Customer support:+420 722 431 444marketa@lantidote.co
    Currency
    EUR
    Language
    English
    Home / GDPR – Personal Data Processing Policy

    GDPR – Personal Data Processing Policy

    L’ANTIDOTE JEWELLERY

    Effective from: 23 October 2026

    L´antidote, s.r.o., Company ID (IČO): 06220479, VAT ID (DIČ): CZ06220479, with its registered office at Evropská 2589/33b, Dejvice, 160 00 Prague 6, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 278278 (hereinafter the “Seller”).

    I. DATA CONTROLLER

    1. The controller of personal data is the Seller, L´antidote, s.r.o., with its registered office at Evropská 2589/33b, Dejvice, 160 00 Prague 6, Czech Republic.
    2. Controller contact details: e-mail marketa@lantidote.co, phone +420 722 431 444.
    3. The Seller has not appointed a data protection officer, as it is not required to do so by law.

    II. SCOPE OF PERSONAL DATA PROCESSED

    1. The Seller processes only the personal data provided to it by the Buyer. For the purposes of this policy, the Buyer means a natural or legal person, a buyer acting as a consumer or within the scope of their business, or a visitor to the Seller’s website.
    2. This includes in particular name and surname, delivery and billing address, e-mail, phone number, order and payment details and, for custom-made jewellery, data needed for its production (e.g. ring size, engraving text).
    3. The Seller also processes data arising from interaction with the Seller’s website, in particular the IP address, date and time of access to the website, information about the web browser, operating system or language settings. The Seller may also process information about behaviour on the website, e.g. which links the Buyer visits and which goods are displayed to them.
    4. The Seller also uses cookies and similar technologies. When entering the website, the Buyer can choose via the cookie banner which optional cookies the Seller will use, and can change this choice at any time. Detailed information is provided in the Cookie Policy.

    III. PURPOSES AND LEGAL BASES OF PROCESSING

    1. Personal data may be processed manually or automatically.
    2. Purchase of goods and services: the Seller processes personal data primarily to properly process and deliver the order, produce custom-made jewellery and resolve any delivery issues. The legal basis is the performance of the purchase contract.
    3. Customer care: if the Buyer contacts the Seller with a question or problem, the Seller processes the Buyer’s personal data to resolve it. The legal basis is the performance of the contract or the Seller’s legitimate interest.
    4. Complaints and service: when handling complaints and jewellery servicing, the Seller processes the data necessary to handle them. The legal basis is the performance of the contract and legal obligations.
    5. User account: the data provided in the user profile give access to a number of useful features (e.g. an overview of orders). The Buyer may change the data at any time, except for the e-mail address, which is used to access the user account.
    6. E-mail marketing: the Seller sends commercial e-mails (newsletter) on the basis of the Buyer’s consent. The Seller may also send existing customers commercial communications about similar goods on the basis of its legitimate interest. The Buyer can unsubscribe at any time via the “unsubscribe” link in each e-mail, in the user profile settings or by e-mail at marketa@lantidote.co.
    7. Reviews of goods and services: after a purchase, the Buyer may be asked to review the goods or services.
    8. Legal obligations: the Seller also processes personal data to comply with accounting and tax regulations, for inspections carried out by public authorities and to fulfil anti-money laundering (AML) obligations applicable to trading in precious metals and precious stones.
    9. Protection of the Seller’s rights: personal data may also be processed for the establishment, exercise or defence of legal claims and for the prevention of fraud and cybercrime, on the basis of the Seller’s legitimate interest.
    10. Providing the personal data necessary to process an order is a contractual requirement. Without it, the purchase contract cannot be concluded or performed. The Seller does not carry out automated decision-making that would have legal effects on the Buyer.

