Privacy Policy

Last updated: 28 September 2026

LUNZO s.r.o. is committed to protecting the personal data of everyone who comes into contact with us. We also respect your choices and settings relating to the protection of your privacy.

When we use the words “we” or “us” in this document, we are referring to LUNZO s.r.o.

This privacy policy (together with our Terms and Conditions and the other rules referred to in it) explains how we collect, use and store your data when you use Lunzo’s websites and online services. By “personal data” we mean all information relating to you that makes it possible to identify you, whether directly or indirectly.

This document explains the legal bases on which we process your data, where we obtain it from and how we handle it. We recommend that you read this policy carefully so that you have a clear picture of how we protect your privacy.

By using our website www.lunzo.ie (“our website”) you acknowledge the processing of personal data described in this statement. Where your consent is required for certain processing – for example the storing of non-essential cookies or marketing communications – we obtain it separately through the cookie/consent banner. Reading this statement does not replace such consent.

Updates to this privacy policy

Our rules for handling personal data may change from time to time. The reason is to keep them as accurate as possible and in line with applicable legislation.

We will publish any amendments or additions to this policy directly on this page. Where necessary, we will also send you an email notification. We therefore recommend that you check from time to time whether any changes have been made.

The new version takes effect from the date stated in its heading.

Data controller

For the purposes of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the related data protection and electronic communications legislation (together, the “Data Protection Legislation”), the controller of your data is LUNZO s.r.o.

• Registered office: LUNZO s.r.o., Politických vězňů 912/10, Nové Město, 110 00 Praha 1, Czechia
• Company registration number: 06667678

Contact for data protection matters

For all matters relating to the protection of personal data – questions about this document and the exercise of your rights – please contact us using the details below:

• Company name: LUNZO s.r.o.

• Email address: info@lunzo.ie

• Postal address: Politických vězňů 912/10, Nové Město, 110 00 Praha 1, Czechia

Your right to lodge a complaint

You have the right to lodge a complaint at any time with a supervisory authority for the protection of personal data. Because LUNZO s.r.o. is established in Czechia, the lead supervisory authority is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, Czechia (www.uoou.gov.cz). If you live in Ireland, you may also lodge your complaint with the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland (www.dataprotection.ie). We would, however, appreciate it if you first gave us the opportunity to resolve your concerns directly with us before you turn to a supervisory authority – so please contact us first.

How we collect and process your personal data

We may collect and further process the following categories of information about you:

Information you provide directly to us:

Information collected automatically:

• technical details, including the IP address of the device used, login details, browser type and version, time zone setting, plug-in types and versions, operating system and platform,
• data about the visit itself – the full clickstream (URL) to our website, your browsing of it and your exit from it, including the date and time,
• records of the products you have viewed or searched for,
• information about page response times, errors during loading, the length of time spent on individual pages, the ways in which you interact (scrolling, clicking, cursor movements) and the ways in which you leave the page.

Personal data obtained from third parties

In addition to the data you give us directly, we may also obtain information about you through other websites we operate or when you use our other services. We also work with external partners – for example business partners, suppliers of technical, payment and delivery solutions, advertising and analytics companies and providers of search services – from whom we may receive personal data relating to you.

Examples of the data we collect

You give us your personal information in various situations, for example when you:

• place an order through Lunzo,
• browse or use content on our website,
• set your preferences on the Lunzo website, give consent to access your data or otherwise manage it,
• add data to your Lunzo account (if you have used several email addresses or telephone numbers when shopping, you may have more than one account)
• communicate with us by telephone, by email or in another way,
• offer goods or services through Lunzo,
• send us a completed questionnaire, a customer support request or another type of enquiry.

As a result of these actions you may give us, for example: your first name and surname, address and contact telephone number, payment details, age, location data, IP address, additional addresses and numbers, the content of your communication with us, documents and information used to verify your identity and reliability, company and financial data, a VAT number or device log files.

