Last updated: 26 October 2026
This privacy statement explains which personal data we process when you visit our website www.circle-fit.com, book a trial session there, sign up or contact us. Part B explains how we process your data if you are a member of a club operated by Circle-Fit B.V. itself.
A. Website
1. Who is responsible?
The controller for the website is Circle-Fit B.V., registered office in Amsterdam, registered with the Dutch Chamber of Commerce (KvK) under number 32154179, business address Kanseliersplein 81, 5223 LV 's-Hertogenbosch, the Netherlands, email info@circle-fit.nl. This privacy statement applies to all language versions of the website (Dutch, German, English and Czech). We are not required to appoint a data protection officer. Please send questions about privacy to info@circle-fit.nl.
2. Clubs and membership
Circle Fit clubs are operated by Circle-Fit B.V. or by independent operators. Clubs in Germany are operated by Circle-Fit Germany UG (haftungsbeschränkt), clubs in the Czech Republic by Circle-Fit Czechia s.r.o. If you book a trial session or take out a membership through the website, we pass your data on to the operator of the club you choose. From then on, that operator is responsible for your membership and informs you in its own privacy statement. For clubs in Germany you can find it at www.circle-fit.com/datenschutzerklaerung. For clubs of Circle-Fit B.V., part B of this statement applies.
3. Visiting the website
Our website is hosted by Framer B.V. (Amsterdam). On every visit the server processes technical data: your IP address, date and time, the page requested, the referring page, and your browser and device. This is necessary to display and secure the website (legitimate interest, Art. 6(1)(f) GDPR). Framer also produces visitor statistics without cookies and without us being able to identify you.
4. Cookies and consent
We use Cookiebot by Usercentrics A/S (Denmark) to ask for and record your consent. Cookies that the website needs in order to work are set without consent (Article 11.7a of the Dutch Telecommunications Act, Section 25(2) of the German TDDDG). All other cookies and similar technologies are only used if you consent (Art. 6(1)(a) GDPR). You can change or withdraw your choice at any time: delete the cookies of circle-fit.com in your browser and the cookie banner will appear again.
Statistics: Google Analytics 4 by Google Ireland Ltd. measures how the website is used. Without your consent Google sets no cookies and only receives cookieless measurement signals without an identifier (Google Consent Mode).
Marketing: Google Ads (conversion tracking and remarketing, Google Ireland Ltd.), the Meta Pixel (Meta Platforms Ireland Ltd.) and the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company). We use them to measure the results of our advertising and to show ads to people who have visited our website. When you fill in a form, Google Ads may use your email address or phone number in encrypted (hashed) form to attribute a conversion. We are jointly responsible with Meta for collecting and transmitting data through the Meta Pixel (Art. 26 GDPR); Meta is responsible for any further processing.
Embedded content: videos from Vimeo (Vimeo.com, Inc., USA) on our location pages. When they load, Vimeo receives your IP address and technical data and may use cookies or local storage.
Maps: on our club overview we show where our clubs are with Google Maps (Google Ireland Ltd., Ireland; Google LLC, USA). The map loads when you open the page, also without your consent. Google then receives your IP address and technical data about your browser. On our website the map stores no cookies or local storage. The legal basis is our legitimate interest in showing the locations of our clubs clearly and making them easy to find (Art. 6(1)(f) GDPR). Google may transfer data to the USA; Google LLC is certified under the EU-US Data Privacy Framework.
You can see exactly which cookies are used and how long they are stored in the cookie banner under “Details“.
5. Booking a trial session and signing up
If you book a trial session or sign up for a membership, we process the data you enter, such as your name, email address, phone number, date of birth, gender, the chosen club and time slot, and for a membership also your address and payment details (IBAN or payment card via the payment service). We use this data to handle your booking or sign-up and to send you confirmations (Art. 6(1)(b) GDPR). We also record through which channel you reached us, for example an ad or a referral (legitimate interest in managing our marketing, Art. 6(1)(f) GDPR).
The data passes through our booking system (Supabase, servers in Frankfurt) into the club's member management system: Magicline (Magicline GmbH, Bonn) or Circle Fit's own member system. Payments are handled by the club's payment service, such as Mollie B.V. (Amsterdam). We send emails through Resend (USA). Our team receives an internal notification of new bookings through Slack (USA). To prevent misuse of the sign-up form we use Cloudflare Turnstile (Cloudflare, Inc.).
6. Chat and phone assistant Joy
On the website and on the phone, our virtual assistant Joy helps you with your questions. Joy is an AI system provided by VoiceLabs (the Netherlands): its answers are generated automatically and may contain mistakes. Joy does not make decisions about your membership. We process the content of the conversation (text or speech), the page on which you start the chat and a visitor ID in your browser's local storage in order to answer your question and improve the assistant (legitimate interest in fast customer service, Art. 6(1)(f) GDPR). Please do not share health information or other sensitive details in the chat. If you would rather speak to a person, email info@circle-fit.nl or call your club.
7. Contact
If you contact us by email, phone or form, we use your details to answer your request (Art. 6(1)(b) or (f) GDPR).
