PRIVACY POLICY

E-SHOP AND ŠVIHEJ PORTAL

Effective from: January 28, 2026

Welcome to a document that is not usually the most entertaining, but is important. This policy explains how we at ŠVIHEJ JUMP ROPES s.r.o. (hereinafter referred to as "we") handle your data, whether you are buying a jump rope from us or training in the Švihej Portal (on the web or in the mobile application). We want it to be readable and fair.

1. Who Is the Controller of Your Data

The controller of personal data, i.e., the one who collects data and is responsible for it, is us:

ŠVIHEJ JUMP ROPES s.r.o.

Company ID: 10985301,

VAT ID: CZ10985301

Registered office: Poděbradova 1243/7, 702 00 Ostrava

The company is registered in the Commercial Register maintained by the Regional Court in Ostrava, Section C, Insert 86304.

You can contact us at any time by email: info@svihej.cz or call +420 555 222 531. We do not have a designated Data Protection Officer (DPO), but we will personally respond to your privacy inquiries.

2. What Data We Collect and Why (Purposes and Legal Bases)

We process data in three main situations. Take a look at the one that applies to you:

2.1. When You Shop at the E-shop (www.svihej.cz)

If you order goods, we need data to process the order.

  • What data: First name, last name, billing and delivery address, email, phone number, information about ordered goods and purchase history.

  • Why we do it:

    • To deliver goods to you and conclude a purchase contract.
    • To inform you about the status of your order.
    • To fulfill legal obligations (accounting, taxes).

  • Legal basis:

    • Performance of a contract (pursuant to Art. 6(1)(b) GDPR).
    • Compliance with a legal obligation (pursuant to Art. 6(1)(c) GDPR).

2.2. When You Use Švihej Portal (Web Interface and Mobile Application)

If you register for our training platform (FREE or PREMIUM version).

  • What data:

    • Identification: First name, last name (or nickname), email, and age.
    • Training data: Workout history, statistics, completed challenges, earned badges, progress in "Jumper's Journey".
    • Optional data: Profile photo, age, weight, skill level (if you fill them in for better training personalization).
    • User content: Photos, videos, and comments that you upload to the community section.
    • Subscription data: Information about membership validity and payment history (note: we do not store complete card numbers, those are securely managed by Stripe, Apple, or Google payment gateways).
    • Push notifications: Device token for sending notifications (if you enable notifications).

  • Why we do it: To provide you with the service – maintain your account, back up your workout history, enable competition in leaderboards, and provide access to training content.

  • Legal basis: Performance of a contract – providing the service according to the General Terms of Use of "ŠVIHEJ PORTAL" (pursuant to Art. 6(1)(b) GDPR).

The service is intended for persons over 15 years of age (see General Terms of Use).

2.3. When You Just Contact Us (Inquiry)

If you write to us via a form or email with a question.

  • What data: Name, email, phone, and message text.

  • Why we do it: To be able to respond to you or prepare an offer.

  • Legal basis: Pre-contractual negotiations at your request (pursuant to Art. 6(1)(b) GDPR).

3. Marketing and Newsletters (Commercial Communications)

We want to inform you about news, promotions, and jump rope tips, but we don't want to spam.

  • If you are our customer/user: We may use your email to send news about our services and products based on so-called legitimate interest (pursuant to Art. 6(1)(f) GDPR). We assume that as a jumper, you are interested in news about jump ropes.

  • If you are not a customer: We will only send you newsletters if you actively subscribe to them yourself – you give us consent (pursuant to Art. 6(1)(a) GDPR).

  • How to cancel: You can unsubscribe at any time by clicking the link in the footer of each email or write to us at info@svihej.cz.

4. Tracking and Analytics in Mobile Application

In the mobile application, we use tools for measuring ad effectiveness and analytics. Processing only occurs with your consent:

  • Ad Tracking (ATT): On iOS, we will ask for permission through the App Tracking Transparency system dialog. On Android, through a custom dialog. This permission enables measuring ad effectiveness (e.g., Meta Ads). For these purposes, we process device identifiers (IDFA on iOS, GAID on Android).

  • Analytics: We will separately ask for your consent to collect usage data (errors, session recordings, heatmaps, events) to improve the service. These recordings are linked to your user account.

You can decline both permissions without any impact on the app's functionality. You can change your decision at any time in the app settings.

5. Camera, AI Features, and Privacy (Web and Mobile Application)

Švihej Portal in both its web and mobile versions may include a "Jump Counter" feature that uses your device's camera (phone, tablet, or computer). Here we prioritize maximum privacy and respect Apple and Google requirements:

  • How it works: The system uses your device's camera to detect movement (jumping) in real time.

