FITNESS OPREMA

phynx@oprema-fitness.com

Riječka ulica 10, 10000 Zagreb, Croatia

+385 1 659 0326

ORDER NOW

oprema-fitness

Effective Date: August 30, 2026

1. Introduction

FITNESS OPREMA d.o.o. za trgovinu i usluge (“we”, “us”, “our”) operates the e-commerce website accessible at www.oprema-fitness.com, a dedicated platform offering a curated collection of mini fitness equipment designed to help users maintain consistent workout routines and achieve every fitness milestone from any location. This Privacy Policy is created to inform all users (“you”, “your”) of how we collect, use, disclose, and safeguard your personal information when you visit our website, make purchases from our store, or interact with our services in any capacity.

We recognize that your personal privacy is of utmost importance, and we are fully committed to protecting the data you share with us in full compliance with all applicable data protection regulations, including the General Data Protection Regulation (GDPR) for users located in the European Union, as well as all relevant local privacy laws in Croatia and across the regions we serve. By accessing or using our website, you acknowledge that you have read, understood, and agree to the terms outlined in this Privacy Policy. If you do not agree with any part of this policy, we kindly ask that you do not use our platform or submit any personal information to us.

2. Contact Information

For any questions, concerns, or requests related to your personal data or this Privacy Policy, you may reach out to our designated data protection representative using the following contact details:

  • Full Entity Name: FITNESS OPREMA d.o.o. za trgovinu i usluge
  • Official Website: www.oprema-fitness.com
  • Contact Email: phynx@oprema-fitness.com
  • Physical Address: Riječka ulica 10, 10000 Zagreb, Croatia
  • Contact Phone Number: +385 1 659 0326

We will respond to all legitimate privacy-related inquiries within 7 business days of receiving your message, and we will make every reasonable effort to resolve any concerns you may have about how your data is managed.

3. Types of Information We Collect

We only collect information that is necessary to deliver our high-quality e-commerce services to you, and we never gather personal data without your explicit awareness. The categories of information we may collect include:

3.1 Information You Provide Voluntarily

This refers to all data that you actively share with us when interacting with our website:

  • ‌Account Registration Data‌: When you create a user account on our platform, we collect your full name, email address, chosen password, and preferred communication settings. This account lets you track your order history, save favorite fitness equipment products, and access faster checkout options for future purchases.
  • ‌Order and Transaction Data‌: When you place an order for our mini fitness equipment collection, we collect your full shipping address, billing address, contact phone number, payment details (processed securely through our certified payment providers), and order preferences to ensure your purchased items are delivered correctly and on time.
  • ‌Customer Support Correspondence Data‌: When you reach out to our support team with questions about our products, orders, or return policies, we collect the content of your messages, your contact information, and any additional details you share to help us resolve your inquiry efficiently.
  • ‌Newsletter and Marketing Preferences‌: If you sign up to receive our promotional updates, workout tips, and exclusive offers on new fitness equipment launches, we collect your email address and your stated preferences for the type of content you wish to receive.
  • ‌User Review Submissions‌: After you receive your order, you may choose to leave a product review to share your experience with other members of our fitness community. We collect the content of your review, your display name, and any optional photos you upload, to display publicly alongside our verified 35k+ user reviews on our website.

3.2 Automatically Collected Information

When you browse our website, certain non-personal or device-related data is collected automatically to help us optimize your user experience:

  • ‌Device and Technical Data‌: We collect your internet protocol (IP) address, browser type and version, operating system details, device model, time zone setting, and language preference to ensure our website displays correctly on your specific device.
  • ‌Usage Analytics Data‌: We track information about how you navigate our website, including which product pages you view, links you click, time spent on each page, and search terms you use to look for fitness equipment. This data helps us refine our product catalog, improve page loading speeds, and highlight the mini fitness gear that is most relevant to your fitness goals.
  • ‌Cookie Data‌: We use standard cookie technologies to store small preference files on your local device. These cookies remember your saved shopping cart items, your checkout preferences, and whether you are logged in to your account, so you do not need to re-enter information every time you return to www.oprema-fitness.com. You can adjust your browser settings to refuse cookies at any time, though this may limit some functionality of our shopping platform.

