LinK Studio
Bookings
SL EN
Schedule Classes Personal training Pricing Location Studio Bookings

Privacy

Privacy Policy

This policy explains which personal data we process when you visit the website, use the contact form, or use the booking system, why we need it, and which rights you have.

Last updated: 4 September 2026

1. Data controllers

LinK Studio is a project in preparation and is not currently a separately registered legal entity. The purposes and means of processing are jointly determined by:

Larisa Grubič and Kim Hrovat

The shared contact point for questions and data-protection requests is:

Dobrava pri Škocjanu 15a, 8275 Škocjan
info@linkstudio.si

Both controllers are responsible for handling messages and data-protection requests. You may address a request to either controller through the shared contact point.

2. Data we process

Depending on how you use the website, we may process:

  • your first name, surname, telephone number or email address, and the message entered in the contact form;
  • the page language and time at which the message is submitted;
  • technical data required to deliver and protect the website, such as your IP address, browser information, user agent, and Cloudflare Turnstile security signal;
  • data sent to Google only when you request the interactive map;
  • when timetable occupancy is displayed on the home page, technical data sent to Gymcatch, such as your IP address, browser information, originating domain, and requested session;
  • when you open the Bookings page, technical data processed by Gymcatch and its technical providers, including your IP address, browser and device information, requested URL, and diagnostic data; the application may also store technical data in your browser using IndexedDB databases;
  • Gymcatch account, booking, package, and payment information that you provide when using the booking system.

We do not request health data through the general contact form. Please do not include information about injuries, diagnoses, pregnancy, or other health conditions in your message.

3. Purposes and legal bases

Responding to your enquiry
We use the data to read your message, contact you, and respond. When an enquiry concerns a future service, processing is necessary to take steps at your request before entering into a contract. Other general enquiries are handled on the basis of our legitimate interest in communicating with visitors.
Website and form security
We process technical data to prevent spam, abuse, and attacks and to maintain reliable operation. The legal basis is our legitimate interest in protecting the website and its communications.
Displaying the website
We load the Montserrat typeface from Google Fonts to provide a consistent and legible presentation. The legal basis is our legitimate interest in presenting the website effectively.
Displaying the map
Google Maps loads only after you select “Show map”. At that point, your browser connects directly to Google. The legal basis is the consent expressed by requesting the map; without that choice, the map does not load. You can withdraw consent for further display by closing or reloading the page. This does not affect the lawfulness of processing already carried out.
Bookings and packages
Information submitted through Gymcatch is used to create your account, book sessions, manage attendance, packages and payments, and provide the selected service. The legal basis is taking steps at your request before entering into a contract or performing that contract.
Displaying session occupancy
When you approach the class timetable on the home page, the website retrieves upcoming sessions and aggregate current occupancy for each session from Gymcatch. The request does not include information from your Gymcatch account. The legal basis is our legitimate interest in displaying accurate and current class availability.
Technical operation of the booking system
Gymcatch loads when you open the Bookings page. To display the schedule, configure the application, maintain sessions, provide security, and identify errors, Gymcatch and its providers Google Firebase and Sentry may process technical data and use IndexedDB or similar technologies. The legal basis for processing personal data is our legitimate interest in providing a reliable and secure booking system. Technical storage is used to provide the booking service that you explicitly request by visiting the Bookings page.

We do not use contact-form information for newsletters, advertising, or any other direct marketing.

4. Service providers and recipients

The following providers support the website and message delivery:

  • Cloudflare: website hosting and delivery, traffic protection, Turnstile, abuse rate limiting, and email routing;
  • Google: Google Workspace as the mailbox provider, Google Fonts for the Montserrat typeface, Google Maps when you explicitly request the map, and Google Firebase for the technical configuration and operation of the embedded Gymcatch booking system.
  • Gymcatch: session occupancy and schedule display, customer accounts, bookings, attendance and package management, and support for the payment process. Your browser connects to Gymcatch when displaying class timetable sessions and occupancy and when you visit the Bookings page.
  • Sentry: error diagnostics and technical-performance monitoring for the embedded Gymcatch system. Technical and diagnostic data may be sent from your browser when you open the Bookings page.

Gymcatch states that it processes and stores data in the United Kingdom, which is covered by a European Commission adequacy decision. Google, Sentry, and other subprocessors may also process data outside the European Economic Area. In those cases, transfers rely on an applicable adequacy decision or appropriate safeguards such as standard contractual clauses.

Cloudflare Turnstile privacy information Google Privacy Policy Firebase privacy and security Gymcatch Privacy Policy Sentry Privacy Policy

5. Retention

Messages submitted through the contact form are retained for no longer than 12 months after the communication ends, or deleted sooner when they are no longer needed to answer the enquiry. If the communication later becomes part of a contractual relationship, different statutory retention periods may apply and you will be informed separately where necessary.

Booking, package, and payment information is retained for as long as needed to provide the service, meet contractual and legal obligations, and handle potential claims. Technical security and diagnostic data is retained only for as long as needed to protect and operate the service, in accordance with the settings and policies of the providers used. IndexedDB data may remain in the browser until it is deleted or replaced by the application or browser, or until you remove it through your browser settings.

6. Cookies and external content

The website itself does not set its own analytics or advertising cookies. To provide an offline page, the website stores the game page and its essential files in a functional browser cache; the cache does not contain information entered into forms or Gymcatch. Cloudflare and Turnstile may use strictly necessary security technologies. Google Fonts does not set cookies, but Google receives the IP address, requested URL, and browser information when the font is requested. The interactive Google map does not load without your request. As you approach the class timetable, upcoming sessions and aggregate occupancy data are retrieved from Gymcatch; the full application does not load at that point. The embedded Gymcatch application loads automatically when you open the Bookings page. The embedded system may use cookies, local storage, IndexedDB databases, and similar technologies. Google Firebase may create technical IndexedDB databases on initial load, and technical and diagnostic data may be sent to Gymcatch, Google Firebase, and Sentry. Gymcatch may use additional storage for login, the option to remain signed in, account operation, and completing bookings.

7. Whether you must provide data

Using the contact form is voluntary. To respond, we need your first name, surname, message, and at least a telephone number or email address. If you do not provide this information, we cannot reply through the form. You may contact us directly by email instead. Information marked as required by Gymcatch is necessary to create an account or complete a booking; without it, a booking cannot be completed through the system.

8. Automated decision-making

We do not carry out profiling or automated decision-making that produces legal or similarly significant effects. Cloudflare Turnstile automatically assesses whether a message is submitted by a person or an automated system solely to protect the form. If you cannot use the form, you may contact us directly by email.

9. Your rights

Subject to applicable legal conditions, you may request:

  • access to your personal data;
  • correction of inaccurate or completion of incomplete data;
  • erasure or restriction of processing;
  • objection to processing based on legitimate interests;
  • withdrawal of consent at any time, without affecting earlier lawful processing;
  • data portability where the relevant conditions apply.

Send requests to info@linkstudio.si. We will respond without undue delay and normally within one month.

If you believe your personal data is not handled appropriately, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia. Information Commissioner

10. Changes to this policy

We will update this policy when the website, service providers, or LinK Studio’s legal status changes. The date of the latest revision appears at the top of the page.