Privacy Policy

Last updated: 2 September 2026

1. Who We Are

The controller of your personal data is UAB “Treniruoklių gamyba”, company code 304446782, Beržiniškės g. 2A, Naisių k., Šiaulių r., LT-81474, Lithuania. This policy covers gfverified.com, which includes both the GFV gym platform and the Colossus Hall of Fame at gfverified.com/champions. The Hall of Fame was previously published at gfcolossus.com; that address now redirects here and is no longer operated as a separate service. For any question about your data, or to exercise the rights in section 7, contact contact@gfverified.com.

2. Data We Collect From You

We collect information you provide when registering, including name, email, and for gym owners, business registration details. When you sign up to our pre-launch list, we store the email address you provide, the timestamp of your consent, and your IP address. Event-recognition enquiries contain the contact and event details you submit.

3. Gym Data We Obtain From Other Sources

Part of the directory is built from OpenStreetMap, an open public map database. From it we import gym names, addresses, telephone numbers, websites and, where the source lists them, email addresses. We did not obtain this information from you directly. Where a listing identifies an individual — a sole trader’s name, a personal mobile number, or an email address containing a person’s name — it is personal data, and this section serves as your notice under Article 14 GDPR. We process it on the basis of our legitimate interest in maintaining a complete and useful gym directory. You may ask us to correct, hide, or delete any listing at contact@gfverified.com, and we will do so.

4. Champion Profiles

Colossus Hall of Fame profiles at gfverified.com/champions publish an athlete’s name, photographs, video, competition record, and biography. These pages are public and permanent by design — they are the destination of the QR code engraved on each Colossus trophy. We publish them only with the athlete’s consent, which may be withdrawn at any time by contacting us; withdrawal removes the public profile.

5. How We Use Data

Your data is used to provide platform services, communicate with you, review certification and event-recognition requests, and improve the user experience. Pre-launch signups receive a single launch announcement when the platform opens. We do not run analytics or marketing tracking.

6. Retention

IP addresses attached to pre-launch signups and event enquiries are truncated to a coarse network range after 30 days. Event-recognition enquiries are deleted after 24 months. Rejected gym-claim evidence is deleted after 90 days, approved claim evidence is removed after the same period while the ownership record is retained, security activity logs are retained for 12 months, and idle sessions are removed after 30 days.

7. Data Sharing

We do not sell your personal data. Business information for listed gyms is displayed publicly on the platform. We use the following processors and recipients: Interneto vizija UAB (server and email hosting, Lithuania); Mapbox (maps on gfverified.com, United States, under Standard Contractual Clauses); CARTO (map tiles on gfverified.com gym pages and in the mobile app; the Hall of Fame has no map); and YouTube, operated by Google (embedded video — when you play an embedded video, YouTube receives your IP address and may set cookies under its own privacy policy).

8. Your Rights (GDPR)

You have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and — where we rely on consent — to withdraw that consent at any time. Contact contact@gfverified.com to exercise these rights. Pre-launch subscribers can also unsubscribe instantly via the link in any email we send — clicking it permanently removes your record. If you believe we have handled your data improperly, you have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt).

9. Cookies

We use only essential cookies for authentication and session management. We do not use analytics, advertising, or tracking cookies, so no cookie-consent banner is required.