Privacy Policy

At Orlo Live Demo (CIF: , registered address: ), we are committed to protecting your privacy and ensuring compliance with current data protection regulations, particularly Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data Controller

Controller: Orlo Live Demo
CIF:
Address:
Contact email: hello@orlo.es

2. Purpose of Data Processing

The personal data we collect are used for:

  • Managing relationships with users and clients.
  • Managing class and service bookings and payments.
  • Responding to enquiries and requests made through contact forms.
  • Sending informative and/or commercial communications, if you authorize us to do so.
  • Complying with legal obligations.

3. Legal Basis for Processing

The processing of your personal data is based on:

  • The execution of a contract or provision of a requested service.
  • Your consent, where required.
  • Your explicit consent, for the health data described in section 6.
  • Compliance with applicable legal obligations.
  • The legitimate interests of Orlo Live Demo.

4. Recipients and Transfers

Your data may only be shared with third parties in the following cases:

  • Due to legal obligations.
  • With service providers essential for our business activity (e.g. payment processing, web hosting, communications), with appropriate contracts in place. Orlo, the provider of the platform Orlo Live Demo runs on, stores and processes your data on our behalf as our processor. The providers Orlo uses to do so are listed in Orlo's privacy policy.
  • To Google, to measure the advertising of Orlo Live Demo, as described in section 5. Some providers, Google among them, may process data outside the European Economic Area; where they do, the safeguards the GDPR provides for apply, such as the EU-US Data Privacy Framework or standard contractual clauses.

5. Advertising and Measurement

Orlo Live Demo may advertise its website on Google Ads. With your consent, which the cookie banner asks for:

  • the website uses Google Analytics and Google Ads cookies to understand how it is used and whether the ads work;
  • if you sign up, make a first payment or contact us through the website, we send Google your email address and phone number turned into an irreversible code (a hash), never in plain text, together with when it happened, so Google can tell whether you came from an ad. Google may compare it with the Google account you saw the ad on.

Orlo, the provider of the platform Orlo Live Demo runs on, sends this on behalf of Orlo Live Demo. The legal basis is your consent, which you can withdraw at any time by clearing your browser cookies and rejecting them when asked again, or by writing to hello@orlo.es. Without your consent, none of this is sent to Google.

6. Health questionnaire and waiver

Orlo Live Demo may ask you to complete a pre-exercise health questionnaire (PAR-Q) and sign its waiver before you book yourself into a class. Your answers are information about your health, which is special category data under Article 9 of the GDPR, so they are handled with extra care.

  • What is collected: your answers to the questionnaire; a record of your signature, showing when you signed, in which language, and whether you signed in the app or on paper at the centre; and the exact text you agreed to.
  • Why: so that Orlo Live Demo can check that exercise is safe for you and know when a trainer should talk to you first, and so that it can show what you agreed to.
  • Legal basis: your explicit consent, under Article 9(2)(a) of the GDPR, which you give when you sign.
  • Who can see it: only Orlo Live Demo staff who have been given a dedicated permission to read health answers. Other staff can see that you have signed, and when, but not what you answered.
  • Where it is never used: your answers are never used for marketing, and never go into customer relationship management (CRM) tools, analytics, the AI assistant or the body of an email.
  • Who holds it: Orlo Live Demo is the controller. Orlo, as its processor, stores the answers encrypted in its database, hosted by Railway in the EU (Netherlands).
  • How long it is kept: for as long as you remain a member of Orlo Live Demo, or until you ask for it to be erased.

You can withdraw your consent, or ask for your answers and signature record to be erased, at any time by writing to hello@orlo.es. Withdrawing your consent does not affect anything done with your answers before you withdrew it. If you withdraw it, Orlo Live Demo may ask you to sign again before you next book yourself into a class.

7. Data Retention

Personal data will be retained for the time necessary to fulfill the purpose for which they were collected and to address possible responsibilities, as well as for the periods established by applicable regulations. Health questionnaire answers are kept only as described in section 6.

8. User Rights

You may exercise your rights of access, rectification, erasure, objection, restriction, and portability by sending a request to hello@orlo.es. If you believe your rights have been violated, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Communications

Users can unsubscribe from commercial communications at any time using the link included in our emails or by contacting us at hello@orlo.es.

10. Intellectual Property

All content on this website, including texts, images, graphics, logos, software, and other materials, is the property of Orlo Live Demo or third parties who have authorized its use. Reproduction, distribution, or modification is prohibited without prior written consent.

11. Links to Third Parties

This site may contain links to third-party websites not managed by Orlo Live Demo. We are not responsible for the content, privacy policies, or practices of such external sites.

12. Applicable Law and Jurisdiction

This privacy policy is governed by Spanish law. For the resolution of any disputes related to the use of the website, the application, or the processing of personal data, both parties submit to the jurisdiction of the competent courts at the location of the gym, expressly waiving any other jurisdiction.

Last updated: 27/10/2026