PRIVACY POLICY
This Privacy Policy explains how we collect and use personal data when you shop with us, create an account, contact us or use our website. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Czech law.
1. Who is the controller?
The controller is LuxeRevera s.r.o., Company ID No. 29830346, with its registered office at Lyčkovo náměstí 508/7, Karlín, 18600 Praha 8, registered in the Commercial Register maintained by the Municipal Court in Prague, file no. C 453056.
Privacy contact: info@luxerevera.com | Website: https://www.luxerevera.com/.
2. What data do we process and why?
We process only data reasonably necessary for the relevant purpose. Most data is provided directly by you; we may also receive payment status from payment providers and delivery status from carriers.
| Purpose | Data and legal basis | Retention |
|---|---|---|
| Orders and fulfilment | Identification and contact details, delivery and billing details, order history, payment status/identifiers and communications. Legal basis: performance of a contract and steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). | For the duration of the contract and applicable limitation periods; longer if a dispute is pending. |
| Customer account | Account details, login data, profile information and order history. Legal basis: performance of the account service requested by you (Art. 6(1)(b) GDPR). | Until the account is deleted or becomes inactive under the account terms, subject to necessary backup and legal retention periods. |
| Legal obligations | Invoice, accounting, tax, order and payment records. Legal basis: compliance with legal obligations (Art. 6(1)(c) GDPR). | For statutory retention periods, typically up to 10 years for relevant tax/accounting records. |
| Support, claims and security | Contact details, communications, order information and technical/security data. Legal basis: contract performance and/or our legitimate interests in customer support, fraud prevention, network security and the establishment, exercise or defence of legal claims (Art. 6(1)(b) and (f) GDPR). | For as long as necessary for the request, security purpose or applicable limitation period. |
| Direct marketing | Email address and, where relevant, purchase history or preferences. Existing customers may receive marketing for our own similar products/services on an opt-out basis; other electronic marketing is sent on the basis of consent. GDPR basis: legitimate interests and/or consent (Art. 6(1)(f) or (a) GDPR), together with applicable Czech e-privacy rules. | Until you opt out, object or withdraw consent, or until the data is no longer necessary for marketing. |
| Website and cookies | Device identifiers, IP address and online activity may be processed for operation, security, analytics and advertising. Non-essential analytics/marketing technologies are used only where the required consent has been obtained. | According to the relevant cookie lifetime or until consent is withdrawn. See the Cookie Policy. |
Providing order and delivery data is necessary to enter into and perform the purchase contract. Without it, we may be unable to process or deliver your order.
3. Who may receive your data?
We may share personal data only to the extent necessary with:
- e-commerce platform, hosting, IT, customer support and security providers;
- payment service providers, banks and fraud-prevention providers;
- carriers, fulfilment and return-service providers;
- accounting, tax, legal and other professional advisers;
- email, CRM and marketing providers, where lawfully used; and
- public authorities, courts or other persons where disclosure is required by law or necessary to protect our rights.
Some recipients (for example banks, payment providers or carriers) may process personal data as independent controllers under their own privacy notices. We do not sell personal data.
4. Transfers outside the EEA
Some service providers may process data outside the European Economic Area. Where this occurs, we use a lawful transfer mechanism, such as an adequacy decision or appropriate safeguards (including the European Commission's Standard Contractual Clauses), as required by the GDPR.
5. Your rights
Subject to the conditions set out in the GDPR, you may request:
- access to your personal data and a copy of it;
- correction of inaccurate or incomplete data;
- erasure of data, where the legal conditions are met;
- restriction of processing;
- data portability, where applicable;
- withdrawal of consent at any time, without affecting prior lawful processing; and
- to object to processing based on legitimate interests. You may object to direct marketing at any time, including by using the unsubscribe link in a marketing message.
You may exercise your rights at info@luxerevera.com. We may need to verify your identity before acting on a request. We will respond within the time limits required by the GDPR.
You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.gov.cz.
6. Automated decision-making and security
Unless we expressly inform you otherwise, we do not make decisions based solely on automated processing that produce legal or similarly significant effects for you. We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration.
7. Cookies and similar technologies
Further details about cookies, analytics and advertising technologies, including how to change your choices, are set out in our Cookie Policy at https://luxerevera.com/cookies.
8. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, in particular if our services, service providers or legal obligations change. The current version will always be available on the website. Where required by law, we will provide additional notice of material changes.
Last updated: 21 August 2026