Skip to main content
STRIKR

Privacy policy

Last updated: Tuesday, 3 November 2026

Draft document. This text is a configurable template and must be reviewed by a qualified lawyer before publication. STRIKR does not claim to be certified or fully compliant until that review has taken place.

Website owner

Registered name
[AWAITING CONFIGURATION]
Tax ID
[AWAITING CONFIGURATION]
Registered address
[AWAITING CONFIGURATION]
Registry details
[AWAITING CONFIGURATION]
Contact email
[AWAITING CONFIGURATION]
Data protection officer
[AWAITING CONFIGURATION]

Fields marked as pending are filled with the real legal entity's details. No registration number, tax identification, address or legal representative has been invented.

01Data controller

The controller of your data is the entity identified in the legal notice. You can contact them at the email address given there.

02What data we process and why

To handle a booking we process your first name, surname, email and, if you provide it, your phone number. The lawful basis is performance of the contract. For marketing emails the basis is your consent, which you can withdraw at any time.

03Data we do not ask for

STRIKR does not request health information, injuries, medication, weight or any other special category data in order to book a class. If a venue needs that information, it will ask you directly and under its own responsibility.

04Recipients

We pass the venue or trainer only the data they need to deliver the service. Hosting, database, payment and email providers are also involved, each under the corresponding data processing agreement.

05Retention

We keep booking data for the duration of the relationship and then for the statutory limitation periods that apply under tax and consumer law. After those periods it is deleted.

06Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability. You may also lodge a complaint with the Spanish Data Protection Agency.

07Security

We apply role-based access control, encryption in transit and row-level access policies in the database, so each business can only reach its own data.