and no other personal data.

We do not provide personal data to parties established outside the European Union.

Urban Gym Group is the parent company, to which, among others, the labels TrainMore, Clubsportive, and BTY CLB belong. For certain purposes, we may share your personal data within the Urban Gym Group concern. This may (and we will only do so) for administrative purposes, improvement of services and internal management (internal analyses), and/or for the execution of the agreement.

At the request of Urban Gym Group, Clubsportive B.V. uses camera surveillance. The purposes and means listed below are determined by Urban Gym Group (the responsible party), and Clubsportive acts according to its instructions in accordance with the processor agreement concluded between the parties.

Camera surveillance (where needed, live) is used for the purposes of:

• Access control of Clubsportive clubs;

• Monitoring and securing goods and persons present in Clubsportive sports clubs;

• Prevention and registration of nuisance, such as vandalism and violence against persons.

No other personal data is processed than:

• Camera images of the buildings and grounds and the persons and objects located therein and thereon, over which Clubsportive's care extends;

• Data relating to the time, date and place that the camera images were taken.

No hidden cameras are used.

Clubsportive is transparent about the use of cameras. Where cameras are used, this is made known, for example, through stickers, signs, etc.

There are no cameras in the locker rooms and restrooms.

• Camera surveillance is implemented in practice by the control room and staff at the location of the relevant Renessence branch. Occasionally, a third party is engaged to capture or monitor camera images, for example, by external control rooms when monitoring clubs that are temporarily unmanned. Urban Gym Group and the Renessence control room remain ultimately responsible for the implementation of camera surveillance at all times.

• Camera images will be retained for a maximum of 30 days, unless longer when necessary to deal with an identified incident.

• The control room has taken adequate measures to protect against unauthorized access or misuse of stored camera images.

• Those authorized to review images are explicitly bound to confidentiality.

• Access to the images is password protected.

• A specified request from the data subject for inspection and copies of camera images, including the relevant day, time period, and location, can be submitted to Urban Gym Group (via privacy@urbangymgroup.com).

• A request from the data subject for deletion or masking of the camera images can be requested if the camera images are incomplete or not relevant for the purpose of the processing or otherwise processed in violation of a legal provision.

• The request can be refused if the inspection would infringe on the privacy interests of other persons.

• Provision of camera images: recorded camera images are only provided to a competent government authority when a legally given (in principle, written) order from the relevant government authority has been received, or when another legal regulation obliges Clubsportive to do so.

We have taken appropriate technical and organisational measures to protect your personal data against unlawful processing. For example, we have taken the following measures:

• All persons who can take note of your data on behalf of Clubsportive B.V. are bound to confidentiality;

• We maintain a username and password policy on all our systems;

• We pseudonymise and ensure the encryption of personal data when there is reason to do so;

• We make backups of the personal data to restore them in case of physical or technical incidents;

• We regularly test and evaluate our measures;

• Our employees are informed about the importance of protecting personal data.

On the Clubsportive website, we use cookies. With these cookies, we can show or send you information, offers, and advertisements that suit you. You can read what cookies are and how we handle cookies in our cookie policy. Here you can adjust your cookie settings.

As a data subject, you have the following rights:

• The right to request information about the processing of your personal data;

• The right to data portability, where you can request to transfer your personal data to another party;

• The right to rectification, with which you can have corrections or updates to your data carried out;

• The right to withdraw your consent at any time if the processing is based on your consent;

• The right to have your data deleted when they are no longer necessary for the original purpose or when you withdraw your consent (note: this right does not apply in all cases due to possible exceptions);

• The right to request the restriction of the processing of your personal data in certain situations.

Do you want to exercise one of these rights? Please contact us via privacy@urbangymgroup.com. We can ask you to identify yourself before we can respond to the aforementioned requests.

We will handle requests related to these rights within one month but have the right to extend this period to two months. If we do so, we will inform you in time. Please note that a request cannot always be granted. If we have a reason not to comply with your request, we will, of course, inform you about this.

You also have the right to object to the processing of your personal data. For cookies, you can exercise this right by adjusting your preferences via the cookie settings on our website. For other requests, you can contact us via privacy@urbangymgroup.com.

If you have a complaint about the processing of your personal data, we ask you to contact us directly via privacy@urbangymgroup.com. We will try to find a suitable solution together with you.

If we cannot resolve it together, you always have the right to file a complaint with the Dutch Data Protection Authority, the supervisory authority for privacy protection in the Netherlands. On the website of the Dutch Data Protection Authority, you can find more information about this.

We advise you to consult this privacy statement regularly because we adjust it from time to time. This way, you will always be informed of the most current state of affairs regarding how we use and protect your personal data.

If you have any questions or comments after reading our Privacy Statement, please contact us.

Clubsportive B.V.

Attention: the Management

P.O. Box 7035

2701 AA Zoetermeer

privacy@urbangymgroup.com