Privacy Policy

This policy describes how Luxsense s.r.o. processes your personal data in operating the Liviny e-shop (liviny.cz) and what rights you have in connection with the processing under Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Czech Act No. 110/2019 Coll.

Effective from 1 July 2026.

1. Controller of personal data

The controller of your personal data is:

Luxsense s.r.o.
Oskol 3192/43, 767 01 Kroměříž
Company ID (IČO): 05462410, VAT ID (DIČ): CZ05462410
E-mail: care@liviny.cz
Phone: +420 773 122 202

We have not appointed a data protection officer; for all data protection matters, please contact us using the details above.

2. What data we process

• Identification and contact data — name, surname, delivery and billing address, e-mail, phone.
• Order data — the contents of your order, your purchase history and communication with our customer care.
• Payment data — information necessary to process the payment. You enter your payment card details directly in the secure payment gateway, and we have no access to them.
• User account data — if you create an account (sign-in e-mail, settings). When you sign in with Google, Google passes us your name and e-mail.
• Reviews and ratings — the content of a review you publish for a product.
• E-mail for requested notifications — for example, back-in-stock alerts or the newsletter.
• Technical data — IP address, device and browser type, and data from cookies (see the Cookie Policy).

3. Purposes and legal bases of processing

• Processing your order and performing the contract (Art. 6(1)(b) GDPR) — processing and delivering your order, payment and order-related communication; for requested services (account, back-in-stock alerts), providing that service.
• Compliance with legal obligations (Art. 6(1)(c) GDPR) — bookkeeping, tax records and retention of tax documents.
• Our legitimate interest (Art. 6(1)(f) GDPR) — security and flawless operation of the website, fraud prevention, handling enquiries and complaints, and the anonymous visitor statistics described below.
• Your consent (Art. 6(1)(a) GDPR) — sending commercial communications (newsletter) and optional analytics cookies (session recording). You may withdraw your consent at any time.

Anonymous visitor statistics (legitimate interest)

To measure traffic and improve the shop, we use our own statistics system that stores no cookies or other identifiers on your device. We recognise a visit using a one-way daily fingerprint (a combination of network address and browser with a secret key) that cannot be linked to you as a person and that changes every day. We do not pass the data to third parties. The processing is based on our legitimate interest (Art. 6(1)(f) GDPR); you may object to it at any time with the “Decline” button in the cookie bar — the measurement then stops for you.

4. Recipients and processors

We pass your data on, only to the extent necessary, to vetted processors and recipients who help us run the e-shop:

• Parcel delivery — the carrier DPD (name, address, phone and e-mail for delivery).
• Payments — the payment gateway Comgate, a.s. (an independent controller of personal data — a licensed payment institution supervised by the Czech National Bank; for card payments it receives your name, e-mail and payment details); for bank transfers, our bank sees the payment.
• E-mail communication — the service used to send transactional and informational e-mails (Resend) and our mailbox provider (Google Workspace).
• Sign-in with Google — if you use it, Google acts as the independent controller of your Google account.
• Operations, hosting and storage — cloud infrastructure providers (Vercel, Railway, Neon, Cloudflare).
• Security and diagnostics — error monitoring (Sentry).
• Analytics — our own anonymous statistics and page speed measurement (Vercel Speed Insights) work without cookies; session recording (PostHog) is activated only with your consent.

Some providers may also process data outside the European Economic Area; in that case the transfer is protected by appropriate safeguards under the GDPR (in particular standard contractual clauses). We never sell your data.

5. Retention period

• We keep order data and tax documents for the period required by law (generally 10 years for accounting documents).
• We keep user account data for as long as the account exists; after the account is cancelled we delete them, unless there is a legal ground for keeping them longer.
• We keep the e-mail used for back-in-stock alerts until you unsubscribe (the link is in every e-mail); unconfirmed older requests are deleted within 24 hours.
• Marketing consent remains valid until withdrawn; we then stop processing for that purpose.
• We keep detailed technical data about a visit (event type, time, page visited) for 90 days; after that, only aggregate daily statistics remain, with no link to any individual visitor.

6. Your rights

In connection with the processing you have the right to:

• access your data and obtain a copy of it,
• have inaccurate data corrected and incomplete data completed,
• erasure (the “right to be forgotten”),
• restriction of processing,
• data portability,
• object to processing based on legitimate interest (for the anonymous statistics you can do this directly with the “Decline” button in the cookie bar),
• withdraw consent, where given, at any time with effect for the future.

You can handle many requests yourself in the Account → Settings section (access to your data, its export and a request for erasure). You can also contact us at any time at care@liviny.cz.

You also have the right to lodge a complaint with the supervisory authority, which is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.

7. Cookies

Our website uses cookies and similar technologies. Details of their types, purpose and validity period, and of how to manage your consent, can be found in the separate Cookie Policy.

8. Security

We take appropriate technical and organisational measures to protect data against unauthorised access, loss or misuse. Data is transmitted encrypted (HTTPS), and only authorised persons have access to it.

9. Contact

For any question about personal data protection, contact us at care@liviny.cz or by phone at +420 773 122 202.