.svg){kind=icon}
An active, healthy world where everyone thrives, personally and professionally.
With the following privacy policy, we would like to inform you about the type, scope and purpose of the collection, use and processing of your personal data by us, Urban Sports GmbH and your associated rights when you use our App, websites and other services (“Services”) as well as in other interactions with us. We process your data in compliance with the provisions of the European General Data Protection Regulation ("GDPR") and other data protection regulations.
Urban Sports GmbH (hereinafter "Urban Sports”) is responsible for the collection and processing of your personal data. Urban Sports is part of the Urban Sports Group, which includes subsidiaries and companies otherwise affiliated with Urban Sports, for example sister companies (“Urban Sports Group”). In the course of the processing procedures, joint responsibility with other bodies within the meaning of Art. 26 I GDPR may also arise. We will inform you of this in the respective section.
You can contact us as follows:
Urban Sports GmbH
Voltairestraße 10a
10179 Berlin, Germany
You can reach out to our data protection officer at: [email protected]
We may process your personal data (which we have obtained either directly from you or from another source) only if there is a lawful legal basis:
Consent: You have given your consent to the processing of your personal data for one or more specific purposes, Art. 6 I lit. a GDPR;
Contract performance: The processing is necessary for the performance of a contract to which you are a party or for the implementation of pre-contractual measures, Art. 6 I lit. b GDPR;
Legal obligation: The processing is necessary for compliance with a legal obligation to which Urban Sports is subject, Art. 6 I lit. c GDPR;
Legitimate Interest: The processing is necessary for the purposes of the legitimate interests pursued by Urban Sports, except where such interests do not outweigh your interests, Art. 6 I lit. f GDPR.
Depending on the circumstances in the individual case, you have the following rights in connection with the processing of your personal data:
Right to withdraw: You can withdraw your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the lawfulness of the processing carried out based on the consent until its withdrawal.
Right of access: You can request information from us regarding the personal data processed about you. You have the right to access this personal data and to receive further information, such as the processing purposes and the recipients.
Right to rectification: You have a right to request immediate correction of incorrect personal data concerning you. In addition, you can request the completion of your incomplete data processed by us.
Right to erasure: You have the right to demand that we erase the personal data concerning you without undue delay. Please note that we are generally obliged to comply with your request for erasure, unless an exceptional reason applies.
Restriction of processing: Under certain conditions set out in Art. 18 of the GDPR, you have the right to restrict or block the processing of your personal data. In the event of a restriction, we may still store your data, but only process it under very strict limitations.
Right to data portability: You have the right to receive the personal data concerning you that you have provided to us in an accessible and transferable format.
Right to object: If we base the processing on our legitimate interests, you have the right to object to the processing of personal data concerning you on grounds relating to you particular situation. You may also object to the processing of personal data concerning you where such personal data is processed for direct marketing purposes.
You can exercise these rights by contacting customer support or emailing [email protected]. Where necessary to verify your identity, we will request appropriate documentation. Personal data submitted with your request will be processed exclusively for responding to that request and for no other purpose. We aim to respond to all legitimate requests within one month. If your request is particularly complex or you've submitted multiple requests, it may take longer. We'll notify you and keep you updated.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
is necessary for entering into, or the performance of, a contract between you and the data controller,
is authorized by Union or Member State law to which the data controller is subject and these legal provisions lay down suitable measures to safeguard your rights and freedoms and legitimate interests; or
is based on your explicit consent.
We may share personal data with other Urban Sports Group companies to ensure the efficient provision of our Services. This concerns your membership details, technical details, customer services data (such as assistance with your account or support with information) as well as marketing details (such as your notifications preferences). As the case may be, Urban Sports Group companies may act as processors based on Art. 28 GDPR in conjunction with the data processing agreement or as individual or joint controllers.
We generally process your personal data within the European Economic Area. However, in certain cases it may be necessary to transfer your data to outside countries. This only happens if the third country offers an adequate level of data protection, which has been confirmed by the European Commission through an adequacy decision or if appropriate safeguards exist in accordance with Art. 46 GDPR (e.g. EU standard contractual clauses). Current information on adequacy decisions can be found on the European Commission's website: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en.