8. Recipients and transfers outside the EU
We use service providers who process data on our behalf (processors): Framer, Usercentrics (Cookiebot), Supabase, Resend, Slack, Cloudflare, VoiceLabs, and the club's member management system and payment service. Google, Meta and LinkedIn process the data from their tags partly as independent controllers. Some of these providers are based in the United States or may transfer data there. We only allow this if the recipient is certified under the EU-U.S. Data Privacy Framework (adequacy decision of 10 July 2023) or if we have agreed the European Commission's standard contractual clauses with them. You can request a copy of these safeguards at info@circle-fit.nl.
9. Retention
We do not keep data longer than necessary. Server logs are deleted after a short time. Cookies have the storage period shown in the cookie banner (at most 2 years). Data about a trial session or sign-up is kept by the club in line with its own privacy statement. We keep chat conversations for as long as needed to handle your question and improve the assistant.
10. Your rights
You have the right to access, rectify and erase your data, to restrict its processing and to data portability. You can withdraw consent at any time with effect for the future. Send your request to info@circle-fit.nl.
Right to object: where we process your data on the basis of a legitimate interest, you can object at any time on grounds relating to your particular situation. You can always object to the use of your data for direct marketing, without giving reasons; we will then no longer use your data for that purpose.
You can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, www.autoriteitpersoonsgegevens.nl) or with the supervisory authority in the country where you live or work.
11. Security
We protect your data with appropriate technical and organisational measures, including encrypted connections (TLS) and role-based access rights.
12. Changes
We update this privacy statement when our website or the law changes. The date at the top shows when it was last changed.
B. Membership of clubs operated by Circle-Fit B.V.
This part applies if you are a member of a club operated by Circle-Fit B.V. itself. Your membership agreement states which company operates your club.
1. Which data and why
To perform your membership (Art. 6(1)(b) GDPR) we process your name, address, date of birth, gender, email address, phone number and IBAN, your membership number, plan and add-ons, your home club, your visits, invoices and payments, and the data you enter in the app. This data is held in our member management system Magicline (Magicline GmbH, Bonn).
In the club you train on equipment from our supplier (EGYM or Technogym). The supplier processes the data needed to guide your training. We only process health data, such as weight, height, muscle and fat mass, injuries and your progress, with your explicit consent (Art. 9(2)(a) GDPR).
With the Circle Fit Smart App or, in clubs with Technogym equipment, the Technogym app you can, among other things, get access to the club, book appointments and manage your membership. For push notifications we ask for your consent on your device.
2. Camera surveillance
There are cameras in and around our clubs, never in changing rooms or washrooms. We only review footage after an incident has been reported. We do this for the safety of members and staff and to protect our property (Art. 6(1)(f) GDPR).
3. News from Circle Fit
As a member we send you emails about similar services, new clubs and promotions (Art. 6(1)(f) GDPR and Article 11.7 of the Dutch Telecommunications Act). You can unsubscribe at any time using the link in every email.
4. Smart Training, ranking and High Fives
In clubs with EGYM machines, the Circle Fit Smart App shows under the name Smart Training how regularly you train. For this we combine your logins on the EGYM machines into training sessions and calculate your Circle Score (0 to 100, based on the frequency, regularity and completeness of your sessions over the last four weeks), your level and your awards. We only use the time, the club and the number of your logins, no training values, body data or other health data. Only you can see your score, level and awards (Art. 6(1)(b) GDPR).
You only take part in the ranking of your club, the ranking of all Circle Fit clubs and in challenges if you consent to this in the app (Art. 6(1)(a) GDPR). You choose a ranking name or use the suggested name (CF_, your club's code and a number); we do not show your real name. Other participants see your ranking name, your position, your score or challenge points and your trophies. A ranking only appears once it has at least five participants; staff do not take part.
As a ranking participant you can send another participant a High Five. This is only possible if both of you have consented to the ranking. The recipient gets a push notification ("[ranking name] sent you a high five for your effort in the ranking. Keep it up!") or, if push notifications are off, a notice in the app, and can send a High Five back. For this we only process the ranking names of sender and recipient, the time and the recipient's device token for delivery (via Expo, USA, and Apple or Google). A High Five is a one-off event; we do not keep a history. One High Five per pair is possible every 24 hours, and at most 20 per sender per day. The legal basis is your consent to the ranking (Art. 6(1)(a) GDPR).
You can withdraw your consent to the ranking at any time in the app. Your ranking name and open High Fives from and to you are then deleted.
5. Retention
We keep your data for as long as your membership runs and for 12 months afterwards. Data we must keep under tax retention rules, such as invoices, is kept for 7 years. After that we delete or anonymise your data.
We delete logins on EGYM machines after 90 days. We keep Smart Training sessions, score, level and awards until your member data is deleted, and your ranking name until you withdraw your consent. We keep a High Five until the recipient has seen it (then at most 24 hours as a block against sending it twice), unseen at most 7 days.
For recipients, transfers outside the EU, your rights and complaints, part A applies.