Privacy Policy
Last updated: 8 October 2026.
1. Data controller
The controller of personal data is Gym&Acro, sports services sole proprietorship, owner Roko Lozić, Rovinjska ulica 3, 10000 Zagreb, OIB (tax no.): 85792875234. For any data protection questions reach us at info@thecodegym.com.
2. Data we collect
At registration we collect your name and e-mail address, and at your first debit/credit card payment also your address, city, postal code, country and phone number, because the bank requires them to confirm the payment securely. We also record data about bookings, payments and entries to the studio. Card data is processed by the authorised payment provider Monri Payments d.o.o.; we do not store it.
3. Purpose of processing
We use the data to run your account, process bookings and payments, generate entry PIN codes, send confirmations and receipts, and to meet legal obligations (e.g. issuing invoices).
4. Cookies
We use necessary cookies to run the site. Only with your consent ("Accept all") do we load Google Tag Manager (Google Ireland Ltd.) and, through it, tools that measure visits and ad performance (e.g. Google Analytics, Google Ads or Meta). These use cookies and data about how you use the site, not your name or e-mail address. Without consent these tools are not loaded. You can change your consent at any time via the cookie settings at the bottom of the page.
5. Retention and sharing
We keep data as long as necessary to provide the service and meet legal obligations. We do not sell personal data to third parties. We share it only with payment providers and the lock management system, to the extent necessary for the service. If you choose a personal trainer when booking, we pass your name, e-mail address and session time to that trainer so they can contact you; if you do not choose one, nothing is sent to anyone. Apart from these cases, we do not give your personal data to third parties for their use without your prior consent, and you can refuse or withdraw that consent at any time by writing to info@thecodegym.com.
6. Your rights
You have the right to access, rectify, erase and port your data, and to object to processing. Send requests to info@thecodegym.com. You also have the right to lodge a complaint with the data protection authority.
7. Marketing messages
We send marketing messages only with your explicit consent and we do not disclose your data to third parties for marketing purposes. You can withdraw consent at any time by writing to info@thecodegym.com or via the unsubscribe link in the message itself; after that you are omitted from all lists used for future campaigns. Your choice does not affect your use of the service in any way.