Cookie policy
This policy is effective from 3 September 2026.
This policy explains which cookies and similar technologies we use on the website https://jztferments.cz, what they are for, on what legal basis we deploy them and how you can change your choice at any time.
Controller: JZT Ferments s.r.o., company ID 08924287, registered office Bor 120, 360 01 Sadov, Czech Republic, registered in the Commercial Register kept by the Regional Court in Plzeň, Section C, Insert 38918. Contact: info@jztferments.cz. How we handle personal data is described in the separate Privacy Policy (https://jztferments.cz/en/policies/privacy-policy).
1. What cookies are
Cookies are small text files that a website stores in your browser so that it “recognises” you when you move between pages or visit again – for example to remember the contents of your cart or the chosen language. Other technologies work similarly, and in this policy we refer to them together as cookies: browser storage (local storage, session storage), measurement pixels and third-party scripts.
2. Legal basis and consent
Under Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications, without your consent we may store on your device and read from it only data that serves solely to transmit a message over the network, or that is necessary for us to provide a service you expressly use on the website (cart, checkout, account login, choice of language and currency and saving your choice in the cookie banner). We use all other cookies only with your consent under Article 6(1)(a) of Regulation (EU) 2016/679 (GDPR). You give consent in the cookie banner on your first visit.
- Consent is voluntary. If you do not give it, the website keeps working – we just do not measure traffic or the effectiveness of advertising.
- You can change or withdraw your consent at any time via the “Cookie preferences” link in the website footer. Withdrawal does not affect the lawfulness of processing before the withdrawal. After withdrawal we stop using analytics and marketing cookies and no new ones are stored on your device; cookies stored earlier remain in your browser until you delete them – how to do that is in Section 5.
- We remember your choice for at most 1 year (cookie
_tracking_consent); after that we ask again. The choice applies only to the browser and device in which you made it – in another browser or on another device the banner appears again. - We keep a record of your choice (what you chose, when and to what extent) for 4 years from giving or withdrawing consent so that we can prove we respected it (Article 7(1) GDPR; our legitimate interest under Article 6(1)(f) GDPR).
You can also change your choice right here: the Change cookie settings button.
3. Which cookies we use
The website runs on the Shopify platform. Lifetimes are stated as the maximum according to the providers' documentation; the actual storage time may be shorter. The lifetime of a cookie is not the same as the data retention period. We keep data from analytics and marketing cookies for the period set in the given tool: in Shopify Analytics for the duration of our account, in Google Ads for the duration of membership in advertising lists (at most 540 days) and in Ecomail at most for the cookie lifetime stated in Section 3.3. Once a cookie expires, measurement starts again with no link to previous visits. The tables list the cookies the website stores in normal operation; we check the list regularly and update it when tools change.
3.1 Necessary cookies (without consent)
They ensure the basic operation of the shop: the cart, checkout, customer account login, choice of language and currency, security and saving your choice in the cookie banner. Without them it is not possible to buy. Legal basis: their storage is permitted by Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications (they are cookies necessary for the service you use); we base the subsequent processing on the performance of the contract (Article 6(1)(b) GDPR) and on our legitimate interest in a functioning and secure e-shop (Article 6(1)(f) GDPR).
| Cookie | Purpose | Provider | Lifetime |
|---|---|---|---|
cart, cart_sig, cart_ts, cart_currency
|
cart contents, their verification and the purchase currency | Shopify | 14 days |
_secure_session_id |
checkout session | Shopify | 24 hours |
secure_customer_sig |
customer account login | Shopify | 20 years |
localization |
chosen language, country and currency | Shopify | 14 days |
keep_alive |
carrying the chosen country and currency between pages | Shopify | 30 minutes |
_tracking_consent |
saving your choice in the cookie banner | Shopify | 1 year |
_cmp_a |
auxiliary cookie for saving the choice | Shopify | 1 day |
At checkout you can pay by card, Apple Pay or Google Pay (these payments are handled by Shopify Payments), by Klarna or via PayPal. The providers of these payment services may use their own necessary cookies during payment to secure the payment and prevent fraud. These cookies are governed by the policy of the respective provider, which the checkout links to.
