Privacy Policy

This policy describes how Luxsense s.r.o. processes your personal data in operating the Liviny e-shop (liviny.cz) and what rights you have in connection with the processing under Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Czech Act No. 110/2019 Coll.

Effective from 1 July 2026. This amendment takes effect on the day of publication (see the “Updated” date).

1. Controller of personal data

The controller of your personal data is:

Luxsense s.r.o.
Oskol 3192/43, 767 01 Kroměříž
Company ID (IČO): 05462410, VAT ID (DIČ): CZ05462410
E-mail: care@liviny.cz
Phone: +420 773 122 202

We have not appointed a data protection officer; for all data protection matters, please contact us using the details above.

2. What data we process

• Identification and contact data — name, surname, delivery and billing address, e-mail, phone.
• Order data — the contents of your order, your purchase history and communication with our customer care.
• Payment data — information necessary to process the payment. You enter your payment card details directly in the secure payment gateway, and we have no access to them.
• User account data — if you create an account (sign-in e-mail, settings). When you sign in with Google, Google passes us your name and e-mail.
• Reviews and ratings — the content of a review you publish for a product.
• E-mail for requested notifications — for example, back-in-stock alerts or the newsletter.
• Technical data — IP address, device and browser type, and data from cookies (see the Cookie Policy).

3. Purposes and legal bases of processing

• Processing your order and performing the contract (Art. 6(1)(b) GDPR) — processing and delivering your order, payment and order-related communication; for requested services (account, back-in-stock alerts), providing that service.
• Compliance with legal obligations (Art. 6(1)(c) GDPR) — bookkeeping, tax records and retention of tax documents.
• Our legitimate interest (Art. 6(1)(f) GDPR) — security and flawless operation of the website, fraud prevention, handling enquiries and complaints, and the anonymous visitor statistics described below.
• Your consent (Art. 6(1)(a) GDPR) — sending commercial communications (newsletter) and optional analytics cookies (session recording). You may withdraw your consent at any time.

Anonymous visitor statistics (legitimate interest)

To measure traffic and improve the shop, we use our own statistics system that stores no cookies or other identifiers on your device. We recognise a visit using a one-way daily fingerprint (a combination of network address and browser with a secret key) that cannot be linked to you as a person and that changes every day. We do not pass the data to third parties. The processing is based on our legitimate interest (Art. 6(1)(f) GDPR); you may object to it at any time with the “Decline” button in the cookie bar — the measurement then stops for you.

Ověřeno zákazníky satisfaction questionnaire (legitimate interest)

After every order delivered to the Czech Republic, we pass your e-mail address, the order number and the identification of the products ordered to Heureka Group a.s., Company ID 078 22 774, registered office Karolinská 706/3, 186 00 Praha 8 – Karlín, the operator of the Heureka.cz portal, so that it can send you a questionnaire about your satisfaction with the purchase and the products. When sending the questionnaires, evaluating them, analysing our market position and keeping a list of people who have refused the questionnaires, Heureka acts as our processor. If you complete the questionnaire, Heureka also processes some data as an independent controller — in particular to show your completed review in your Heureka account, to publish it with your consent and to verify the authenticity and truthfulness of reviews; details can be found in the privacy policy of Heureka. The legal basis for passing on the data is our legitimate interest in finding out how satisfied you are. You can refuse the questionnaires at any time — by ticking the box at checkout, via the link in the questionnaire e-mail or by e-mail to care@liviny.cz. We also treat your unsubscribing from commercial communications (the newsletter) or from all e-mails as a refusal. We record your refusal and respect it for all future purchases; we inform Heureka of any changes. We do not send the questionnaire to wholesale customers.

4. Recipients and processors

We pass your data on, only to the extent necessary, to vetted processors and recipients who help us run the e-shop:

• Parcel delivery — the carrier DPD (name, address, phone and e-mail for delivery).
• Payments — the payment gateway Comgate, a.s. (an independent controller of personal data — a licensed payment institution supervised by the Czech National Bank; for card payments it receives your name, e-mail and payment details); for bank transfers, our bank sees the payment.
• E-mail communication — the service used to send transactional and informational e-mails (Resend) and our mailbox provider (Google Workspace).
• Sign-in with Google — if you use it, Google acts as the independent controller of your Google account.
• Operations, hosting and storage — cloud infrastructure providers (Vercel, Railway, Neon, Cloudflare).
• Security and diagnostics — error monitoring (Sentry).
• Analytics — our own anonymous statistics and page speed measurement (Vercel Speed Insights) work without cookies; session recording (PostHog) is activated only with your consent.
• Satisfaction ratings — Heureka Group a.s. (the Ověřeno zákazníky programme): e-mail, order number, products ordered; for a completed review also an independent controller.

Some providers may also process data outside the European Economic Area; in that case the transfer is protected by appropriate safeguards under the GDPR (in particular standard contractual clauses). We never sell your data.

5. Retention period

• We keep order data and tax documents for the period required by law (generally 10 years for accounting documents).
• We keep user account data for as long as the account exists; after the account is cancelled we delete them, unless there is a legal ground for keeping them longer.
• We keep the e-mail used for back-in-stock alerts until you unsubscribe (the link is in every e-mail); unconfirmed older requests are deleted within 24 hours.
• Marketing consent remains valid until withdrawn; we then stop processing for that purpose.
• We keep detailed technical data about a visit (event type, time, page visited) for 90 days; after that, only aggregate daily statistics remain, with no link to any individual visitor.
• Ověřeno zákazníky questionnaires — We keep the record of your refusal of the questionnaires in the form of a fingerprint (hash) of your e-mail address for as long as we take part in the programme, even after your account is cancelled. If we have passed your e-mail address to Heureka or notified Heureka of it, we keep it for as long as we take part in the programme so that we can notify Heureka of changes (your refusal, a request for erasure). We delete it no later than 90 days after our participation in the programme ends, or earlier as soon as Heureka confirms the erasure of your data. If the transfer was unsuccessful, we keep the address for no more than 60 days. We keep the record of the transfer for 3 years from the transfer, without the readable address unless we have kept it longer for the reasons above.

6. Your rights

In connection with the processing you have the right to:

• access your data and obtain a copy of it,
• have inaccurate data corrected and incomplete data completed,
• erasure (the “right to be forgotten”),
• restriction of processing,
• data portability,
• object to processing based on legitimate interest (for the anonymous statistics you can do this directly with the “Decline” button in the cookie bar; against Ověřeno zákazníky questionnaires also via the link in the questionnaire e-mail or at care@liviny.cz),
• withdraw consent, where given, at any time with effect for the future.

You can handle many requests yourself in the Account → Settings section (access to your data, its export and a request for erasure). You can also contact us at any time at care@liviny.cz.

You also have the right to lodge a complaint with the supervisory authority, which is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.

7. Cookies

Our website uses cookies and similar technologies. Details of their types, purpose and validity period, and of how to manage your consent, can be found in the separate Cookie Policy.

8. Security

We take appropriate technical and organisational measures to protect data against unauthorised access, loss or misuse. Data is transmitted encrypted (HTTPS), and only authorised persons have access to it.

9. Contact

For any question about personal data protection, contact us at care@liviny.cz or by phone at +420 773 122 202.