Privacy Policy

We value your trust. This page explains what personal data we process when you shop on the e-shop la-knobella.cz, why, for how long and what rights you have. Processing is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council ("GDPR") and by Czech Act No. 110/2019 Coll., on Personal Data Processing.

1. Who is the controller of your data

Lucie Knob – La Knobella
Company ID (IČO): 19627769
registered office: Generála Janouška 884/46, 198 00 Prague 9, Czech Republic
email: lucie@la-knobella.cz
phone: +420 773 900 626

("We" or the "Controller"). You can contact us at the email above with any question about your personal data.

2. What data we process, why and for how long

2.1. Processing your order

• Data: first name and surname, email, phone, delivery and billing address or the chosen Zásilkovna pickup point, content and price of the order, payment information (whether and when it was made) and, for bank transfers, the account number from which you send the payment. We do not see or store your card details – they are processed directly by the Stripe payment gateway.
• Why: to conclude and perform the purchase contract – to prepare and ship the goods and to communicate with you about the order.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• How long: while the order is being processed and then as set out in points 2.2 and 2.3.

2.2. Accounting and tax obligations

• Data: data stated on invoices and in accounting and tax records.
• Why: to fulfil obligations imposed on us by tax and accounting regulations.
• Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
• How long: for the period required by these regulations, usually up to 10 years.

2.3. Claims, withdrawals and protection of our rights

• Data: order data and communication concerning claims or withdrawal from the contract.
• Why: to handle claims and withdrawals and, in case of a dispute, to prove what was agreed.
• Legal basis: compliance with a legal obligation and our legitimate interest (Art. 6(1)(c) and (f) GDPR).
• How long: 4 years after the order has been completed (limitation period plus a reserve for asserting claims).

2.4. User Account

• Data: email address; when signing in with Google also the name and profile photo provided by Google; order history and account settings (e.g. consent to receive news).
• Why: so you have an overview of your orders and do not have to enter your details again.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• How long: until the account is cancelled. We may cancel an account unused for more than 24 months (Art. 5.3 of the Terms and Conditions).

2.5. Newsletter and news

• Data: email address, date and method of subscription.
• Why: to send you news about collections and promotions.
• Legal basis: your consent (Art. 6(1)(a) GDPR), given by subscribing or by enabling news in your User Account.
• How long: until you withdraw your consent. You can unsubscribe at any time via the link in every newsletter email, in your User Account or by email to lucie@la-knobella.cz.

2.6. Reviews

• Data: name (or its shortened form), text and date of the review and an internal link to your purchase (order number or a record of an order placed via Instagram).
• Why: to publish reviews and to prove that they come from real customers (Art. 3.3 of the Terms and Conditions).
• Legal basis: your consent to publishing the review (Art. 6(1)(a) GDPR); we keep the link to the purchase on the basis of our legitimate interest in proving the authenticity of reviews (Art. 6(1)(f) GDPR).
• How long: while the review is published, or until you withdraw your consent.

2.7. Communicating with you

• Data: data you give us by email, phone or in an Instagram message (e.g. when consulting on custom jewellery).
• Why: to answer your questions and agree on custom orders.
• Legal basis: our legitimate interest in handling your enquiry, or steps taken prior to entering into a contract (Art. 6(1)(b) and (f) GDPR).
• How long: as long as necessary to handle the enquiry, no longer than 3 years after our last communication; if the communication relates to an order, as set out in points 2.1 to 2.3.

2.8. Website traffic

We measure traffic with Umami, which does not use cookies and does not collect data that could identify you. We only see aggregate statistics (e.g. the number of visits to individual pages).

3. Who we share data with

We do not sell your data. We only share it with those who help us run the e-shop, to the extent necessary for the given purpose:

• Stripe Payments Europe, Ltd. (Ireland) – card payment processing;
• Zásilkovna s.r.o. (Packeta, Czech Republic) – parcel delivery, including the choice of pickup point;
• Resend, Inc. (USA) – sending emails (order confirmations, sign-in links, news);
• Vercel Inc. (USA) – e-shop hosting and photo storage;
• Neon, Inc. (USA) – the database storing orders and accounts;
• Google Ireland Limited (Ireland) – signing in to the User Account with a Google account (only if you choose this method);
• Umami Software, Inc. (USA) – traffic measurement without personal data (see point 2.8).

If you contact us via Instagram, your data is also processed by Meta Platforms Ireland Limited as an independent controller under its own policies.

We may also disclose data to public authorities where required by law.

Some processors are based in the USA. Data transfers take place on the basis of the European Commission's adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses approved by the European Commission.

4. Cookies and similar technologies

The e-shop uses only strictly necessary cookies and browser storage, without which the e-shop would not work. We do not use advertising or tracking cookies, and therefore do not ask for your consent via a cookie banner.

• Sign-in and security – cookies that keep you signed in to your User Account and protect forms against misuse. You stay signed in for 90 days from your last visit, or until you sign out.
• Cart, favourites and chosen delivery – stored directly in your browser (local storage); this data only reaches us with your order.
• Stripe payment gateway – on the payment page (checkout.stripe.com) Stripe uses its own necessary cookies to secure the payment and prevent fraud.
• Pickup point selection – the pickup point map is provided by Zásilkovna, which may use its own strictly necessary cookies.
• Sign-in with Google – when signing in we redirect you to Google, which uses its own cookies under Google's policies.

You can delete or block cookies at any time in your browser settings; some e-shop features (sign-in, cart) may then not work.

5. Your rights

In connection with the processing of your personal data you have the right:

• of access to your data and to information on how we process it;
• to rectification of inaccurate or incomplete data;
• to erasure of data where there is no longer a reason to process it;
• to restriction of processing;
• to data portability for data obtained on the basis of a contract or consent;
• to object to processing based on our legitimate interest;
• to withdraw consent at any time – withdrawal does not affect processing before it;
• to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.

You can exercise your rights by email to lucie@la-knobella.cz. We will respond without undue delay, no later than within one month.

6. Security

We protect data with appropriate technical and organisational measures. Communication with the e-shop is encrypted (HTTPS), access to the administration is password-protected and card details are processed exclusively by the certified Stripe payment gateway.

7. Changes to this policy

We may update this policy, in particular when the way the e-shop works or the law changes. The current version is always available on this page.

This policy is effective from 28 September 2026.