Data we collect automatically

When you use our website or services, certain information is stored and evaluated without any active input from you. This typically includes:

• the IP address through which your device connects to the internet,
• login details such as your email address and password,
• data on the location of the device or computer,
• information about how you respond to content and how you connect to the network, including information about your internet service provider,
• the technical parameters of your device and browser – for example device type, operating system, browser and screen resolution,
• system version and time zone settings,
• the history of your orders and use of content, which we sometimes combine with anonymised data from other users so that we can create overviews such as a list of best-selling products,
• a complete overview of the links you have visited (the clickstream) – that is, when and how you reached our website, how you browsed it and when you left it,
• cookie identifiers,
• the list of items or content you have viewed or searched for, page loading speed, error messages, the length of your visit to individual sections and your interaction with content (for example scrolling, clicking or mouse movements).

In addition, we may use various technologies, such as device identifiers and cookies, to collect data about how users behave when browsing the website. This information helps us to detect and prevent fraud in good time.

Processing and legal bases

We use all personal data only for clearly defined purposes. The overview below sets out what we use the data for, the legal basis on which we process it and – where relevant – the legitimate interests we pursue.

Cookies

We use cookies on our website to distinguish between individual visitors. This allows us to make the website more convenient for you to use and to ensure that it runs smoothly and continues to improve. Details of the specific types of cookies and the purposes for which they are used can be found in our separate Cookie Policy.

Advertising tailored to your interests

LUNZO s.r.o. may display advertising that is better targeted to your needs – both on our own website and on partner or entirely independent websites. Such advertising is created on the basis of data about your behaviour, for example which products you have viewed or bought from us, how you respond to our marketing emails, or on the basis of data obtained from other websites and applications. As a result, you may be shown offers of products related to things you have shown an interest in in the past.

What information may be used for this purpose?

We use only the data relevant to this purpose – for example age, gender, the unique identifier of your device, browser settings, your history of using our services or information about how you respond to the messages and advertisements we send (display time, duration, number of opens, responses and so on).

Third-party tools and technologies

We work with external partners to display and evaluate advertising. They may deploy their own technologies, such as cookies, server logs, tracking pixels or web beacons. These tools allow them to combine data obtained from our services with other sources, for example demographic or marketing data, and to understand user behaviour across devices and applications better. Where possible, we provide links to the list of these partners, to their privacy policies and to the option of opting out of targeted advertising with individual providers. Opting out does not mean that you will no longer see any advertising – it will simply be less closely matched to your interests.

How Google uses your data

On our website we use the services of Google (for example Google Analytics and the Google Ads advertising services). Where IP anonymisation is enabled, Google first truncates your IP address within the EU/EEA and only in exceptional cases transfers it in full to Google servers in the USA, where it is truncated. You can find more information about how Google handles data at policies.google.com/technologies/partner-sites.

Linking with your personal data

In most cases, the information used for personalised advertising is not regarded as personal data. However, if we were to link it with data that can identify you directly, we would always give you the option of deciding whether you agree to such linking.

Individually tailored content

Based on your preferences, we may combine your personal data with information you have given to third parties so that we can offer you advertising that better matches your needs – both in our services and on partners’ websites.

Do Not Track (DNT)

Some browsers offer a “Do Not Track” (DNT) function. This is a setting that is still under development and there is as yet no uniform standard for it. If a generally recognised solution emerges in the future, we will respect it. Until then, we follow the principles described in this document.

How we use your data

We use the personal information we obtain about you for several purposes.

Information you give us yourself – If you give us your personal data, for example when registering or making a purchase, we process it in order to:

• fulfil all obligations arising from the contractual relationship and deliver the goods or services you have ordered,
• inform you about similar products and services in which you have already shown an interest,
• send you – or, with your consent, allow our business partners to send you – offers that we believe may be useful to you. If you are already our customer, we will usually contact you by email or SMS only with similar offers. For new customers, electronic communication is subject to prior consent,
• notify you of changes to our services,
• ensure that our website is displayed correctly and efficiently on your device.

Information we collect about you automatically – When you use our website, we also record certain technical and user information. We use this data in particular:

• to administer the website and for internal processes such as testing, analysis and research,
• to improve how the website works and its content so that it meets users’ needs,
• to enable the use of interactive features, where you choose to use them,
• to strengthen security and protect against misuse,
• to measure the effectiveness of advertising and target it better,
• to create recommendations and suggestions for products and services that might be of interest to you.