The EU standard contractual clauses can be found here: https://commission.europa.eu/publications/publications-standard-contractual-clauses-sccs_en
We will retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Furthermore, if you conclude a membership with us and following its termination, we retain your data for an additional period of 12 months to facilitate potential account reactivation and ensure service continuity. You can object to this continued storage at any time by contacting us directly. You can also request earlier deletion at any time by contacting us.
When data is no longer needed for the aforementioned purposes, it will be deleted. However, this does not apply to personal data when limited processing is necessary, in particular for the following purposes:
Compliance with regulatory and tax retention requirements under applicable laws, such as the commercial codes, tax codes, and other relevant regulations. These statutory retention periods range from two to ten years.
Preserving evidence within statutory limitation periods. These periods can extend up to thirty years, though the standard limitation period is one to three years.
Consent-based processing: When your consent serves as the legal basis for processing your personal data, Urban Sports Club will retain that data until you revoke your consent.
We create an account for you when you decide to sign up for a membership (“Membership”). For this purpose the following data will be processed: your name, email address, complete street address including postal code and city, as well as payment details such as bank account information and credit card details based on the payment method that you chose. Please note that signing up is not possible, if this data is not provided. We do not collect or process sensitive personal data as defined in Art. 9 GDPR (such as information on health, ethnic origin, political opinions, religious beliefs, or sexual orientation).
Your data is temporarily stored during your registration process. After signing up, you will be asked to upload a current photograph to your membership account. This photograph serves multiple essential purposes by enabling unique member identification and fraud prevention. You can adjust your personal data and preferences after logging in under the section “Your Account”.
Purpose: Establish and manage your membership contract with us, including ensuring unique identification of members; prevent misuse and fraudulent activities.
Legal Basis: Art. 6 I lit. b GDPR (contract performance) for processing necessary to establish and manage your membership; Art. 6 I lit. f GDPR (legitimate interests) for processing necessary to protect our systems and services against fraud and abuse; our legitimate interest lies in maintaining the integrity and security of the membership system, ensuring safe use of the service, and preventing unauthorized access or misuse of your account, which is aligned with the users’ interests.
To use and manage your Membership, we provide you with our App via third-party platforms (IOS, Android). In order to download the respective Apps, these platforms may require you to register. We have no influence on the processing of the data collected, which may arise in the course of registration on the platform. You can also manage your Membership via our website. Please note, however, that checking in with our local partners at their location is only possible via our App.
When you use your Membership, we collect and process personal data to enable membership services. For this purpose, the following data will be processed: usage timestamps, device type, mobile operating system, in some cases location data, virtual or in-person classes you book and/or attend, workouts you participate in, and evidence of your access to and/or use of third-party services. You can browse our offerings, book courses as well as use basic App functions without granting location access.
Purpose: To enable membership services, facility access and App functionality.
Legal Basis: Art. 6 I lit. b GDPR (contract performance), Art. 6 I lit. f GDPR (legitimate interest); our legitimate interest lies in maintaining the integrity and security of the membership system, ensuring safe use of the service, and preventing unauthorized access or misuse of your account, which is aligned with the users’ interests.
As part of your Membership, you need to check in at our partner locations by scanning a QR code, provided at each location (partners such as sports facility operators, fitness studios and other third parties). To prevent fraudulent check-ins and ensure the integrity of our system, we verify your physical presence at the partner location through location based access. This requires both camera access (to scan the QR code) and location access on your device at the time of check-in. The location data is used solely to confirm that you are within the geographical boundaries of the partner facility when scanning the QR code. The precise location coordinates used for this verification are not stored after the verification is complete and are not shared with our partners. After a successful check-in we store the check-in records showing when and where you visited.
Purpose: To enable membership services, fraud prevention and operational management.
Legal Basis: Art. 6 I lit. b GDPR (contract performance) for processing necessary to establish and verify your membership; Art. 6 I lit. f GDPR (legitimate interest) for fraud prevention through location verification; our legitimate interest lies in maintaining the integrity and security of the membership system, ensuring safe use of the service, and preventing unauthorized access or misuse of memberships.