Applications we use in the shop – the page builder GemPages and the subscription management application Seal Subscriptions – may also store their own technical cookies or data in browser storage. They serve to display the page and to manage your subscription.
3.2 Analytics cookies (with consent)
They measure traffic and behaviour on the website (where visitors come from, which pages they view, where they abandon a purchase) so that we can improve the content and the offer. They are stored only after your consent.
| Cookie | Purpose | Provider | Lifetime |
|---|---|---|---|
_shopify_y |
recognising a visitor between visits | Shopify Analytics | 1 year |
_shopify_s, _shopify_sa_p, _shopify_sa_t
|
visit session, measurement of marketing events | Shopify Analytics | 30 minutes |
_landing_page, _orig_referrer
|
landing page and source of the visit | Shopify Analytics | 14 days |
3.3 Marketing cookies (with consent)
They serve to measure the effectiveness of advertising (whether a visitor bought after clicking an ad), to show relevant advertising on other websites (remarketing) and to let us send you e-mails that match what interested you on our site. We use the Google Ads advertising system (Google tag) of Google Ireland Limited and the mailing tool Ecomail of ECOMAIL.CZ, s.r.o. They are stored only after your consent.
| Cookie | Purpose | Provider | Lifetime |
|---|---|---|---|
_gcl_au, _gcl_aw
|
linking an ad click to a purchase (conversion measurement) | Google Ads | 3 months |
IDE |
remarketing and ad measurement (domain doubleclick.net) | Google Ads | 13 months |
test_cookie |
checking whether the browser supports cookies (domain doubleclick.net) | Google Ads | 15 minutes |
ecsession1-…, ecvisits1-…
|
recognising a website visit and the number of visits | Ecomail | 1 year |
…ecwshown |
remembering that the newsletter sign-up window has already been shown to you, so it does not appear again | Ecomail | 1 year |
The names of Ecomail cookies always also contain the identifier of our account and form, which is why we list them here in abbreviated form. Ecomail sends newsletters for us and at the same time measures which pages you visited on the website; if you are subscribed to our newsletter, it may link this data to your e-mail address and tailor the content of e-mails accordingly. Without your consent these cookies are not stored and no measurement takes place.
If you consent to marketing cookies, your e-mail address from the order may also be passed to Google during conversion measurement in the form of a hash – that is, encoded, not readable (so-called enhanced conversions). This hash is still personal data: Google compares it with the data of its signed-in users in order to attribute the conversion to a specific ad. The legal basis is your consent (Article 6(1)(a) GDPR); by withdrawing consent you end the transfer.
If you do not consent to marketing cookies, no Google or Ecomail cookies are stored on your device, the Google advertising tool does not start at all and no data is sent to Google.
3.4 Embedded third-party content
On the home page we show a gallery of our posts from the social network Instagram (account @jztferments). It is embedded by the Instafeed application. For the gallery to display, your browser loads its content from the servers of the provider of this application; in doing so the provider learns your IP address, browser and device details and the address of the page on which the gallery is displayed. No cookies are stored on your device via the gallery and we do not use the gallery for measurement or ad targeting – it only serves to show you what is new with us. The legal basis is our legitimate interest in promoting our own offer (Article 6(1)(f) GDPR); you can object to this processing at info@jztferments.cz.
If you click on a post in the gallery, you go to the Instagram website, which is operated in the European Union by Meta Platforms Ireland Limited; further processing then takes place under that company's rules (https://www.facebook.com/privacy/policy) and we have no influence over it. Should the gallery start storing cookies or loading content directly from Instagram's servers, we will load it only after you consent to marketing cookies.
4. Who has access to the data from cookies and where it is transferred
- Shopify International Limited, registration number 560279, The Sidings, 4th Floor, Grand Canal Quay, Dublin D02 E7K8, Ireland (address for data protection matters: c/o Intertrust Ireland, 2nd Floor 1–2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland) operates the shop platform and Shopify Analytics as our processor; its parent company Shopify Inc., 151 O'Connor Street, Ground Floor, Ottawa, Ontario K2P 2L8, Canada, may store data in Canada and the United States. Transfers to Canada are based on the European Commission's adequacy decision (Decision 2002/2/EC for entities subject to the Canadian PIPEDA Act) – Article 45 GDPR. Transfers to the United States are based on the Commission's adequacy decision for the EU–US Data Privacy Framework (Decision (EU) 2023/1795) for recipients certified under that framework – Article 45 GDPR, otherwise on the Commission's standard contractual clauses (Decision (EU) 2021/914) – Article 46(2)(c) GDPR.
