Personal data protection (GDPR)

1. Data Controller

The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) is:

LARX s.r.o.
Company ID: 02916428
VAT ID: CZ02916428
Registered office: Kaprova 42/14, Old Town, 110 00 Prague 1, Czech Republic
E-mail: info@larx.cz
Phone: +420 725 140 147

(hereinafter referred to as the “Controller”).

2. Personal data we process

When visiting our e-shop and placing an order, we process the following data:

first and last name
billing and delivery address
e-mail address
phone number
order and payment details
any additional data provided during customer communication

3. Purposes of processing personal data

Your personal data are processed only to the extent necessary for the following purposes:

order processing and performance of the contract
accounting and tax obligations (storage of invoices and records)
customer communication, handling inquiries and complaints
sending commercial communications and newsletters (based on your consent only)
ensuring website security and proper functionality

4. Legal basis for processing

The legal basis for processing personal data is:

performance of a contract pursuant to Article 6(1)(b) GDPR
compliance with a legal obligation pursuant to Article 6(1)(c) GDPR
legitimate interest of the Controller pursuant to Article 6(1)(f) GDPR
your consent pursuant to Article 6(1)(a) GDPR

5. Data retention period

Personal data are retained:

for the duration necessary to fulfill the contract
for the period required by law (e.g. accounting documents for 10 years)
for marketing communications until consent is withdrawn

6. Recipients of personal data

Your personal data may be shared with:

payment service providers and banks
shipping and logistics companies
IT and hosting providers (including Shoptet and other suppliers)
accounting and tax advisors
public authorities where required by law

7. Your rights

Under GDPR, you have the right to:

access your personal data
rectification of inaccurate data
erasure (“right to be forgotten”)
restriction of processing
object to processing
data portability
withdraw consent for marketing communications

8. Security of personal data

We protect your personal data using appropriate technical and organizational measures.

9. Cookies

Our website uses cookies to ensure proper functionality, personalize content, and analyze traffic. Details can be found in the section “Cookie Information”.

10. Final provisions

The current version of this Privacy Policy is published on our website and may be updated from time to time.