When you check in or book a class with partners, we share your name, Membership number, check-in details, and class information with the relevant partner location for identification and service delivery. This is also necessary for proper billing between us and our partners. Some partners use software providers which manage their booking and scheduling systems. We share data via an Application Programming Interface (“API”) with those providers to enable seamless booking and class management.
Furthermore our partners may ask you to verify check-in information on your device on site by displaying your device after a successful check-in. In exceptional cases involving serious misconduct or safety violations at partner locations, we may share your contact details with the affected partner to enable direct communication about the incident and ensure facility safety.
If necessary we may enter into a joint controller agreement with partner locations that establishes the shared purpose of processing, which is to enable you to use our partner's services, and outlines the responsibilities of both parties. You can exercise your data subject rights against both Urban Sports and our partner locations. The partner locations will inform you separately about their data processing activities under this joint arrangement.
Purpose: Membership verification and operational safety management.
Legal Basis: Art. 6 I lit. b GDPR (contract performance) to enable and verify your membership; Art. 6 I lit. f GDPR (legitimate interest) for misconduct-related sharing; our legitimate interest lies in maintaining safe environments, which also aligns with your own interest in secure and reliable use of the service.
For Memberships that are subsidized by your employer, we verify your eligibility by sharing specific personal data with your employer, including your first and last name, email address, membership details (S/M/L/XL) as well as the contract city. This verification ensures only authorized employees receive corporate membership benefits. We receive and process the following information from your employer: name, surname, personnel number (where applicable), and employment start/end dates for verification purposes.
We have entered into a joint controller agreement subject to Art. 26 GDPR with your employer that establishes the shared purpose of processing, which is to enable Urban Sports to provide subsidized services to employees and to allow your employer to offer this as an employee benefit, and outlines the responsibilities of both parties. We process only the minimum data necessary for Membership verification, eligibility and administration. You can exercise your data subject rights (access, rectification, erasure, etc.) against both Urban Sports and your employer. Your employer will inform you separately about their data processing activities under this joint arrangement. If you prefer not to have your personal data shared with your employer, you may opt for an individual Membership instead of the corporate option, though this will not include employer subsidies. For corporate Memberships, data sharing with your employer is necessary for verification and cannot be opted out of while maintaining the corporate benefits. Your employer may choose to use an automated integration for the personnel management, which is being provided by a management tool on our corporate portal.
Purpose: To fulfill corporate membership contracts with employers and verify employee eligibility for subsidized benefits.Legal basis: Art. 6 I lit. b GDPR (contract performance) for both employee Membership and corporate contracts.
We create statistics from aggregated data to analyze popular classes and booking trends across our Services. The data is aggregated before analysis, ensuring individual activities cannot be identified. We use this analysis for the purpose of improving our services, optimize class schedules, analyzing engagement metrics and to help our partners. For corporate Memberships, we may share company-wide statistics with your employer, but never share individual personal data.Purpose: To analyze service usage, optimize offerings, and provide aggregated insights to partners and corporate clients.
Legal Basis: Art. 6 I lit. f GDPR (legitimate interest); our legitimate interest lies in enhancing service quality and user experience, which also aligns with your own interest in receiving an improved and optimized service.
Our App offers a notification preferences center where you can manage all types of communications we send to you, including email newsletters, promotional messages, service updates, and account notifications. You can selectively activate or deactivate specific categories according to your preferences. Please note that we are obliged to send out certain Service-related communication, which is therefore mandatory and can not be changed.
Purpose: To manage communication preferences and deliver relevant notifications based on your selected preferences.
Legal Basis: Art. 6 I lit. a GDPR (consent) for marketing communications , Art. 6 I lit. b GDPR (contract performance) for Service-related notifications.
You can access and modify your notification preferences at any time through your account settings. You can withdraw your consent to the processing of your personal data at any time with effect for the future.