    IV. TRANSFER OF PERSONAL DATA

    1. Delivery of goods: to enable the carrier to deliver the ordered goods, the Seller provides it with information on where and to whom the goods are to be delivered, according to the details entered in the order. The data transferred include in particular name and surname, delivery address, phone number and e-mail and, where applicable, the amount payable on delivery. The same applies to delivery to a pick-up point or parcel locker. The recipients are the carriers chosen by the Buyer (e.g. Zásilkovna/Packeta, PPL, GLS, Czech Post – Balíkovna, AlzaBox) or the Shoptet Balíky service.
    2. Payment gateway: online payments (e.g. card payments) are processed by the payment gateway operator Comgate a.s., Company ID 27924505, with its registered office at Gočárova třída 1754/48b, 500 02 Hradec Králové, Czech Republic. The Seller does not process or store the Buyer’s payment card details. The transaction takes place in the secure environment of the payment gateway operator. Requests for erasure of transaction data (e.g. the payment card number) must be addressed to the payment gateway operator, which may retain the data for a certain period in order to resolve claims with the Buyer’s bank.
    3. Other processors: personal data may also be made available to the operator of the e-commerce platform (Shoptet, a.s.), providers of accounting, IT and e-mailing services and providers of analytical and marketing tools (Google, Meta) to the extent set out in the Cookie Policy.
    4. In connection with the use of Google and Meta services, data may be transferred outside the European Economic Area on the basis of appropriate safeguards under the GDPR (e.g. an adequacy decision or standard contractual clauses).
    5. The Seller makes every possible effort to ensure that the Buyer’s data are protected by the third parties to whom they have been transferred, both legally (contractual data protection obligations) and technically.

    V. RETENTION PERIOD

    1. The Seller generally retains the Buyer’s personal data for 5 years from the last purchase.
    2. Accounting and tax documents (e.g. invoices and credit notes) are retained for the period required by law, usually 10 years.
    3. Data processed on the basis of consent are retained until consent is withdrawn.
    4. In justified cases, the retention period may exceed these periods, in particular if a dispute or complaint procedure is in progress between the Buyer and the Seller.
    5. After the retention period expires, the personal data will be deleted or anonymised.

    VI. DATA SECURITY

    1. The Seller takes measures that are appropriate, given the nature of the personal data, to prevent their misuse or leakage.
    2. In particular, it limits the number of persons who come into contact with the data and ensures their confidentiality. Data that also require non-digital storage (e.g. invoices, shipping receipts) are stored so that no unauthorised person can access them.
    3. Authorised persons are instructed on how to handle personal data and comply with all legal and ethical rules for their processing.

    VII. RIGHTS OF THE BUYER

    1. The Buyer has the right to request from the Seller access to their personal data, their rectification or erasure, restriction of processing and the right to data portability.
    2. The Buyer has the right to object to processing based on the Seller’s legitimate interest, including the sending of commercial communications.
    3. Where processing is based on consent, the Buyer has the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing before its withdrawal.
    4. The Buyer can exercise these rights by e-mail at marketa@lantidote.co.

    VIII. ERASURE OF DATA

    1. The Buyer may request the erasure of personal data by e-mail at marketa@lantidote.co.
    2. Erasure does not affect data in documents that the Seller is required by law to retain (e.g. invoices or credit notes). If the Seller needs the personal data for the establishment, exercise or defence of its legal claims (e.g. an unpaid receivable or an ongoing complaint procedure), the request may be refused.
    3. Except in the cases above, the Buyer has the right to erasure in particular where:
      • the personal data are no longer necessary for the purposes for which they were processed,
      • the Buyer has withdrawn the consent on which the processing was based and there is no other legal ground for the processing,
      • the Buyer has objected to the processing and their interest overrides the Seller’s interest in the specific situation,
      • the personal data are processed unlawfully,
      • erasure is required by a specific legal regulation,
      • the data concern children under 16 years of age.

    IX. SUPERVISORY AUTHORITY

    1. If the Buyer believes that their personal data are being processed unlawfully, they have the right to lodge a complaint with the supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.gov.cz.

    X. FINAL PROVISIONS

    1. This policy may be updated in response to changes in legislation or in the way personal data are processed. The current version is always available on the L’ANTIDOTE website.
    2. If you have any questions, you can contact us at marketa@lantidote.co.

     

    L’ANTIDOTE JEWELLERY

    Diamonds. No dress code.