Aggregated and statistical data – We also frequently process the information we obtain in aggregated form, for example for statistical purposes. Data created in this way no longer allows a specific individual to be identified. However, if it were combined with personal data in such a way that you could be identified directly or indirectly, we would treat it as personal data in accordance with this policy.

Data we do not collect – We do not process special categories of data, such as information about health, sexual orientation, political opinions, trade union membership or criminal records.

Data that has to be provided – Where the law or a contractual relationship requires us to obtain certain personal data from you and you refuse to give it to us, this may affect our ability to supply the service or goods to you. In such a case we would have to cancel the order or the service, but we will always notify you of this in advance.

Sharing personal data with third parties

In some cases it is necessary to disclose your data to selected partners, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679:

• business partners, suppliers and subcontractors, where this is necessary in order to fulfil contractual obligations,
• advertising networks and advertisers, so that advertising matching your interests can be displayed to you. We do not provide them with identifiable personal data; we use aggregated data about users instead. This allows advertisers to target their campaigns better. Where such data is shared, we require partners to store it securely and prohibit them from using it for their own marketing purposes,
• providers of analytics and search tools that help us to operate and optimise the website.

Your data may also be disclosed in the following situations:

• if a company or part of it is sold or bought, the data may be shared with a prospective buyer or seller,
• if LUNZO s.r.o. or a substantial part of it were transferred to another entity, customers’ personal data would form part of the transferred assets,
• where the law requires it or where it is necessary to protect the rights, safety and property of LUNZO s.r.o., our customers or other persons. This may also involve cooperation with other organisations in the prevention of fraud.

Transfers of personal data abroad

Some of our business partners and sellers are based outside the European Economic Area (EEA). When your order is processed, personal data may therefore also be transferred outside the EEA, or to countries that the European Commission considers to provide an adequate level of data protection. We carry out transfers outside the EEA, the United Kingdom or Switzerland only where the law permits this or where adequate safeguards are in place. In other situations, Lunzo uses special contractual mechanisms and safeguards that ensure the protection of your data.

Data retention

We keep personal data only for as long as is necessary for the purpose for which we obtained it:

• Accounting and tax records: 10 years from the end of the tax period in which the transaction took place.
• Orders, complaints and related communication: for as long as we may need the data in order to deal with a claim arising from them, that is usually six years from delivery of the goods, which corresponds to the six-year limitation period for contract claims in Ireland.
• User account: for as long as the account exists. After the account is closed we delete the data stored in it; orders and records we continue to keep in accordance with the points above.
• Commercial communications: until you unsubscribe. After that we keep only the record of your consent and of your unsubscribing (email address and date) for no longer than three years, so that we are able to evidence it and do not send you such communications again.
• Cookies: for the period stated for each individual cookie in the Cookie Policy.
• Other data: for as long as the purpose for which we process it lasts, and after that for no longer than three years. This is deliberately shorter than the limitation period for bringing claims, because we keep personal data only for as long as we genuinely need it.

We keep data for longer only where the law requires us to do so or where it is necessary for the establishment, exercise or defence of legal claims (for example for the duration of court or administrative proceedings).

Data security

We take the security of personal data very seriously. To prevent loss, misuse, unauthorised access or disclosure, we use appropriate organisational, technical and physical measures. Every employee of ours and every external contractor who works with the data is required to keep it confidential.

The data we collect is processed by our staff and our suppliers. We store all the information you give us on secure servers and we protect payment transactions with SSL encryption. Payments are processed by the payment service providers Stripe (Stripe Payments Europe, Ltd., Ireland) and Adyen (Adyen N.V., the Netherlands) – always one of them, depending on the payment method you choose. You enter your card details directly in their secure environment, which meets the PCI DSS standard; Lunzo has no access to full card details and does not store them. Both providers process the data as our processors and, for the purposes of fraud prevention, verification and compliance with legal obligations, also as separate controllers.

If you have set a password for access to certain sections of our website, you are obliged to keep it secret. Please do not share it with anyone else.

It must, however, be stressed that the transmission of data over the internet is never completely secure. Although we do everything we can to protect your information, we cannot guarantee one hundred per cent security while it is being sent. Once the data reaches us, however, we protect it against unauthorised access using strict procedures and security measures.