We offer a personalized Homefeed in our App. This provides you with recommendations for fitness classes, partner venues as well as wellness applications that we include in our App Catalogue. The Homefeed displays content such as upcoming classes, partner venue recommendations near you and other recommendations based on your activities. To deliver these personalized recommendations, we process information about your bookings, check-ins as well as favorite partner venues. In order to use the homefeed you also have to grant location access within the App, though this is voluntary.
Purpose: To provide personalized venue and class recommendations, display relevant upcoming bookings, and improve user experience through customized content delivery.
Legal Basis: Art. 6 I lit. f GDPR (legitimate interest); our legitimate interest lies in enhancing service personalization and user experience, which aligns with your interest in discovering relevant fitness offerings. Art. 6 I lit. a GDPR (consent) for processing location data to provide location-based recommendations. You can withdraw consent or disable personalized recommendations at any time through your App settings or by contacting us directly.
We offer a “refer a friend” program that allows existing members to recommend our Services to new users. When you participate in this program, we process the names and email addresses of both you and the referred person (potential new member) to track referrals and provide rewards, if applicable, as well as your personal referral code. We track whether the referred person signs up for a membership and monitor the status of their membership to determine reward eligibility. Once rewards are issued or the referral expires, we retain only minimal personal data necessary for our records.
Purpose: To operate the refer a friend program.
Legal Basis: Art. 6 I lit. f GDPR (legitimate interest); our legitimate interest lies in member acquisition and program administration, which also aligns with the user interest in benefiting from referral rewards and sharing services.
When you sign up for a membership with us we collect and process payment-related information necessary based on the payment method of your choosing. This includes your name, account number, credit card number and bank details. Based on the payment method you have chosen your payment data is transmitted to our payment service providers for transaction processing. The majority of this data is stored by the providers themselves and not within our system.
When you visit our websites, we automatically collect certain data to provide you with the website, to ensure proper functionality and security of the website. For this purpose, our system automatically collects the following data, among others: IP address and type of the accessing device, user ID, timestamp with date and time, your location (city), browser and operating system, amount of data transferred, any other technical data, notification of successful access and the requesting provider. The data is temporarily stored in logfiles of our system and not stored together with other personal data. Without this data, it would not be technically possible to deliver and display the content of the websites. In addition, the processing of this data is necessary for security reasons, in particular for access, input, transmission and storage control.
Purpose: To enable website functionality, ensure proper content delivery and maintain website security.
Legal Basis: Art. 6 I lit. f GDPR (legitimate interest) our legitimate interest lies in ensuring website functionality and security, which also aligns with the user interest in accessing a secure and properly functioning website.
We use tracking and analysis tools to monitor website usage and optimize our Service. These tools collect statistical data about how visitors interact with our Services, particularly our websites, which we use to improve functionality and user experience. Through this, we gather aggregated insights about visitor navigation and website usage, allowing us to enhance our online platform while protecting individual privacy.
Purpose: To monitor website usage and optimize online service functionality and user experience.
Legal Basis: Art. 6 I lit. a GDPR (consent) via our cookie banner.
You can contact us via customer support for assistance with your membership or general inquiries. To process and respond to your inquiry, we collect and process the following personal data: your e-mail address, Membership type, your contacting reason, if needed in your country as well as your telephone number. This data is stored only to handle your request and any follow-up correspondence. Your inquiries may be handled by entities within the Urban Sports Group to ensure an efficient processing of your inquiry. Our customer support also includes an AI Agent ("Chatbot"), which is integrated with our ticket system and can provide information about your Membership.
Purpose: To provide customer service.
Legal Basis: Art. 6 I lit. b GDPR (contract performance) for contract-related support; Art. 6 I lit. f GDPR for general inquiries (legitimate interest); our legitimate interest lies in providing customer service, which also aligns with the user interest in receiving support and assistance; Art. 6 I lit. a GDPR (consent) for chatbot interactions.
We offer employees and HR representatives the opportunity to contact us on behalf of their employer to request information about our corporate fitness solutions. When you request this kind of information for your employer, register your company as a corporate client for corporate fitness or request more information, we collect and process the following personal data: professional email, job-title, name, company and phone number, all of which you provided to us directly. This data is required for the purpose of processing your request. When you request information about becoming a partner we process the following data: name of your studio, name of contact person, email, phone number, and name and address of the organization.
