Privacy policy
Last updated: October 2026
1. Who is responsible
The controller is GLKPR, obrt za savjetovanje i internet prodaju, owned by Marko Markiš, Obrtnička 19, Velika Ludina, Croatia. OIB: 78062522991. Contact me about your data at coach@glkpr.com.
2. The contact form
I use your name, email and message to reply to your enquiry. Framer processes the form submission and it is delivered to my email. The legal basis is taking steps at your request before providing a service, or my legitimate interest in answering other enquiries.
3. Booking a session
I use your name, email, chosen session and notes to arrange the call you requested. Google Calendar processes the booking and invitation. The legal basis is arranging and providing the requested service.
4. The newsletter
When you subscribe, your email address and any name you provide are stored in Sender, which manages GLKPR newsletters, confirmation emails and unsubscribes. The newsletter includes goalkeeper tips, guides, tool updates and occasional GLKPR offers. You confirm your email before joining and can unsubscribe using the link in any newsletter. Creating a GLKPR account does not subscribe you automatically. The legal basis is your consent.
The free-tool signup is a separate group in Sender. Your email address and any name you provide are used only to tell you when a new free GLKPR tool goes live. You confirm your email before joining and can unsubscribe using the link in those emails. To also receive tips and offers, subscribe separately to the newsletter. The legal basis is your consent.
5. Your free account
If you create an account, Supabase stores your email, name, membership plan and account dates. Google supplies your name and email if you choose Google sign-in. Your account may be linked to your Stripe customer record. Resend delivers account-confirmation and password-reset emails. The website and app use a shared login cookie to maintain your session. This is necessary to provide the account service; security logs support the legitimate interest in keeping it secure. Free-use counts are stored in your browser. Contact me to request account deletion; records required by law may need to be retained.
6. Purchases
Stripe handles payment. I receive customer details and what you bought, but not your full card details. The legal basis is fulfilling your purchase and meeting accounting and tax obligations. The drill library is delivered through Google Drive, which processes access to the files under its own privacy terms.
7. The video analyser
Everything you log in the analyser stays in your own browser, on your own device. Your video is never uploaded and I never see your data. The flip side is that clearing your browser data clears your work, so export a backup from inside the tool if it matters to you.
8. Visitor statistics
Google Analytics helps me see which pages get read and how people find the site. Google Analytics and Google Tag Manager load only if you accept Analytics in the cookie banner. You can reject analytics and still use the site, or change your choice at any time through Cookie Settings in the footer. If you withdraw consent, the page reloads to stop the Google tags.
9. What I do not do
I do not sell your data. Framer hosts the website; Cloudflare hosts app.glkpr.com and processes requests and the login cookie to check access; Supabase handles accounts; Resend sends account emails; Sender handles subscriptions to emails; Stripe handles payments; Google Calendar handles bookings and Google Drive delivers the drill library. Google Analytics is used only with your consent. Some providers may process data outside the EEA, including in the United States. Such transfers require an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses. Contact me for details of the safeguards relevant to your data.
10. How long I keep things
I keep enquiries and booking records for as long as needed to respond, provide the service and resolve related claims. Account data is kept while the account is active and is reviewed when you request deletion. Newsletter and new-tool subscriptions last until you unsubscribe; a minimal suppression record may be kept to respect that choice. Invoices and related transaction records are retained for the period required by Croatian accounting and tax law. These legal obligations can limit immediate deletion. Contact me for the retention period applicable to your record.
11. Your rights
You can request access, correction, deletion, restriction or a portable copy of your data where the GDPR conditions apply. You can object to processing based on legitimate interests and withdraw consent at any time without affecting earlier lawful processing. Email coach@glkpr.com to exercise your rights. You can also complain to the Croatian Personal Data Protection Agency, AZOP (https://azop.hr), or your local supervisory authority.
12. Younger goalkeepers
GLKPR is written for goalkeepers, coaches and clubs. If you are under 16, use the contact and booking forms with a parent or guardian who knows about it.
13. Changes to this policy
If anything meaningful changes here, the date at the top will tell you.
