The company LAVONIO s.r.o. (limited liability company), with headquarters at Nádražní 270, 763 21 Slavičín, Czech Republic, Company ID: 60749440, VAT ID: CZ60749440, registered at the Regional Court in Brno, section C, file 89509 (hereinafter referred to as the Controller), processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter the Regulation) in order to enable online purchases and provide related services.

1. Categories of personal data processed

Regarding individuals (consumers):

• Name and surname
• E-mail address
• Telephone number
• Billing and delivery addresses
• Loyalty or discount codes/cards (if applicable)

Regarding business customers (companies, resellers, B2B):

• Name and surname of contact person
• Company name
• E-mail address
• Telephone number
• Company billing and delivery address

In both cases:

• Payment information (where applicable: last 4 digits of the card, expiration date, card type – only if “Remember my card” option is selected)
• IP address from which the purchase has been made (stored for a maximum of 3 years)
• Customer account data if registered (order history, login details)

2. Purpose and legal basis of processing

Personal data are processed for the following purposes:

• Contract performance: processing is necessary to conclude and fulfil the sales contract (Art. 6(1)(b) of the Regulation).
• Customer support and communication: handling enquiries, complaints, or returns.
• Legal obligations: accounting, tax, and record-keeping duties.
• Legitimate interests:
• Preventing fraud, securing online transactions,
• Sending satisfaction surveys via third-party evaluation services (unless opted out during checkout),
• Abandoned cart reminders (customers can unsubscribe at any time).

3. Cookies and online identifiers

We, as well as certain third parties providing analytics, advertising, or content, may use cookies, beacons, and other technologies to collect and store information when you visit our website.

Cookies enable us to:

• Store your preferences and login details,
• Provide customised content and marketing communication,
• Analyse website performance and user behaviour.

More information is available in our Cookie Policy.

4. Data recipients (third parties)

We disclose personal data only to the extent necessary to fulfil the contract or legal obligations. Data may be shared with:

• Postal and courier service providers (delivery of goods),
• Payment service providers and card companies (processing payments),
• IT and hosting providers (operation of the Online Shop, including Shoptet platform),
• Analytics and marketing service providers (Google Analytics, Google Ads, Meta/Facebook),
• Legal, tax, or debt collection service providers (only if strictly necessary).

LAVONIO s.r.o. reserves the right to commission other third parties in the above categories.

5. Data storage period

Personal data are stored for the duration necessary to fulfil the contract and legal obligations, typically:

• Orders and invoices: 10 years (due to accounting and tax laws),
• Customer accounts: until the account is deleted by the customer,
• Cookies and marketing data: according to the consent and expiration settings.

6. 
   Transfer of data outside the EU

In principle, we transfer data only within the European Union or to countries with an adequacy decision by the European Commission.
If data are transferred to third countries (e.g., United States), this is based on standard contractual clauses or equivalent safeguards in accordance with Art. 46 of the Regulation.

7. Your rights under GDPR

According to the Regulation, you have the right to:

• Request confirmation of whether we process your personal data, and obtain a copy,
• Request correction or update of your personal data,
• Request deletion of personal data (“right to be forgotten”),
• Restrict or object to processing (e.g., marketing use),
• Data portability,
• File a complaint with the relevant supervisory authority (in Ireland: Data Protection Commission – www.dataprotection.ie).

Requests may be sent to: obchod@drogerieshop.cz.

8. Automated decision-making

We do not use automated decision-making or profiling that would have legal or similarly significant effects on customers.

9. Security of personal data

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or destruction.

10. Final provisions

This information on personal data processing may be updated from time to time. The current version is always available on our website: www.lavonio.ie.

Effective date: 23 September 2025