Purpose: To respond to business inquiries, provide service information, and assess potential partnerships.
Legal Basis: Art. 6 I lit. b or f GDPR (taking necessary steps to enter into a contract with you or legitimate interest in communicating with you).
We place cookies on our websites. A cookie is a small text file that a website stores on your computer or mobile device when you visit the site. They remember things like your login status or language preference so you don't have to start fresh every time you visit. Some cookies also help us for our marketing and advertising activities while others are important for the functionality of the websites. If these cookies are set up by us they are called "first party cookies". Cookies set by parties other than us are called "third party cookies". Third party cookies enable third party features or functionality to be provided on or through the website (such as advertising, interactive content and analytics). The parties that set these third party cookies can recognise your computer or mobile device both when it visits the website in question and also when it visits other specific websites. You can configure your browser to alert you when cookies are set. Cookies can be deleted and future cookie placement can be blocked through your browser settings. Be aware that doing so may result in incomplete website display and loss of certain technical functionality.
If you use the Safari browser version 12.1 or higher, the cookies will be automatically deleted after seven days. This also applies to opt-out cookies used to prevent the use of tracking mechanisms.
You can register for our newsletter and other electronic communications ("Newsletter") on our websites and within our App. Our Newsletter contains information about our Services, updates, and other relevant information. To subscribe to our Newsletter, you need to provide your email address or adjust your settings in your preference center. Separately from our Newsletter, we may occasionally send customer satisfaction surveys to gather feedback about our Services. This feedback helps us to maintain transparency, build trust with our members, and continuously improve our offerings. In connection with Newsletter registration, we store additional personal data beyond those already mentioned to demonstrate that you ordered our newsletter and to improve our communications. This may include storing the complete IP address at the time of ordering or confirming the newsletter, a copy of the confirmation email we sent, and engagement metrics such as which content you interact with.
Purpose: To send requested Newsletter communications and marketing updates.
Legal Basis: Art. 6 I lit. a GDPR (consent); Art. 6 I lit. f GDPR (legitimate interest) for storing subscription proof data. You can withdraw your consent to the processing of your personal data at any time with effect for the future via the link provided in our Newsletter or via the preference center.
We offer webinars in collaboration with selected companies (“Webinar Partner”). These webinars may be hosted either by us or by the Webinar Partner specified on the respective registration page. When you register for a webinar via our website, we process the following personal data: your name, job-title, phone number and professional e-mail address, your company’s name, industry, number of employees, and the city of its headquarters. Where the webinar is hosted by a Webinar Partner, your data will be shared with said partner for the purpose of organizing and delivering the event. If you consent to receiving marketing communications, we will share your data with the specified Webinar Partner for this purpose. Both parties act as independent data controllers and process data according to their respective privacy policies and GDPR requirements.
Purpose: To organize and deliver webinars, facilitate partner collaboration, and provide marketing communications (with additional consent).
Legal Basis: Art. 6 I lit. a GDPR (consent). You can withdraw your consent to the processing of your personal data at any time with effect for the future.
We carry out occasional studies to improve our Services and to better understand our member needs. With your consent, you can join our research pool and participate in these studies. We process personal data including basic contact information (name, email, profession, general location) and may collect additional relevant personal data for specific studies, limited to what is necessary and proportionate for each study. You will be informed about the exact data collected before each study.
Purpose: To conduct user research studies and improve our products and services.
Legal Basis: Art. 6 I lit. a GDPR (consent). You can withdraw your consent to the processing of your personal data at any time with effect for the future.
We analyze member and partner support interactions and feedback from our customer service tickets with the help of satisfaction surveys. This helps us understand common issues and enhance our overall service quality. The analysis may include support ticket content, resolution outcomes, response times, and recurring themes to identify areas for improvement in our customer support processes and service delivery. Survey participation is voluntary, and you can choose which questions to answer.Purpose: To conduct customer satisfaction surveys, gather feedback on our services and products, and improve customer experience based on user opinions.
