ULTIMATE FITNESS GROUP Privacy Policy

EFFECTIVE DATE: May 11, 2020

Ultimate Fitness Group, LLC d/b/a Orangetheory® Fitness (“Ultimate,” “we,” “us,” or “our”) values your privacy. In this Privacy Policy (“Policy”), we describe how we collect, use, and disclose information we obtain about visitors to our website, www.orangetheory.com (the “Site”), users of our mobile applications (the “App” or “Apps”), visitors to Orangetheory® Fitness studios (whether owned by Ultimate or one of our franchisees), and the services available through our Site and App, and how we use and disclose that information. This Policy does not apply to a franchisee’s collection, use, and disclosure of your information, except as described in this policy with regard to data sharing and change of a franchisee.

By visiting the Site, using or downloading the App, or using any of our services, you acknowledge that your personal information will be handled as described in this Policy. Your use of our Site, App, or services, and any dispute over privacy, is subject to this Policy and our Terms of Use, including its applicable limitations on damages and the resolution of disputes. The Terms of Use are incorporated by reference into this Policy.

PRIVACY POLICY

1. Identification of the Data Controller

Orange Theory Spain, S.L. is responsible for processing your personal data to provide the services identified in this Privacy Policy (the “Website”).

Orange Theory Spain, S.L. is a company registered at:

Avenida de Bruselas, 16, Bajo-Izquierda, 28108 Alcobendas, Madrid
NIF: B-87440210
Email: marketing@orangetheoryfitness.es

At Orangetheory® Fitness, we are committed to your fundamental right to data protection, and this Privacy Policy aims to inform you about your rights under the General Data Protection Regulation (GDPR).

If you have any questions or inquiries regarding this matter, you can contact us at marketing@orangetheoryfitness.es.

2. What Information Do We Collect from You?

There are different ways we collect personal data:

a) Data You Provide Directly

We collect information when you contact us through the available channels, such as:

Contact forms
Registration or subscription forms
Social media interactions

The data we may collect includes:

Name and surname
Email address
Phone number
City of residence
Profile picture (for studio access)
Banking details (if you wish to make a payment)

If you follow us on social media, we may also access publicly available information, such as:

Username
Gender
Date of birth
Likes, tweets, and interactions
Number of followers and followed accounts
Public profile information (e.g., bio)

All fields marked with an asterisk (*) in our forms are mandatory, meaning failure to complete them may prevent us from providing the requested services.

Users must provide accurate information, as identity fraud or the use of aliases is prohibited.

If any changes occur in your personal data, you must update your information as soon as possible via email to marketing@orangetheoryfitness.es.

By clicking the "Accept" button (or equivalent), you declare that the information provided is accurate and truthful.

b) Data Collected Indirectly

When you browse our website, cookies and tracking technologies may be installed on your device. You can find more details in our Cookie Policy.

3. Where Do Your Data Come From?

We assume that all the data processed by Orangetheory® Fitness has been freely provided by you.

If you provide personal data about a third party, you guarantee that:

You have informed them about this Privacy Policy.
You have obtained their consent to share their data.
The information provided is accurate and up-to-date.

Failure to comply with these requirements may result in liability for any damages caused.

4. How Do We Use Your Personal Data? What Services Do We Provide?

Orangetheory® Fitness processes personal data for the following purposes and in accordance with the legal basis outlined below:

Based on Contractual or Pre-Contractual Obligations:

Providing services you have requested
Responding to inquiries and assisting with customer support
Contacting you via email, SMS, or phone when you submit a request through our website
Assessing your health before membership activation to ensure safe participation
Processing payments and handling any outstanding balances

Based on Legitimate Interest:

Sending class reminders and account notifications via SMS or phone calls (users may opt out at any time)
Conducting customer satisfaction surveys to improve our services
Investigating fraudulent activities or identity impersonation
Monitoring security with CCTV surveillance in entry areas (excluding workout areas and locker rooms)

Additionally, Orangetheory® Fitness, its franchise network, and its parent company may anonymously use collected data for research, product improvement, and statistical purposes.

If you wish to opt out of data processing based on legitimate interest, you can do so by contacting marketing@orangetheoryfitness.es.

Based on Explicit Consent:

If you voluntarily consent, your data may be processed to:

Send personalized offers, promotions, and event invitations related to fitness and recreation
Capture and use your image or voice for promotional purposes in photos, videos, or audio recordings

By consenting, you authorize Orangetheory® Fitness and its affiliates to use, modify, and distribute these materials worldwide and indefinitely, across various platforms including social media, print, and digital media.

If you wish to withdraw your consent, you can do so at any time by responding "STOP" to an SMS or emailing marketing@orangetheoryfitness.es.

5. Data Sharing and International Transfers

We only share personal data when necessary for the purposes mentioned above or when required by law. Your data may be shared with:

Insurance providers (for liability coverage)
Public administrations and law enforcement agencies
Payment service providers (banks, payment gateways, etc.)
IT service providers (hosting, CRM, email marketing)
Other Orangetheory® Fitness franchise locations and parent company entities

If any of our service providers are located outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

EU-approved Standard Contractual Clauses
Participation in the Privacy Shield Framework (for U.S. entities)

6. Your Rights

You have the right to:

Access your personal data
Rectify inaccurate or incomplete data
Request erasure of your data (when legally possible)
Restrict processing under certain circumstances
Object to data processing based on legitimate interest
Request data portability for contractual or consent-based processing
Withdraw consent at any time

To exercise your rights, you can:

Email marketing@orangetheoryfitness.es with your request
Send a written request to Avenida de Bruselas, 16, Bajo-Izquierda, 28108 Alcobendas, Madrid

You also have the right to:

File a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have been violated.

Opt out of receiving marketing communications via the Robinson List at www.listarobinson.es.

7. Data Retention & Cookies

We only keep your data for as long as necessary to provide our services. If you stop using our services, your data will be blocked and only accessible if required by legal obligations.

We also use cookies to enhance user experience. For details, refer to our Cookie Policy.

8. Security & Confidentiality

We implement technical, physical, and administrative measures to prevent unauthorized access or disclosure of your data.

9. Privacy Policy Updates

We regularly update our Privacy Policy to reflect any changes in regulations or business practices. Any significant updates will be clearly communicated.

This Privacy Policy was last reviewed and published on October 23, 2024.