INFORMATION ON THE PROCESSING OF PERSONAL DATA

  1. Introductory Provisions

This document provides information on how we process your personal data and what rights you have in connection with such processing, particularly in the following circumstances:

  1. you visit our website at https://www.luciabardy.com/ (hereinafter referred to as the "Website");

  2. you contact us by email, telephone or other means;

  3. you express an interest in our services or enter into negotiations with us regarding the conclusion of a contract.

When processing personal data, we comply with the applicable legal regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (hereinafter referred to as the "GDPR").

  1. Who Processes Your Personal Data?

The controller of your personal data, i.e. the entity that determines the purposes and means of processing your personal data, is Lucia Bardy s.r.o., Company ID No.: 23953047, with its registered office at Biskupcova 1653/27, Žižkov, 130 00 Prague 3, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague under File No. C 435806, email: hello@luciabardy.com, telephone: +420 720 35 77 88 (hereinafter referred to as the "Company").

  1. What Personal Data Do We Process and for What Purposes?

In connection with the operation of the Website and our business activities, we may process, in particular, your identification and contact details (first name, surname, email address and telephone number), information provided during our mutual communications and, where applicable, technical data relating to your visit to the Website (in particular, your IP address).

We process your personal data only to the extent necessary, primarily for the following purposes:

  1. Consent to the processing of personal data pursuant to Article 6(1)(a) of the GDPR, where you have given us your consent for a specific processing purpose. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal;

  2. Communication and handling of enquiries – based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR;

  3. Negotiation, conclusion and performance of contracts – pursuant to Article 6(1)(b) of the GDPR or, where you act on behalf of another person or entity, based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR;

  4. Compliance with legal obligations – in particular, obligations arising from accounting and tax regulations, pursuant to Article 6(1)(c) of the GDPR;

  5. Ensuring the operation and security of the Website and protecting our legal claims – based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR.

  1. How Long Do We Retain Your Personal Data?

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or for the period required by applicable legal regulations.

Personal data obtained through our mutual communications is retained for the period necessary to handle your enquiry or request and any subsequent communications. Data relating to contractual relationships is retained for the duration of the contractual relationship and thereafter for as long as necessary to protect our legal claims or comply with legal obligations. Technical data is retained only for as long as necessary to ensure the proper operation and security of the Website.

  1. To Whom May Your Personal Data Be Disclosed?

Your personal data may be disclosed, to the extent necessary, to providers of web hosting, IT and communication services, our external accountants or legal advisers and, where required by applicable law, to public authorities.

We do not transfer personal data to countries outside the European Economic Area or to international organisations.

  1. What Rights Do You Have in Relation to the Processing of Your Personal Data?

In connection with the processing of your personal data, you have, subject to the conditions laid down in the GDPR, in particular the following rights:

  1. the right of access to your personal data;

  2. the right to rectification or completion of your personal data;

  3. the right to erasure of your personal data;

  4. the right to restriction of processing of your personal data;

  5. the right to data portability;

  6. the right to object to processing based on legitimate interests;

  7. the right to withdraw your consent, where your personal data is processed on the basis of such consent.

You may exercise your rights by contacting us using the contact details provided in Section 2 of this document.

You also have the right to lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů), with its registered office at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.gov.cz.

  1. Final Provisions

The provision of personal data is generally voluntary. However, without the provision of the necessary personal data, we may not be able to respond to your enquiry or request, or to conclude or perform a contract.

We do not carry out automated individual decision-making, including profiling, within the meaning of Article 22 of the GDPR when processing your personal data.

This information may be updated from time to time. The current version is always available on the Company's Website.

Last updated: 19 October 2026