Privacy policy

Who is responsible

The data controller is Mintaras Grinius. For any data question, write to labas@drasiai.lt.

Clients: the quiz and your request

We collect your quiz answers (goal, experience, how often you want to train, what worries you, area, budget), your name, email and, if you give it, your phone number.

We use them to match you with suitable trainers and to pass your answers and contact details to the one trainer you choose. Other trainers don't receive your data. We also send you a confirmation email.

The legal basis is your consent (GDPR Art. 6(1)(a)), given when you submit the quiz. You can withdraw it at any time by writing to us.

We keep this data for 12 months after you submit the quiz, then delete it. The trainer you choose receives your contact details by email and from then on acts as an independent controller in their contact with you.

Trainers: profile drafts

For trainers we invite to join, we prepare a private profile draft from professional information they have published themselves: name, gym, area, specialty, prices and public bio. We collect it by hand and never copy photos.

The legal basis is legitimate interest (GDPR Art. 6(1)(f)) in offering a service for the trainer's professional activity. Our first message says where the information came from and how to delete it.

A draft is never public: only someone with its personal link can see it, and search engines don't index it. If the trainer doesn't publish it, we delete it after 30 days. For trainers who decline, we keep their handle or email on a do-not-contact list so we never write again.

A trainer can change or delete a published profile at any time.

Visitor statistics

We use PostHog (EU servers) to count anonymous events, such as how many people started the quiz. We use no cookies and store nothing on your device, so each visit counts separately. Names, emails and quiz answers are never sent to analytics.

Who else receives data

These providers process data on our behalf: Supabase (database, Frankfurt, EU), Resend (email, Ireland, EU), Vercel (hosting) and PostHog (analytics, EU).

Where a provider processes data outside the EU/EEA (e.g. Vercel in the US), the transfer relies on the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

We don't sell data or use it for advertising.

Your rights

You have the right to access, correct and delete your data, restrict or object to its processing on the basis of legitimate interest, withdraw consent, and receive your data in a portable format. Write to labas@drasiai.lt; we reply within 30 days.

If you believe your data is processed unlawfully, you can complain to the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt).