Oktopus Fitness Club

Privacy Policy

1. About Us

Oktopus Fitness Club (hereinafter referred to as “Oktopus” or “the Company”) is a legal entity registered in accordance with the laws of Georgia, acting as the data controller for the purposes of this Policy.

  • Company name: LLC “Oktopus”
  • Identification code: 405116084
  • Registered address: Georgia, Tbilisi, Vake District, Z. Anjaparidze St., No. 42

Detailed information about our activities can be found at the provided link.

2. Purpose of the Policy

This document provides detailed information about which personal data we collect about you, and how and why we use it.

By checking the relevant box and registering on our platform, or by signing the relevant document during in-person registration (joining the club), you agree to the provisions of this Policy and consent to the collection, use, and processing of your personal information. If you do not agree to this Privacy Policy, you will not be able to complete your registration.

3. Sources and Types of Personal Data Collected

We may collect your personal data through the Oktopus website/application during your registration process, as well as during in-person registration at Oktopus branches, upon additional information requests (if necessary), or upon your inquiry.

We may process the following personal data:

  • First and last name
  • Personal identification number
  • Date of birth
  • Gender
  • Contact information (email address, phone number)
  • Photograph
4. Purpose of Data Collection and Processing

We collect and process your personal data to fully, properly, and effectively fulfill our contractual obligations toward you, to offer you personalized or new products/services, to maintain communication with you, and to comply with legal obligations or requirements imposed by courts, administrative, or law enforcement authorities (if applicable).

5. Legal Basis for Processing Personal Data

The processing of your personal data is carried out based on your consent (including acceptance of this document), to enter into or perform a contract with you, and to review your applications. Your data may also be processed to comply with our legal obligations.

6. Sharing of Data with Third Parties and Transfer to Other Countries

Oktopus uses third-party services for portal management, administration, technical support, and maintenance, sharing your data with such entities acting as data processors for the purposes of this Policy.

Your data may be transferred to another country, specifically to a legal entity based in Poland:

  • Company name: Perfect Gym Solutions S.A.
  • Registration code (KRS): 0000540912
  • Address: 1 Franciszka Klimczaka Street, Warsaw 02-797, Poland
  • Tel: +44 20 3885 9312 (Poland)
  • Email: contact@perfectgym.com

Data protection is ensured through contractual safeguards and technical and organizational security measures implemented by Perfect Gym Solutions S.A.

Other than the above, we do not share your personal data with third parties, unless required by law or by courts, administrative, or law enforcement authorities. Data may also be shared when using third-party service providers (e.g., IT, legal, or audit services) necessary for our operations.

Data is shared only when legally permitted and when third parties undertake confidentiality and data protection obligations. Refusal to share data with third parties, as allowed by law, may result in limitations in providing our services.

7. Data Retention Period

We store the personal data of users who have purchased a membership for the entire duration of the contractual relationship. After termination, data is retained for an additional 3 (three) years from the beginning of the year following the end of the contractual period.

After that, data is archived for 6 (six) years in a separate, restricted-access storage system.

After the total 9 (nine) years of retention (3 years + 6 years of archiving), the Company ensures depersonalization or deletion of personal data, except for the user’s name, surname, personal number, and date of birth, which are deleted.

Data of users who registered but did not purchase a membership are deleted 3 (three) years after registration.

8. User Rights

You have the right to:

  • Obtain information on how your data is collected and processed
  • Request access to and copies of your data
  • Request blocking, correction, updating, completion, transfer, suspension, deletion, or destruction of your data if it is incomplete, inaccurate, outdated, or unlawfully processed
  • Request your data in a structured, commonly used, and machine-readable format and transfer it to another controller, where technically feasible
  • File a complaint with the Personal Data Protection Service or a court if your rights are violated

Please note that deleting your personal data may prevent us from providing services. We respond to such requests within 10 (ten) business days, unless otherwise required by law. Certain data deletion requests may be restricted under Georgian law.

9. Direct Marketing

With your consent, your personal data may be used for marketing purposes — to inform you about relevant products or offers.

We process your data to better understand your preferences and interests. Your data is processed for direct marketing only with your consent.

You may withdraw your consent at any time by contacting us, and we will stop such processing within 7 (seven) business days. You will still receive mandatory service-related notifications.

10. Automated Processing of Data

Oktopus does not process your personal data in an automated manner.

11. Security

We use appropriate technical and organizational measures to protect your data.

12. Updating Your Personal Data

You can review and update your personal data at any time on the portal or by contacting us directly. If you have any questions while updating your information, please contact us via the communication channels listed in this Policy or visit any Oktopus branch.

13. Changes to This Policy

This document may be updated periodically by Oktopus. Changes will be published on the Oktopus portal, and you are advised to review the Policy periodically. You will be personally notified of changes only when required by law.

14. Contact Information

If you wish to exercise your rights under the law and this Policy, you may visit any Oktopus branch or contact us via phone or email:

  • Addresses:
  • Tbilisi, Chabua Amirejibi 2
  • Tbilisi, Vazha-Pshavela 70
  • Tbilisi, Nino Ramishvili 20
  • Tbilisi, Lisi Street 14
  • Tbilisi, Sandro Euli 7
  • Batumi, Sheriff Khimshiashvili 29
  • Tel: 032 2 301 888
  • Email: info@oktopus.ge
15. Effective Date

This document enters into force on November 1, 2025, and remains valid indefinitely.