Privacy policy

1. IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER

The controller of your personal data is:

JML Fitness Line, s.r.o.
Velíková 180, 763 14 Zlín - Velíková, Czech Republic
Company ID No.: 27692582
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Telephone: +420 577 914 505

(hereinafter referred to as the “controller”)

The controller has not appointed a Data Protection Officer.

2. LEGAL BASES AND PURPOSES OF PERSONAL DATA PROCESSING

We process your personal data on the following legal bases:

a) Performance of a contract (Article 6(1)(b) of the GDPR)

Processing of personal data necessary to handle your order and perform the purchase contract — first name, surname, delivery address, email address, telephone number and payment details. Without the provision of this information, the contract cannot be concluded or performed.

b) Legitimate interests of the controller (Article 6(1)(f) of the GDPR)

Processing necessary to ensure the operation of the online store, secure the website and prevent fraud. This category also includes necessary technical cookies required for the website to function (for details, see the Use of Cookies page). On the basis of legitimate interests, we also send existing customers commercial communications concerning our own similar products and services in accordance with Section 7(3) of Czech Act No. 480/2004 Coll. You have the right to object to this processing at any time (see Section 7).

c) Consent (Article 6(1)(a) of the GDPR)

Processing based on your explicit consent — statistical and marketing cookies and the measurement of website traffic and conversions. You may withdraw your consent at any time (see Section 7).

d) Compliance with a legal obligation (Article 6(1)(c) of the GDPR)

Processing required by law — maintaining accounting and tax records and archiving tax documents.

3. SCOPE OF PERSONAL DATA PROCESSED

We process the following categories of personal data:

• Identification data — first name, surname, Company ID No. and VAT ID No. (for businesses)
• Contact details — email address, telephone number, delivery address and billing address
• Order details — order contents, payment details and purchase history
• Technical data — IP address (anonymised), browser type and cookies (for details, see the Use of Cookies page)

The controller does not carry out automated individual decision-making or profiling within the meaning of Article 22 of the GDPR.

4. PERSONAL DATA RETENTION PERIODS

5. RECIPIENTS OF PERSONAL DATA

Your personal data may be disclosed to the following categories of recipients:

• Shipping companies — for the purpose of delivering goods
• Payment service providers — for the purpose of processing payments
• Online store platform provider — for the purpose of the technical operation of the online store
• Analytics and marketing services — for the purpose of measuring website traffic and conversions (with consent only)

Third-party analytics and marketing services

A detailed overview of the cookies stored by these services is available on the Use of Cookies page.

6. DATA TRANSFERS TO THIRD COUNTRIES

Google services (Analytics, Ads and Customer Reviews) may process data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of personal data protection within the meaning of the European Commission’s adequacy decision. For more information, visit dataprivacyframework.gov.

7. YOUR RIGHTS

In connection with the processing of your personal data, you have the following rights:

• Right of access (Article 15 of the GDPR) — you have the right to obtain confirmation as to whether your personal data is being processed and, where this is the case, to access that data.
• Right to rectification (Article 16 of the GDPR) — you have the right to request the correction of inaccurate personal data.
• Right to erasure (Article 17 of the GDPR) — you have the right to request the erasure of personal data where the purpose of the processing no longer applies or you have withdrawn your consent.
• Right to restriction of processing (Article 18 of the GDPR) — you have the right to request the restriction of processing in the circumstances specified by the GDPR.
• Right to data portability (Article 20 of the GDPR) — you have the right to receive your personal data in a structured and commonly used format.
• Right to object (Article 21 of the GDPR) — you have the right to object to processing based on the controller’s legitimate interests, including the sending of commercial communications.
• Right to withdraw consent — you may withdraw your consent to the processing of personal data at any time:
  • by email at This email address is being protected from spambots. You need JavaScript enabled to view it.,
  • cookie consent may be withdrawn by clicking the “Cookie Settings” bar in the bottom-left corner of the page (for details, see the Use of Cookies page).

  The withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

• Right to lodge a complaint — if you believe that the processing of your personal data has infringed the GDPR, you have the right to lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.

8. COOKIES

This website uses cookies. Detailed information about the cookies we use, their purposes, the third-party services we use and how you can manage your consent is available on the separate Use of Cookies page.

This Privacy Policy takes effect on 27 July 2026 and replaces the previous version dated 17 May 2018.