Your rights relating to the protection of personal data

Access to your data

You have the right to know what personal data we hold about you and how we handle it. If you wish to exercise this right, you can contact us at info@lunzo.ie.

The options available to you under the law

• Access to your data – you can request a copy of the information we process about you and satisfy yourself that we are handling it in accordance with the law.
• Rectification of your data – if you find that your data is incomplete or incorrect, you have the right to ask us to correct it. In some cases we may ask you to confirm that the newly supplied data is accurate.
• Erasure of your data – you can request the deletion of your personal data where there is no longer any reason to keep it. This also applies where you object to the processing, where the data has been used unlawfully or where the law requires us to erase it. In certain situations, however, we may not be able to comply with your request – we will always inform you if that is the case.
• Objection to processing – where we work with your data on the basis of a legitimate interest, you can object if you believe that this could interfere with your rights. This right also applies where your data is used for direct marketing.
• Restriction of processing – you can ask us to suspend work with your data temporarily, for example if you want to verify its accuracy, if it has been used unlawfully and you do not want it erased, if you need it for legal claims, or if you have objected and the objection is being assessed.
• Data portability – you have the right to receive your data in a commonly used, machine-readable format so that you can pass it to another controller. This right applies only to data that we process electronically and either with your consent or under a contract with you.
• Withdrawal of consent – where you give us consent to process certain data, you can withdraw it at any time. Processing carried out before the withdrawal remains lawful. Withdrawing your consent may mean that we are no longer able to offer you certain services or products – in such a case we will always notify you in advance.

How we deal with requests

If you decide to exercise any of these rights, write to us at info@lunzo.ie.

There is no fee for making a request. We would ask for a fee only if a request were repetitive, manifestly unfounded or excessive. In such situations we may also refuse the request where we have legitimate grounds for doing so.

To prevent misuse, we may ask you for additional information to help us verify your identity. This ensures that data does not fall into the wrong hands. To speed up processing, we may also contact you to ask you to clarify your request.

We aim to answer ordinary requests within 30 days at the latest. If your request is more complex, or if several requests are submitted at once, this period may be extended. In that case we will inform you in good time and let you know the estimated date of our reply.

Explanation of terms

Legal bases for processing

Legitimate interest refers to our company’s need to run and manage its business so that we can provide you with quality services, products and a safe environment. Before each processing operation we consider the impact it may have on you – we take into account both positive and negative effects and at the same time we respect your rights. We never use personal data for purposes where our interests would override yours, unless we have your explicit consent or the law gives us that option. If you would like to know more about how we carry out these assessments, you can contact us at any time.

Performance of a contract means that we process data where this is necessary in order to perform a contract to which you are a party, or to take steps that you request before it is concluded.

Legal or regulatory obligation covers situations in which we have to keep or process personal data because a legal provision or a requirement of a competent authority directly obliges us to do so.

Cooperation with third parties

External partners

• Sellers whose products you order – we pass on to them only the data necessary to deal with the order, a return or a complaint. Some sellers are based outside the EEA; details can be found above in the section Transfers of personal data abroad.
• IT suppliers and system administration providers based in Czechia, who act as processors on our behalf.
• Professional advisers operating in Czechia – lawyers, banking institutions, auditors and insurers – who may act either as processors or as jointly responsible entities.
• Public authorities and supervisory bodies, where the law requires it.
• The payment service providers Stripe (Stripe Payments Europe, Ltd., Ireland) and Adyen (Adyen N.V., the Netherlands) – processing of card, Apple Pay, Google Pay and Revolut Pay payments, prevention and detection of fraud and verification of payments. Stripe may also collect data through cookies and similar technologies; more at stripe.com/privacy.
• Marketing and analytics partners whose tools we use on the website (for example Google and Meta). Their current list, including cookies, can be found by clicking “Cookie settings” in the footer of the website and then “Settings” (“Cookie list” tab); you can change your consent at any time in the same place. Google explains how it handles the data obtained in this way at policies.google.com/technologies/partner-sites.

Contact

If you have any questions, comments or requests relating to this privacy policy, please contact us at the email address info@lunzo.ie.