Privacy Policy

This Privacy Policy (“Policy”) sets out how TURO BCN S.L. (“Turó”, “we”, “our”, “us”), operator of the Turó platform, collects, processes, stores, uses, protects, shares, and transfers the Personal Data that you (“User”, “you”, “your”) provide when you visit our website, use our App, and/or use our Services.

By using, browsing, accessing, or availing any services from the App or Website you agree to be bound by the terms of this Policy and consent to the collection and use of your personal information in accordance with it.

For any matters related to this Policy, you may contact us at:

We may collect the following categories of data:

We collect Personal Data when:

• You create an account on the App and provide identity data
• You use our Services, activity data and technical data are collected to ensure service reliability
• You choose to share your data with third-party applications via API
• You submit an inquiry through the contact form on the Website
• Data is stored temporarily on device for offline access or local caching

You may withdraw your consent to Turó’s use of your Personal Data at any time by adjusting your preferences in the App’s Settings, disconnecting optional integrations, or by emailing support@clubturo.com. Once consent is withdrawn, certain features that rely on that data may no longer be available.

We use your Personal Data to:

• Create and provide access to the App, Website, and Services
• Undertake verification of the User
• Develop, deliver, and improve the Services
• Personalise and enhance User experience
• Inform Users about new products, services, offers, and events
• Send promotional and marketing offers (with consent)
• Answer questions and handle User complaints
• Undertake and perform contractual obligations
• Detect, prevent, and address technical and security issues
• Detect or investigate fraud, abuse, illegal use, or violations of our Terms
• Ensure compliance with applicable laws
• Conduct internal analytical and research activities

Turó does not use sensitive categories of Personal Data: including health data, fitness data, biometric data, genetic data, or precise geolocation data for targeted advertising, marketing communications, profiling, or sale to third parties.

Contract performance: We process your Personal Data based on our Terms of Use to provide, maintain, and support the Services, including creating and managing your user account. This does not include special categories of personal data (e.g., health data), which are only processed with your explicit consent.

Explicit consent: Certain categories of Personal Data such as marketing preferences and personalised advertising are processed only based on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Legitimate interests: We may process your Personal Data to improve our Services, provide customer support, or adjust software functionality, ensuring your fundamental rights and freedoms are not overridden.

Legal obligation: We may process your Personal Data to comply with legal obligations, for example, accounting, tax, or regulatory requirements.

We may share your Personal Data with:

• Partners (fitness trainers, nutritionists, wellness providers, event hosts) for Services you explicitly consented to
• Third-party apps (Apple, Google, Azure, Mapbox) if you explicitly opt-in
• Service providers processing data on our behalf (payment processors, email distributors, analytics providers)
• Authorities where required by law, court order, or to prevent illegal activity
• Third-party targeted advertising providers (with opt-out available in App settings)
• Any third party where you have provided consent

We may also transfer Personal Data in the event of a sale, reorganisation, spin-off, dissolution, or liquidation of our business.

Turó enters into Data Processing Agreements (DPAs) with all service providers that process Personal Data on its behalf, requiring them to implement appropriate technical and organisational security measures.

Children: None of the Services shall be provided to a child under the age of 14 unless specific consent is obtained from the holder of parental responsibility.

Security: We use a variety of technical and organisational security measures, including encryption and authentication tools, to maintain the safety of your Personal Data.

As a general rule, Turó does not carry out international transfers of personal data. Where service providers or technological tools involve processing data outside the European Economic Area (EEA), we ensure that the appropriate safeguards under GDPR Articles 44–49 are applied including Standard Contractual Clauses (SCCs) or adequacy decisions issued by the European Commission.

International data transfers occur with the following entities, all certified under the EU–US Data Privacy Framework: Apple; Google LLC; Meta Platforms, Inc. (Instagram); X Corp.; Mapbox; Microsoft (Azure); and optional avatar/image hosting services.

Turó’s servers are located within the EEA, specifically in Spain and India.

We will only retain your Personal Data for as long as your account is active or as required by applicable law. Following account closure, data is retained only as long as legally necessary.

Upon an erasure request, Personal Data will be permanently deleted within 14 days unless retention is required by law.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the Personal Data, the purposes for which we process it, and applicable legal requirements.

Applicable privacy laws grant you the following rights over your Personal Data:

To exercise any right, email us at support@clubturo.com.

Applicable law and our practices change over time. If we decide to update this Policy, we will post the changes on our App. If we materially change the way in which we process your Personal Data, we will provide you with prior notice, or where legally required, request your consent prior to implementing such changes.