Legal Basis: Art. 6 I lit. a GDPR (consent). You can withdraw your consent to the processing of your personal data at any time with effect for the future.
At trade fairs, promotional events, or similar occasions where Urban Sports presents its Services, we may take photos and videos for marketing and communication purposes which may include persons such as passers-by. These recordings may be used in both digital and print media (e.g., our website, social media channels, newsletters).
If you do not wish to be recorded or for images of you to be used, you can object at any time: either directly on-site with our event team or afterwards by contacting us via email at [email protected]
Purpose: To promote and communicate about our services.
Legal Basis: Art. 6 I lit. f GDPR (legitimate interest); our legitimate interest lies in marketing of our brand and services.
We have integrated social media plugins from external platforms including X, Instagram, Facebook, and LinkedIn (collectively "Social Media Platforms") on our website to enable content sharing with your professional network.
When you visit a page on our website containing a social media plugin, your browser establishes a direct connection to the servers of the respective Social Media Platform. This allows the platform to recognize which pages you visit on our website. If you are logged into your account on any of these Social Media Platforms during your visit, the platform can associate your browsing activity with your personal user account. When you interact with a plugin (e.g., by clicking a share or like button), this information is transmitted directly to the Social Media Platform and stored in your account. Please note that data transmitted to Social Media Platforms may be processed outside the European Union, including in countries that may not provide the same level of data protection as the European Union. We have no control over the scope and purpose of data collection and processing by these Social Media Platforms. For detailed information about their data practices, available privacy settings, and opt-out options, please refer to the privacy policies of the respective platforms.
If you are interested in working for us, you can apply online for the advertised job vacancies via our application portal https://culture.urbansportsclub.com/en/jobs. As part of the application process, we only process personal data that is related to your application. This includes general data such as your name, address and contact details as well as information about your professional qualifications, further professional training and other data that you provide to us in connection with your application.The processing of your data is necessary for the recruitment decision and the establishment of an employment relationship. The provision of your personal data is voluntary, although we cannot process your application without its provision and processing.
You also have the opportunity to register for our talent pool, where we store data of suitable candidates when immediate recruitment is not possible at the time of application. We will automatically delete your personal data after a period of six months if you are not selected for a position. If you are hired following the application process, we will transfer your personal data to your personnel file where necessary for employment purposes. If you have provided consent to be included in our talent pool, we will retain your personal data for 12 months.
Purpose: To make a hiring decision and, if necessary, to establish an employment relationship. The purpose of processing as part of the talent pool is to contact you if a suitable position becomes available at Urban Sports.Legal basis: Art. 6 I lit. b GDPR (contract performance) for the application process and Art. 6 I lit. a GDPR (consent) for inclusion in the talent pool. Your consent can be revoked at any time with effect for the future.
We share your personal data with technical service providers who are essential for delivering our Services. These providers operate as data processors under our instruction and are bound by comprehensive data processing agreements in accordance with Art. 28 GDPR. All service providers undergo vendor assessment before engagement.
We work with the following categories of service providers:
Website functionality and security: Hosting providers, content delivery networks, security monitoring services, and infrastructure providers that enable our website and App operations.
Payment processing: Payment service providers that handle transaction processing, fraud prevention, and payment method verification.
Recruitment and applicant management: Applicant tracking systems and recruitment platforms that support our hiring process.
We only share data when necessary for their specific services or when you have given explicit consent (such as through our cookie banner or newsletter subscription). Where service providers process data outside the European Economic Area, appropriate transfer mechanisms under Section G apply.
We take appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, or destruction. We protect your data during transmission through modern encryption methods (e.g., TLS/SSL), store data on secure servers in the EU where possible, or use appropriate safeguards for transfers to third countries, and implement strict access controls. Access to personal data is permitted only to authorized employees who are subject to strict confidentiality obligations.
Urban Sports will update this privacy policy as necessary and adapt it to new requirements and laws. It is therefore recommended that you check this document regularly so that you are informed about the protection of your data.
An active, healthy world where everyone thrives, personally and professionally.
.png)
