Zubalenok

Privacy Policy

Last updated: 18 May 2026
This Privacy Policy explains how ZUBALENOK d.o.o. collects, uses, shares and protects your personal data when you take the Zubalenok quiz, receive your personalised report, subscribe to our emails, or purchase one of our programs. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Croatian law. Please read it carefully — by using the quiz you confirm that you have understood it.

1Who we are

The data controller responsible for your personal data is:

"Zubalenok" is the brand operated by ZUBALENOK d.o.o. Where this policy says "we", "us" or "our", it refers to ZUBALENOK d.o.o. as the data controller responsible for your personal data.

2Scope of this policy

This policy covers personal data we process through the Zubalenok lead questionnaire ("the quiz"), the personalised report we send you, our email communications, and the checkout and delivery of our digital programs. It does not cover third-party websites or platforms that we link to — those services have their own privacy policies, which we encourage you to read.

3What data we collect

Data you provide directly

Data collected automatically

Data related to purchases

We do not intentionally collect special categories of data (such as health, racial or religious data). The quiz is about fitness and mobility preferences; please do not enter sensitive personal information in free-text fields.

4How and why we use your data

Under the GDPR we must have a lawful basis for every use of your data. Our uses and bases are:

PurposeLegal basis (GDPR Art. 6)
Generating and sending your personalised mini report and matched programPerformance of a service you requested / your consent — Art. 6(1)(b) & (a)
Sending marketing emails, offers and materials from ZubalenokYour consent — Art. 6(1)(a)
Processing your order and giving you access to a purchased programPerformance of a contract — Art. 6(1)(b)
Keeping accounting, tax and transaction recordsLegal obligation — Art. 6(1)(c)
Measuring quiz performance, campaign results and improving our funnelOur legitimate interest in running and improving our business — Art. 6(1)(f)
Detecting fraud, abuse and securing our systemsOur legitimate interest in security — Art. 6(1)(f)

Where we rely on legitimate interests, we have weighed those interests against your rights and freedoms. You can object to this processing at any time — see Your rights.

5Marketing & consent

When you continue past the email step of the quiz, you consent to receive emails from Zubalenok — your report, educational materials, and special offers. Your consent is entirely voluntary and you can withdraw it at any time, with no effect on programs you have already purchased.

To stop receiving marketing emails you can:

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. We may still send you essential service messages (for example, order confirmations or access details) where you have purchased a program, as these are necessary to perform our contract with you.

6Cookies & local storage

The quiz does not use advertising or third-party tracking cookies. It does use a small amount of browser storage that is strictly necessary for it to function — for example, a session identifier and a record of your quiz progress so the experience is not lost if you reload the page.

Pages that link to the quiz (such as ad landing pages or our social profiles) may use their own cookies or pixels; those are governed by the privacy and cookie notices of the platforms concerned.

7Who we share your data with

We do not sell your personal data. We share it only with service providers ("processors") who help us operate the quiz and deliver our programs, and only to the extent each needs to perform its role. Each provider is bound by a data processing agreement requiring them to protect your data and use it solely on our instructions.

ProviderRoleData involved
SupabaseDatabase & backend hosting for quiz dataContact details, quiz answers, approximate location, device & campaign data
IP-geolocation providerConverts IP address into an approximate locationYour IP address at the moment of lookup (not retained by us)
KwigaCourse platform & checkout that hosts and delivers our programsEmail, name, order & access data
StripePayment processingPayment and billing details, transaction data
Email service providerSends your report and our email communicationsEmail address, name, engagement data
Anthropic (Claude API)Optional analysis of quiz performanceAggregated / de-identified statistics only — not your individual contact details

We may also disclose personal data where required by law, to comply with a legal request from a competent authority, or to establish, exercise or defend legal claims. If our business is reorganised, merged or sold, data may be transferred to the successor entity under the same protections.

8International data transfers

Some of our providers are based outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA, we ensure an appropriate safeguard is in place — typically the European Commission's Standard Contractual Clauses, an adequacy decision, or an equivalent approved mechanism — so that your data continues to receive a level of protection essentially equivalent to that within the EU. You can request more detail on these safeguards using the contact details below.

9How long we keep your data

We keep personal data only as long as necessary for the purpose it was collected for:

10Your rights

Under the GDPR you have the following rights regarding your personal data:

To exercise any of these rights, email Zubalyevhen@gmail.com. We will respond within one month, as required by the GDPR. Exercising your rights is free of charge, and we may ask you to verify your identity before we act on a request.

11Data security

We apply appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access — including encryption of data in transit, access controls limiting who can view personal data, and the use of reputable processors that maintain recognised security standards. No method of transmission or storage is completely secure, but we work to protect your data and to detect and address any incident promptly. If a personal data breach is likely to result in a high risk to your rights, we will notify you and the relevant supervisory authority as required by law.

12Children's privacy

The quiz and our programs are intended for adults. They are not directed at children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

13Automated decision-making

The quiz matches you to a recommended program based on the answers you give. This is a simple, rules-based recommendation designed to help you choose — it is not a decision that produces legal or similarly significant effects on you, and you are always free to choose a different program or none at all. We do not carry out profiling that has a legal or similarly significant effect within the meaning of GDPR Article 22.

14Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The "Last updated" date at the top of this page shows when it was last revised. If we make a material change, we will take reasonable steps to inform you. We encourage you to review this page periodically.

15Contact & complaints

For any privacy question or to exercise your rights, contact us at:

ZUBALENOK d.o.o.

Radnička cesta 52, 10000 Zagreb, Croatia

Zubalyevhen@gmail.com

If you are not satisfied with how we have handled your data, you have the right to lodge a complaint with a data protection supervisory authority. In Croatia this is the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka — AZOP), Selska cesta 136, 10000 Zagreb — azop.hr. You may also contact the supervisory authority in your own EU country of residence.