  • Local processing: Image processing takes place exclusively on your device. The video recording from the camera used for counting is not sent anywhere, is not stored on our servers, and no one else sees it. The system does not collect or store data about facial features (Face Data) or other biometric identifiers. It is used only for immediate score (number) calculation.

  • Content you share: If you decide to consciously record and share a workout video yourself (e.g., to the community section or as proof for a challenge), then the video is processed as regular User Content, which we and other users have access to according to your settings.

  • Permissions: You must grant camera access on your device (browser or app). You can revoke the permission at any time in your device settings.

6. How Long We Retain Data

We don't keep data forever, only for as long as necessary (according to the storage limitation principle):

  • Account in Portal/App: For the duration of your registration. If you delete your account, we anonymize or delete data within 30 days (technical backups max. within 90 days).

  • E-shop purchases: We are required by law to archive accounting and tax documents for 10 years.

  • Marketing: Until you unsubscribe, but no longer than 10 years from the last purchase or activity.

  • Incomplete inquiries: If we communicate and do not conclude a contract, we will delete the data no later than 10 years from the last communication.

7. Who Gets Access to the Data (Recipients)

We do not sell your data. However, for our services to function, we use vetted partners (processors) who help us with technology, payments, and logistics. They are bound by confidentiality and data processing agreements.

Main partners who help us:

  • E-shop platform: Shoptet a.s. (Company ID: 289 35 675)
  • Goods dispatch: Šimon Kracík (Company ID: 09808833), PARSLEY TRADE s.r.o., (Company ID: 17303354)
  • Software development: Hybek Software s.r.o. (Company ID: 22345574)

Payment gateways:

  • Comgate Payments a.s. (Company ID: 27924505); Skip Pay s.r.o. (Company ID: 07093331) (for e-shop)
  • Stripe Payments Europe, Ltd. (for web portal subscriptions)
  • Apple Inc. and Google LLC (for payments in mobile applications)
  • RevenueCat, Inc., 1032 E Brandon Blvd #3003, Brandon, FL 33511, USA (subscription management in mobile applications)

Marketing and advertising tools:

  • ECOMAIL.CZ, s.r.o. (Company ID: 02762943) (emailing services)
  • Shoptet a.s., (Company ID: 28935675) (emailing services)
  • WeFlow Team, družstvo (Company ID: 19202211) (marketing data processing)
  • Meta (Facebook Pixel, Meta Ads, Instagram Ads), Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Analytics tools:

  • Google Analytics (GA4), Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

  • Microsoft Clarity, Service provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland

  • PostHog, Service provider: PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA (analytics, error reporting, and user session recordings for identifying issues in the application – recordings do not capture passwords or payment data)

  • Other collaborators: Marek Vaněček (data processing), Daniel Rola (marketing), Filip Kolesár (development), Nikola Šťastná (development).

We process personal data primarily in the European Union. When we use global partners (e.g., Google, Stripe), we ensure they meet data protection standards for transfers outside the EU (e.g., Data Privacy Framework). These tools may process technical user data during their operation (e.g., IP address, device information, website behavior). Processing occurs based on user consent via the cookie banner or in accordance with applicable legal regulations.

8. Your Rights (What You Can Ask of Us)

Under GDPR (particularly Articles 15–21), you have a number of rights against us. You can ask us for:

a) Access: Want to know exactly what we know about you? Write to us, we'll send you a statement.

b) Rectification: Changed your email or address? Let us know, we'll correct it.

c) Erasure (Right to be forgotten): If you wish and the law doesn't prevent us (e.g., the need to archive invoices), we will delete the data. The "Delete account" function in the account settings in Švihej Portal (on the web or in the app) serves for erasure.

d) Restriction of processing: In certain cases, you may want to "freeze" the data.

e) Portability: You may want your data in a machine-readable format for transfer elsewhere.

f) Objection: If you don't like that we send you newsletters based on legitimate interest, let us know, we'll stop.

g) Complaint: If you feel that we are not handling data correctly (which won't happen, but you have the right), you can file a complaint with the Office for Personal Data Protection (www.uoou.cz).

9. Cookies and Analytics

Our websites and applications use cookies and analytics tools (e.g., Google Analytics, Facebook Pixel) so we know what you enjoy, how many people exercise, and how to improve the pages.

  • When you first visit the website, a Cookie banner will pop up where you can set what you allow us.

  • Technical cookies (necessary for the website to function) always work, others (marketing, analytics) only with your consent.