Privacy Policy

1. Who we are

The data controller is Bokso klubas "Olimpietis", Taikos al. 11, Panevėžys, 35148.

For any privacy questions or requests, contact us at elvis@bkolimpietis.lt or by phone at (0-633) 94109.

2. What data we collect

• Account data: your full name, email address and password. Passwords are stored only in encrypted (hashed) form by our authentication provider - we can never see them.
• Profile data you choose to add: username, profile photo, bio, location, age, experience level, stance, weight class and fight record (wins, losses, draws).
• Technical data: IP address, browser type and request logs, which our hosting provider processes to deliver the website and protect it from abuse.
• Analytics data (only with your consent): pages visited, referring website, device and browser type, and country. Vercel Web Analytics does not use cookies and does not identify individual visitors.
• Communication data: the content of messages you send us by email or phone.

3. Why we use your data and on what legal basis

• To create and manage your account and provide member features - performance of a contract (GDPR Art. 6(1)(b)).
• To send club announcements (training, events, schedule changes) to registered members by email - our legitimate interest in keeping members informed (Art. 6(1)(f)). You can ask us to stop at any time.
• To keep the website secure, prevent abuse and fix errors - our legitimate interest (Art. 6(1)(f)).
• To collect visit statistics and show the embedded Google Map - your consent (Art. 6(1)(a)), which you can withdraw at any time via "Cookie settings" at the bottom of every page.
• To respond to your enquiries and to comply with legal obligations (Art. 6(1)(c) and (f)).

4. Who can see your data

Your profile is visible only to you and to the club's administrators. Profile photos are stored so that anyone who has the direct image link can open the image. We do not sell your personal data or share it for advertising.

We use the following service providers (data processors), who process data only on our behalf and under data processing agreements:

• Supabase - database, user authentication and file storage.
• Vercel - website hosting and anonymous analytics.
• Resend - sending emails (account confirmation, password reset, announcements).
• Google - the embedded map, only if you allow the "Maps" category.

5. Transfers outside the EU

Some of our providers are based in, or may process data in, the United States. Such transfers are protected by the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

6. How long we keep your data

• Account and profile data - for as long as your account exists. If you ask us to delete your account, we delete your data within 30 days, unless the law requires us to keep it longer.
• Technical logs - for a short period set by our hosting providers, usually no longer than 30 days.
• Your cookie choices - 12 months, after which we ask you again.
• Correspondence - as long as needed to handle your enquiry.

7. Cookies

Cookies are small text files stored in your browser. We use necessary cookies, which the website can't work without, and - only with your consent - cookies set by Google Maps. Vercel Web Analytics does not set cookies, but we also only enable it with your consent.

You can change your choice at any time via "Cookie settings" at the bottom of every page, or delete cookies in your browser settings.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• correct inaccurate data (most profile data you can edit yourself in your account);
• have your data deleted;
• restrict or object to processing, including email announcements;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting processing carried out before the withdrawal.

9. How to exercise your rights or complain

Send your request to elvis@bkolimpietis.lt. We will respond within one month. We may ask you to confirm your identity before fulfilling the request.

If you believe we process your data unlawfully, you can lodge a complaint with the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt) or the data protection authority in your country.

10. Children

Our club trains people of all ages. Children under 14 may create an account only with the consent of a parent or legal guardian. If you are a parent and believe your child has given us personal data without your consent, contact us and we will delete it.

11. Security

We protect your data with encrypted connections (HTTPS), access controls that limit who can see member data, and secure, reputable service providers.

12. Changes to this policy

We may update this policy from time to time. The date of the latest update is shown at the top of this page. If the changes are significant, we will inform registered members by email.