This policy applies to online bookings for bowling, LaserTag, karting, birthday parties and tickets for the Happy Land play area at all Kooglana locations.
The controller is Klopa i cuga d.o.o., Janka Polića Kamova 81A, 51000 Rijeka, OIB 97289313530, for the Rijeka, Pula and Varaždin locations.
For Kooglana Zagreb the organiser and controller is Strike j.d.o.o., Z. Kučića 39, 51000 Rijeka, OIB 04026617881, MBS 040373041,
registered at the Commercial Court in Rijeka.
The name of the person making the booking, mobile number, e-mail address, chosen location, time slot and activities, number of participants and deposit payment details. For party bookings, also the name and age of the birthday child. For LaserTag and karting, the data from the participation declaration, and for participants under 16 the name of the parent or guardian. If you request a company invoice: company name, tax number, address and city. For a Happy Land ticket: the first name, surname, e-mail address and mobile number of the accompanying parent or guardian (mandatory), visit date and number of tickets, and the time and version of the rules accepted. For parties the mobile number is verified by a one-time SMS code. Card data is processed by the payment provider; Kooglana does not store it in full.
Performance of the booking and service contract (Art. 6(1)(b) GDPR); invoicing and accounting obligations (point c); participant safety and proof of awareness of the rules through the participation declaration, and prevention of booking abuse including SMS verification (point f, legitimate interest); issuing and delivering the Happy Land ticket and performing the contract (point b); contacting the person who is with the child in the play area for the child's safety and use of the ticket, and proof that the parent or guardian was informed of the supervision rules — time of confirmation and version of the rules (point f, legitimate interest; the mandatory mobile number is needed for this purpose, not for marketing); marketing messages solely on the basis of consent (point a). Entering a mobile number does not include promotional messages.
Our booking form has no field for health data and we do not ask for it. If you tell us about an allergy, dietary requirement or similar need by phone or in chat, we do not record it in the system — we pass it directly to the staff preparing your event. The most reliable way is to tell our staff on arrival. Health data can exist in our records only on the basis of your explicit consent (Art. 9(2)(a) GDPR) — without it the system does not accept it. If recorded, we delete it 6 months after the booked date.
We send news and offers only with your separate consent, given separately for e-mail and for SMS or WhatsApp. You may withdraw consent at any time — via the unsubscribe link in every message or by contacting the controller — with no effect on your booking.
Data is available to authorised staff according to their role and to contracted processors necessary for hosting, the application, the point of sale, sending SMS and e-mail, and collecting the deposit. Data processing agreements are in place with processors (Art. 28 GDPR). Data is not sold to third parties. The servers on which data is stored are located in Germany and Finland. For sending SMS messages we use a service provider established outside the European Economic Area, to which only the mobile number and the message content are transmitted.
Chat assistant. Questions you ask the chat assistant on our pages and in the booking flow are processed by artificial intelligence. The content of your messages in that conversation is passed to the machine-inference providers DeepSeek (People's Republic of China) and Groq, Inc. (USA); when they are unavailable, the reply is produced by a model running on our servers in the European Union. Only the text needed for the reply is transferred, over an encrypted channel. Transfers outside the European Economic Area are based on the European Commission's standard contractual clauses under Implementing Decision (EU) 2021/914, with additional technical measures. Do not enter personal or health data in the chat that you do not wish to share — for a booking we ask for it only in the form.
After the period expires we delete the data or irreversibly anonymise it so that only statistics without personal data remain.
| Child's data — name, age, health notes | 6 months after the booked date |
| Booking person's data — name, phone, e-mail | 24 months after the booked date |
| Signed participation declaration | 24 months after signing |
| Parent/guardian data for a Happy Land ticket (first name, surname, e-mail, mobile) and record of confirmation of the rules | 24 months after the visit date |
| Invoice, deposit and company invoice data | statutory accounting retention period |
| Marketing consent and proof of it | until withdrawal, then a further 24 months |
| Kooglana Club membership | duration of membership and 12 months after last activity |
The booking is submitted by an adult, who also provides all data about the child. We process a child's data only to the extent necessary for the safe organisation of the service and delete it sooner than other data. Children do not receive direct marketing and their data is not used for profiling. For participants under 16 the participation declaration is signed by a parent or guardian. For a Happy Land ticket, the ticket is bought and the data provided by an adult; we do not record any personal data about the child in the system.
You have the right of access, rectification, erasure, restriction of processing, portability, and the right to object to processing based on legitimate interest. Withdrawing consent does not affect the lawfulness of earlier processing. Send your request to the location's contact address. You may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, Zagreb.
Essential cookies and browser storage (cart, selected language and venue, login and a record of your cookie choice kgl_consent – 12 months) always work, because ordering and bookings do not work without them.
Analytics is switched on only if you choose “Accept” in the cookie bar. We then use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to understand how the pages are used and to improve our offer and ordering: pages visited and traffic source, menu views, items added to or removed from the cart, the start and outcome of an order (order number, amount, items, venue, time until pick-up, reason an order failed), device and browser type and approximate location (country/city). We do not send your name, phone number or order note to Google. Google Analytics sets the cookies _ga and _ga_* (up to 2 years); event data is kept in Google Analytics for 14 months. Google signals and ad personalisation are switched off. With the same consent our own analytics records page usage with a pseudonymous identifier kgl_anon in browser storage, on the servers of our IT partner in the EU. On some pages the Google Tag Manager of the existing kooglana.hr website is also loaded, likewise only after consent. With the same consent we also use Microsoft Clarity (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland), a heatmap and session-recording tool that records clicks, scrolling and navigation on the pages in anonymised form to improve the user experience; Clarity sets the cookies _clck (up to 12 months) and _clsk (1 day). The legal basis is your consent (Art. 6(1)(a) GDPR). Google may also process data in the USA; Google LLC is certified under the EU-US Data Privacy Framework (European Commission decision of 10 July 2023).
You can withdraw your consent at any time, as easily as you gave it: Withdraw consent and delete analytics cookies — the cookie bar is then shown again on the home page.
If you turn on notifications yourself on the Notifications page, we store your subscription data: the address of your browser's push service (Google, Apple, Mozilla or Microsoft), technical keys for encrypting the message, language, the location you chose, browser type and your consent choices. We send notifications about bookings and orders based on the consent you give by turning notifications on. Marketing notifications (offers and news) are sent only if you separately and explicitly chose them, and never between 21:00 and 08:00. Messages travel encrypted through your browser's push service (Google LLC, Apple Inc., Mozilla, Microsoft), which cannot read their content. We keep the subscription until you turn it off or it becomes invalid. You can withdraw consent at any time on the Notifications page or in your browser settings.
Rijeka: rijeka@kooglana.hr · Pula: pula@kooglana.hr · Varaždin: varazdin@kooglana.hr · Zagreb: zagreb@kooglana.hr
Version 1.7 · 27.10.2026