4. How We Use Your Collected Information

We only use your personal data for lawful, specified purposes that are directly related to operating our e-commerce fitness equipment store, and we never process your data in ways that are incompatible with the purposes we have disclosed to you. The primary use cases for your information include:

  • ‌Fulfilling and Processing Your Orders‌: We use your transaction data, shipping details, and payment information to process your purchase of our curated mini fitness equipment, confirm your order status, coordinate shipping with our logistics partners, send you delivery tracking updates, and resolve any issues related to your order such as returns or exchanges. This processing is necessary to perform the sales contract we enter into with you when you place an order on our website.
  • ‌Maintaining and Improving Our Website Services‌: We use automatically collected usage data and account information to troubleshoot technical errors on our platform, optimize our page layout to make product discovery easier, expand our collection of fitness gear based on user demand, and ensure the overall shopping experience is smooth, reliable, and aligned with our mission to help you stay consistent with your fitness routine no matter where you are.
  • ‌Sending You Service-Related Notifications‌: We use your contact email and phone number to send you critical non-marketing updates, including order confirmation emails, shipping alerts, notifications about product safety recalls that may apply to items you purchased, and important updates to our terms of service or this Privacy Policy. These messages are essential to operating our e-commerce platform, and you cannot opt out of receiving these service-related communications.
  • ‌Delivering Optional Marketing Content‌: If you have given your explicit opt-in consent, we will use your email address to send you our monthly newsletter, exclusive discount codes for new fitness equipment launches, expert workout tips to help you crush your fitness milestones, and announcements of limited-time promotions. You can opt out of these marketing communications at any time by clicking the “unsubscribe” link at the bottom of every marketing email, or by sending a request to our contact email at phynx@oprema-fitness.com.
  • ‌Verifying Website Security and Preventing Fraud‌: We use your IP address, account authentication data, and transaction details to detect unauthorized access attempts, prevent fraudulent payment activities, and protect the security of both your personal data and our entire user community. This processing is based on our legitimate interest to maintain a safe, trustworthy e-commerce environment for every customer shopping on our platform.
  • ‌Responding to Your Customer Support Requests‌: We use the contact information and details you provide in your support messages to answer your questions about our mini fitness equipment, resolve order issues, provide guidance on product usage, and ensure you receive all the assistance you need to have a positive experience with our brand.

5. How We Share and Disclose Your Information

We never sell, rent, or lease your personal information to third parties for their own marketing purposes without your explicit written consent. We may only share your data with carefully selected third parties in the following limited circumstances:

  • ‌Trusted Service Providers That Support Our Operations‌: We share necessary data with vetted, regulated third-party partners who help us run our e-commerce business, including:
    1. PCI-compliant payment processing providers that handle your payment information securely to complete your transactions
    2. Licensed logistics and shipping partners that use your shipping address to deliver your ordered fitness equipment directly to your location
    3. Cloud hosting service providers that store our website data and your account information on secure, certified servers to keep our platform accessible 24/7
    4. Website analytics tools that process anonymized usage data to help us understand how users interact with our store and improve our service offerings
      All of our third-party service providers are required to sign strict data processing agreements that mandate they protect your personal data with the same level of security we maintain, and they are prohibited from using your information for any purposes outside of the specific tasks they perform on our behalf.
  • ‌Legal and Regulatory Disclosures‌: We may disclose your personal information if we are required to do so by a valid court order, government regulatory request, or applicable law, or if disclosure is necessary to protect our legal rights, defend our website against legal claims, or safeguard the physical safety of our users, employees, and members of the general public.
  • ‌Business Transfer Events‌: In the unlikely event of a merger, acquisition, or sale of all or part of our company assets, your personal information may be transferred to the succeeding entity as part of the business transaction. We will notify all registered users via email of any such change in ownership at least 30 days before your personal data is transferred, to give you the opportunity to request the deletion of your account data if you do not wish your information to be managed by the new entity.

6. Data Security Measures

We implement industry-standard, rigorous technical and organizational security measures to protect your personal information from unauthorized access, accidental loss, alteration, or disclosure. All sensitive data transmitted between your browser and our website is encrypted using TLS 1.3 protocol, ensuring that your payment details and personal information cannot be intercepted during checkout or when you log in to your account. We maintain regular security audits of our systems, restrict internal access to personal data only to the small number of authorized employees who need that information to process your orders and provide customer support, and conduct regular staff training on data protection best practices to minimize the risk of human error leading to data breaches.

While we go to great lengths to protect your personal data, it is important to note that no method of data transmission over the internet or electronic storage system is 100% invulnerable. If we ever detect a personal data breach that poses a high risk to your rights and freedoms, we will notify you and the relevant Croatian data protection authority in full compliance with all applicable legal timelines and requirements.