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, provides the Google Ads advertising system; for conversion measurement it acts as our processor, for personalised advertising as an independent controller that processes data under its own policy (https://policies.google.com/privacy). Data may be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, which is certified under the EU–US Data Privacy Framework – Article 45 GDPR.
- ECOMAIL.CZ, s.r.o., company ID 027 62 943, registered office Na příkopě 388/1, Staré Město, 110 00 Prague 1, sends newsletters as our processor and measures behaviour on our website (the cookies listed in Section 3.3). It processes data in the European Union.
- GemCommerce Co., Ltd (the GemPages application), 5th Floor, Artemis Tower, 3 Le Trong Tan Str., Thanh Xuan, Hanoi, Vietnam, and Seal Subscriptions, Podutiška cesta 94, 1000 Ljubljana, Slovenia – applications we use in the shop (page building and subscription management); as our processors they process technical data about page display and the data needed to manage your subscription. Vietnam is not a country for which the European Commission has decided that it provides adequate protection; the transfer is therefore based on the Commission's standard contractual clauses (Decision (EU) 2021/914) agreed in the data processing agreement – Article 46(2)(c) GDPR.
- The provider of the Instafeed application, which displays the gallery of our Instagram posts on the home page (Section 3.4), processes technical data about the display of the gallery as our processor.
- The payment service providers listed in Section 3.1 – Shopify Payments is operated by Shopify International Limited (above), the Klarna service is provided by Klarna Bank AB (publ), registration number 556737-0431, Sveavägen 46, 111 34 Stockholm, Sweden, and the PayPal service by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, Luxembourg (R.C.S. Luxembourg B 118 349). Klarna and PayPal process data, including the cookies necessary to secure payment and prevent fraud, as independent controllers under their own policies, which the checkout links to.
We use data from cookies only for the purposes described above. After your consent, Shopify Analytics links the website visit to the order – in the administration we see where you came to the website from and which pages you viewed. We pass to Google only the conversion data described in Section 3.3 of this policy. Ecomail processes only the website visit data described in the same section and your e-mail address, if you gave it to us yourself when subscribing to our newsletter.
We do not carry out automated decision-making that would have legal or similarly significant effects on you (Article 22 GDPR). If you consent to marketing cookies, profiling for advertising purposes as described in Section 3.3 takes place – based on the pages you visited on our site, our advertising may be shown to you on other websites and the content of our e-mails may be tailored. You end profiling by withdrawing consent (the “Cookie preferences” link in the website footer). We do not sell data from cookies to anyone.
5. Browser settings
You can also delete or block cookies directly in your browser – the option is in the browser settings in the privacy section (in Chrome “Privacy and security”, in Firefox “Privacy & Security”, in Safari “Privacy”, in Edge “Cookies and site permissions”). In the same settings, or with an add-on for blocking third-party content, you can also prevent the loading of embedded content under Section 3.4; the other parts of the website keep working. If you block necessary cookies, the cart and checkout will not work. Browser settings do not replace the choice in the cookie banner; if you delete cookies, the banner appears again.
6. Your rights
Where data from cookies is personal data, you have the rights under the GDPR: the right of access (Article 15), to rectification (Article 16), to erasure (Article 17), to restriction of processing (Article 18), to portability of data processed by automated means on the basis of consent (Article 20), the right to object to processing based on legitimate interest (Article 21) and the right to withdraw consent at any time (Article 7(3)); withdrawal does not affect the lawfulness of processing before the withdrawal. Details and the procedure for exercising them are in the Privacy Policy. You can lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, https://uoou.gov.cz.
7. Changes to this policy
The list of cookies may change along with the tools we use. The current wording with its effective date is always on this page. We will not launch a new analytics or advertising tool before we add it to this policy; we will launch it only within the scope of the category for which you have valid consent. If a change introduces a new category of cookies or a new purpose not covered by your existing consent, we will ask for consent again; until we can show you the cookie banner again, we will not launch the new tool.