Privacy Policy
Last updated: 1 July 2026.
1. Data controller
The controller of personal data is Gym&Acro, sports services sole proprietorship, owner Roko Lozić, Rovinjska ulica 3, 10000 Zagreb, OIB (tax no.): 85792875234. For any data protection questions reach us at info@thecodegym.com.
2. Data we collect
We collect your name, email address and mobile number at registration, plus booking and payment data. Card data is processed by an authorised payment provider — we do not store it.
3. Purpose of processing
We use the data to run your account, process bookings and payments, generate entry PIN codes, send confirmations and receipts, and to meet legal obligations (e.g. issuing invoices).
4. Cookies
We use necessary cookies to run the site and, with consent, cookies to measure visits. You can change your consent at any time via the cookie settings at the bottom of the page.
5. Retention and sharing
We keep data as long as necessary to provide the service and meet legal obligations. We do not sell personal data to third parties. We share it only with payment providers and the lock management system, to the extent necessary for the service. If you choose a personal trainer when booking, we pass your name, e-mail address and session time to that trainer so they can contact you; if you do not choose one, nothing is sent to anyone.
6. Your rights
You have the right to access, rectify, erase and port your data, and to object to processing. Send requests to info@thecodegym.com. You also have the right to lodge a complaint with the data protection authority.