LUNA · Privacy · GDPR

Privacy Policy

Information about how LunaStore.cz processes and protects the personal data of customers and visitors to our online store.

Data Controller

LunaStore.cz

LunaStore – Marchenko Zoia (self-employed)

Registered office: Gregárkova 49/9, Stará Bělá, 724 00 Ostrava, Czech Republic

Company ID (IČ): 23949741

Email: luna.teamcz@gmail.com

Phone: +420 722 467 172

The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR) and the applicable laws of the Czech Republic.

The Controller has not appointed a Data Protection Officer (DPO).

 
I.

What Personal Data We Process

We process only the data necessary for operating the online store, processing orders, communicating with customers and complying with our legal obligations.

  • first and last name,
  • email address,
  • phone number,
  • delivery address,
  • billing information,
  • order information,
  • payment information,
  • IP address and technical data,
  • cookies according to your settings.
 
II.

Data Processed When Using the Contact Form

Data processed: name, email address and content of the message

Purpose: responding to your enquiry

Legal basis: Article 6(1)(b) GDPR

Retention period: maximum 3 months after the communication has ended

 
III.

Data Processed When Shopping in the Online Store

When you place an order, we process in particular your first and last name, address, email address, phone number, order information and billing information.

Purpose of processing:

  • delivery of goods,
  • processing and fulfilment of the order,
  • communication regarding the status of the order,
  • handling complaints and returns.

Legal basis:

  • Article 6(1)(b) GDPR – performance of a contract,
  • Article 6(1)(c) GDPR – compliance with legal obligations.

Retention period:
accounting documents – 10 years
order data – 5 years

 
IV.

Newsletter and Commercial Communications

If you are our customer and have not opted out, we may use your email address to send you news, information about products and special offers.

Legal basis: Section 7(3) of Act No. 480/2004 Coll.

Retention period: until you unsubscribe, but no longer than the period for which the use of the data for this purpose remains justified.

You may unsubscribe from commercial communications at any time by using the unsubscribe link included in each marketing email.

 
V.

Remarketing and Personalised Advertising

For marketing purposes, we may use the following services:

  • Google Ads – Google Ireland Ltd.
  • Meta – Facebook and Instagram, Meta Platforms Ireland Ltd.

Marketing cookies and technologies used for remarketing are activated only with the user's consent provided through the cookie banner.

 
VI.

Who May Have Access to Your Data

Personal data may be disclosed, to the extent necessary, to trusted partners that provide services related to the operation of the online store, payments, delivery, analytics or marketing.

Delivery:

  • Balíkovna / Czech Post,
  • courier services,
  • Nova Post.

Payments: PayU

Operation of the online store: e-commerce platform, hosting, technical administration and security.

Analytics and marketing:

  • Google Analytics 4,
  • Google Ads,
  • Meta.

Recipients process personal data only to the extent necessary to provide the relevant service and in accordance with applicable data protection legislation.

 
VII.

Transfers of Personal Data Outside the European Union

In connection with the use of certain services, personal data may be transferred to countries outside the European Union or the European Economic Area. Such transfers take place only where an appropriate legal mechanism and level of personal data protection are ensured in accordance with the GDPR.

 
VIII.

Your Rights Under the GDPR

Subject to the conditions set out in the GDPR, you have the right to:

  • access your personal data,
  • request correction of inaccurate data,
  • request erasure of personal data,
  • request restriction of processing,
  • data portability,
  • object to processing,
  • withdraw your consent at any time,
  • lodge a complaint with the supervisory authority.

You may lodge a complaint with the Office for Personal Data Protection of the Czech Republic.

Website: www.uoou.cz

Requests concerning your rights will be handled without undue delay and within the time limits established by the GDPR.

 
IX.

Security of Personal Data

We use appropriate technical and organisational measures to protect personal data.

  • secure systems and servers,
  • encrypted HTTPS communication,
  • restricted access to personal data,
  • regular updates and security checks.
 
X.

Cookies

1. Essential Cookies

These cookies are necessary for the proper functioning of the shopping cart, login, security and other essential website functions. Your consent is not required for the use of these cookies.

2. Analytics Cookies

These cookies are used to measure website traffic and evaluate website performance, for example through Google Analytics 4. They are activated only with your consent.

3. Marketing Cookies

These cookies may be used for advertising personalisation and measurement, for example through Google Ads or Meta. They are activated only with your consent.

Cookie settings

You may change or withdraw your consent at any time through the cookie banner settings. Certain cookie settings may also be managed through your web browser.
XI.

Final Provisions

The current version of this Privacy Policy is always available on our website.

The Controller reserves the right to update this document, particularly in the event of changes to applicable legislation, services used or the operation of the online store.

This document is effective from 18 November 2025.