Privacy policy

Who we are

The SERGYM fitness club in Cluj-Napoca and the sergym.ro website are operated by MADAGYM SRL, CUI 37536696, J12/2336/2017, with its registered office at Str. Edgar Quinet nr. 8, bl. B, ap. 40, Cluj-Napoca, 400592, Romania. This policy explains what personal data we collect through sergym.ro and how we use it.

What data we collect

• Contact details you send us (name, phone, email) when you write to us, request materials or book a visit.
• Membership details (name, email, phone, membership type, period, payment status) and gym access data. We get them from you, from the online payment or from when you signed up at the front desk. We copy your payment history from Stripe.
• Sign-in data for My account: the 6-digit code we email you (kept only as a cryptographic hash, valid for 2 minutes) and your session (an essential cookie, valid for 7 days from last use).
• Technical app logs (for example, a payment received or a door key sent), linked to your account, with no email or phone in the text.
• Technical data (device, browser, approximate location) and, only with your consent, analytics cookies (Google Analytics) and marketing cookies (Meta Pixel).

Your email and phone are needed for the membership: we send confirmations and your My account code by email, and gym access goes to your phone. Without them we can't sell the membership online.

Why we use it and on what basis

• Your membership, gym access and My account: to perform the contract.
• Payment records: to meet our legal accounting obligations.
• Answering messages, sending the materials you request and contacting you about the free entry: based on the consent you tick in the form.
• Keeping the club, the site and payments safe, including technical logs: our legitimate interest.
• Analytics and marketing cookies: only with your consent.

Who we share data with

We don't sell your data. We only share it with the providers that help us run the gym, and only as much as they need:

• Stripe (Stripe Payments Europe Ltd., Ireland): card payments.
• Netlify and Neon: hosting the site and the database.
• Resend: sending emails.
• TTLock (a company based in China): gym access. We send it your name, phone number and membership period, to create or link your TTLock account and your electronic key. We use TTLock's European server.
• Google (Analytics and Google Maps) and Meta (Pixel): only with your consent.
• Authorities, only when the law requires it.

Transfers outside the EU

Some providers (Stripe, Netlify, Neon, Resend, Google, Meta) may process data in the United States. We rely on the EU-US Data Privacy Framework, for certified providers, or on the standard contractual clauses approved by the European Commission.

TTLock is a company based in China. We send data to its European server, and if it leaves the EU, the transfer happens because it is necessary to give you gym access (Article 49(1)(b) GDPR).

How long we keep data

• Membership data: while you have a membership and for 3 more years after your last one, then we delete it.
• Payments: 5 years, as accounting law requires.
• Messages and material requests: as long as we need to reply, at most 12 months.
• Your My account code: 2 minutes. Your session: 7 days from last use.
• Technical logs: 90 days.
• Cookies: as listed on the cookie settings page.

Cookies

We use essential cookies and, with your consent, analytics and marketing cookies. Full details and your choices are on the cookie settings page.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to processing, and to data portability. You can withdraw your consent at any time, without affecting the processing carried out before you withdrew it. We don't make automated decisions about you.

For any of these, write to us at office@sergym.ro.

If you think we don't respect your rights, you can complain to the Romanian data protection authority (ANSPDCP), B-dul G-ral Gheorghe Magheru 28-30, sector 1, Bucharest, anspdcp@dataprotection.ro, www.dataprotection.ro.

Contact

For any privacy request, write to us at office@sergym.ro or on WhatsApp.