Privacy policy

1. Data controller

The data controller is:
LACAVA s.r.o.
Nám. SNP 1, 811 01 Bratislava
info@lacava.sk | +421 902 123 456

2. What data we collect

When you place an order we process: first and last name, delivery address, email address, phone number and order details.

When you subscribe to the newsletter: email address and the date consent was given.

Technical data: IP address, browser type, time of visit (used only for security and debugging, not profiling).

3. Lawful basis for processing

Performance of a contract (Art. 6(1)(b) GDPR) — order, delivery, invoicing.

Legitimate interest (Art. 6(1)(f) GDPR) — fraud prevention, loyalty emails to existing customers (you can unsubscribe at any time).

Consent (Art. 6(1)(a) GDPR) — newsletter and analytics cookies.

4. Recipients of the data

We share your data exclusively with:
• Courier services (Packeta, UPS) — delivery address only.
• The Stripe payment gateway — payment details (LACAVA does not see them).
• The Resend email service — sending transactional emails.
• Our tax advisor (invoices only, statutory obligation).

5. Retention period

Order data: 10 years (tax obligation).

Newsletter consent: until revoked + 3 years for evidentiary purposes.

Technical logs: 90 days.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and the right to object. You may withdraw consent at any time.

Send requests to info@lacava.sk. We will reply within 30 days.

You also have the right to lodge a complaint with the Slovak Office for Personal Data Protection (www.dataprotection.gov.sk).

7. Cookies

Information about cookies can be found in our separate Cookie policy.

8. International transfers

Stripe (USA) — transfers safeguarded by Standard Contractual Clauses (SCCs) approved by the European Commission.