7. Your Data Rights

Depending on your location, you have a set of legally recognized rights over the personal information we hold about you. Under GDPR and other applicable privacy laws, these rights include:

  1. ‌Right of Access‌: You can request a free copy of all the personal data we have collected about you, at any time, by contacting us using the details provided in Section 2. We will provide you with the full dataset in a structured, machine-readable format within 30 days of your verified request.
  2. ‌Right to Rectification‌: If you notice that any of the personal information we hold about you (such as your shipping address or email address) is incomplete or inaccurate, you have the right to request that we correct that data immediately. You can also update most of this information directly in the account settings page when you log in to your account on our website.
  3. ‌Right to Erasure (“Right to be Forgotten”)‌: You have the right to request that we delete all of your personal data from our systems, under certain circumstances such as when the data is no longer necessary for the original purposes we collected it for, or if you withdraw your previously given consent for us to process your data. We will process your request promptly, subject only to the legal requirements that oblige us to retain certain transaction records for tax, accounting, and regulatory compliance purposes for a mandatory retention period.
  4. ‌Right to Restrict Processing‌: You can request that we temporarily stop processing your personal data in scenarios where you contest the accuracy of the data, our processing is unlawful, or we no longer need the data for our operational purposes but you require it for legal claims.
  5. ‌Right to Data Portability‌: You have the right to receive all the personal data you have provided to us, in a structured, commonly used, machine-readable format, and to have that data transmitted directly to another data controller of your choice, where technically feasible.
  6. ‌Right to Object‌: You have the right to object at any time to our processing of your personal data that is based on our legitimate interests, including receiving marketing communications from us. We will cease processing your data for those purposes unless we can demonstrate compelling legitimate grounds that override your rights, or we need the data to defend a legal claim.

To exercise any of these rights, simply send a detailed request to our contact email phynx@oprema-fitness.com. We will verify your identity by requesting a small piece of non-public information linked to your account before processing your request, to ensure we are not disclosing your personal data to an unauthorized third party. There are no fees for submitting a legitimate data rights request, unless your requests are manifestly repetitive or excessive, in which case we may charge a reasonable administrative fee to cover our processing costs.

8. Data Retention Period

We will only retain your personal information for as long as it is necessary to fulfill the specific purposes we collected it for. For customers who place orders on our store, we retain core transaction data for the full duration required by Croatian tax and commercial accounting laws, which is 10 years from the date of your purchase. For users who create a registered account but do not make any purchases, we retain your account data for as long as your account remains active, or for as long as required to provide our services to you. If you request that we delete your account, we will remove all non-mandatory data from our systems within 14 days, and only keep the minimal transaction records we are legally required to preserve for regulatory compliance. Anonymized, non-personal analytics data that cannot be linked back to any individual user may be retained indefinitely for the purposes of improving our website functionality and product offerings.

9. Protection of Minors

Our e-commerce website at www.oprema-fitness.com is not intended for use by individuals under the age of 16, and we do not knowingly collect any personal information from children under this age. If you are a parent or legal guardian and you become aware that your child has submitted personal data to our platform without your consent, please contact us immediately at phynx@oprema-fitness.com. We will take immediate steps to delete all of that child’s personal information from our servers completely, as quickly as possible.

10. Third-Party Links

Our website may occasionally contain links to external third-party websites, such as social media pages for our fitness community, or links to workout guidance resources created by trusted fitness experts. When you click on these external links, you will be redirected to a website that is operated independently of FITNESS OPREMA d.o.o. za trgovinu i usluge. We have no control over the privacy policies, data collection practices, or content of these third-party sites, and we cannot be held responsible for the security or privacy of any information you submit while visiting those external platforms. We strongly recommend that you review the full privacy policy of every website you visit after leaving our platform, before you submit any personal information to that site.

11. Updates to This Privacy Policy

We may occasionally revise and update the terms of this Privacy Policy from time to time, to reflect changes in our operational practices, new legal requirements, or updates to our e-commerce service offerings. When we make material changes to this policy, we will update the “Effective Date” listed at the top of the page, post the revised policy prominently on our website homepage, and send a notification email to all registered account holders to alert them of the upcoming changes at least 14 days before they go into effect. Your continued use of www.oprema-fitness.com after the effective date of the updated policy will be considered as your acceptance of the revised terms. We encourage you to revisit this page periodically to stay informed about how we are protecting your personal information.

12. Governing Law and Dispute Resolution

This Privacy Policy is governed by and interpreted in accordance with the laws of the Republic of Croatia, without regard to its conflict of law provisions. Any disputes that arise related to this Privacy Policy, or our processing of your personal data, will first be addressed through direct, good-faith communication between you and our team. If we are not able to resolve your privacy-related concern within 30 days, you have the right to submit a complaint to the Croatian national data protection authority (Agencija za zaštitu osobnih podataka) as your supervisory authority for data protection matters, in addition to pursuing any other legal rights you may be entitled to under applicable law.