Left Banner

Privacy Policy

I. Data Controller

The controller of your personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”) is:

Lukas Delépine, sole trader (OSVČ)
Company ID (IČO): 87013932
Address: Držkov 70, 468 24 Držkov, Czech Republic
E-mail: original@lazzzy.shop

The controller has not appointed a Data Protection Officer (DPO).

II. What personal data do we process?

Depending on how you use our online store, we may process the following categories of personal data in particular:

  • identification data: first name and surname;

  • contact details: postal and delivery address, e-mail address and telephone number;

  • information relating to orders and our business relationship: products ordered, price, delivery and payment method, order history, returns, complaints and communications with our customer service;

  • information relating to your customer account, if you create one;

  • information necessary to comply with our accounting, tax and other legal obligations;

  • information relating to your marketing preferences and your subscription to or withdrawal from commercial communications;

  • technical information relating to the use of our website, such as IP address, browser or device information and data collected through cookies or similar technologies, where permitted by applicable law.

We only process personal data that is necessary for the purposes described below.

III. Purposes and legal bases for processing

We process your personal data for the following purposes:

1. Orders and performance of the contract

We process the information necessary to:

  • receive and process your order;

  • receive and process payment;

  • arrange delivery of the goods;

  • communicate with you regarding your order;

  • handle returns, complaints, warranty claims and customer service requests.

The legal basis for this processing is the performance of a contract or taking steps at your request prior to entering into a contract, pursuant to Article 6(1)(b) GDPR.

Providing certain personal data is necessary in order to enter into and perform the contract. Without this information, we would not be able to process your order.

2. Compliance with legal obligations

We process certain personal data in order to comply with our legal obligations, particularly those relating to accounting, taxation, consumer protection and the retention of business records.

The legal basis for this processing is Article 6(1)(c) GDPR.

3. Protection of our rights and legitimate interests

We may retain and process certain information where necessary for the establishment, exercise or defence of legal claims, the prevention of misuse or the protection of our online store.

The legal basis for this processing is our legitimate interest pursuant to Article 6(1)(f) GDPR.

4. Commercial communications and newsletters

If you voluntarily subscribe to our newsletter without having previously made a purchase from us, we use your e-mail address on the basis of your consent.

You may withdraw your consent at any time, in particular by using the unsubscribe link included in each commercial communication.

Where applicable law permits us to send existing customers commercial communications concerning our own similar products or services, we may do so under the conditions provided for by applicable law. In all cases, you have the option to object to receiving such communications easily and free of charge.

5. Analytics, advertising and cookies

We may use audience measurement, analytics and advertising tools, including services provided by Google and Meta.

Where the use of these technologies requires your consent, they will only be activated after you have made your choice through our cookie management system.

You can change your cookie preferences or withdraw your consent at any time through the cookie settings available on our website.

Further information about the technologies used, their providers, purposes and storage periods is available in our Cookie Policy.

IV. Retention period

We retain your personal data only for as long as necessary for the purposes for which it was collected and in accordance with applicable legal requirements.

In particular:

  • data relating to orders, invoices and accounting records is retained for the periods required by applicable accounting and tax legislation;

  • data necessary for the performance of a contractual relationship may be retained for the duration of the contractual relationship and subsequently for as long as necessary to protect and exercise our rights;

  • data processed on the basis of your consent is retained until you withdraw your consent, unless another legal basis justifies further retention;

  • data used for commercial communications is retained until you unsubscribe or object. We may retain the minimum information necessary to ensure that your request not to receive further communications is respected;

  • retention periods relating to cookies and similar technologies are specified in our Cookie Policy.

At the end of the applicable retention period, personal data is deleted or anonymised unless a legal obligation requires us to retain it for a longer period.

V. Recipients of personal data

To the extent necessary to provide our services, your personal data may be transferred or made accessible to the following categories of recipients in particular:

  • payment service providers;

  • carriers and logistics service providers;

  • IT service providers, hosting providers and other suppliers responsible for the operation and security of our online store;

  • accounting, tax or legal service providers where necessary;

  • communication, analytics and marketing service providers;

  • public authorities where we are legally required to provide certain information.

These recipients only receive the data necessary to perform their respective tasks.

Where service providers process personal data on our behalf, we ensure, where required by law, that the relationship is governed in accordance with the GDPR.

VI. Transfers of personal data outside the European Economic Area

Some of our technology providers, including certain services provided by Google or Meta, may involve the processing of personal data outside the European Economic Area.

Where such transfers take place, they are carried out in accordance with the mechanisms provided for under the GDPR, including on the basis of an applicable adequacy decision or, where necessary, appropriate safeguards such as the European Commission's Standard Contractual Clauses.

VII. Cookies and similar technologies

Our online store uses cookies and similar technologies that are necessary for its operation and, subject to your choice where consent is required, technologies used in particular for statistical, analytics and advertising purposes.

Strictly necessary cookies that are essential for the operation of the website and the provision of a service explicitly requested by you may be used without your consent.

Other cookies for which consent is required are only used after you have given your consent.

You can change your preferences, reject cookies or withdraw your consent at any time through the cookie settings available on our website.

VIII. Your rights

Subject to the conditions set out in the GDPR, you have in particular:

  • the right to receive information about the processing of your personal data;

  • the right of access to your personal data;

  • the right to rectify inaccurate or incomplete personal data;

  • the right to erasure of your personal data where the legal requirements are met;

  • the right to restriction of processing;

  • the right to data portability in the cases provided for by the GDPR;

  • the right to object to certain processing based on our legitimate interests;

  • the right to object at any time to the processing of your personal data for direct marketing purposes;

  • the right to withdraw your consent at any time where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

To exercise your rights, you can contact us at:

original@lazzzy.shop

Where necessary, we may ask you to verify your identity in order to prevent unauthorised access to your personal data.

You also have the right to lodge a complaint with the competent data protection supervisory authority. The supervisory authority responsible for the controller is:

Úřad pro ochranu osobních údajů (ÚOOÚ)
Pplk. Sochora 27
170 00 Praha 7
Czech Republic

IX. Security of personal data

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or unauthorised disclosure.

Access to personal data is limited to persons and service providers who require such access in order to perform their duties.

X. Automated decision-making

We do not carry out decision-making based solely on automated processing that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.

XI. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, particularly to reflect changes in applicable legislation, the technologies we use or our services.

The current version of this Privacy Policy is always available in our online store.

Last updated: 24 September 2026