Privacy Policy

Provided in accordance with Articles 12 and 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “Regulation” or “GDPR”). Effective from 28 September 2026.

Controller

LEJAAN s.r.o., registered office Šumavská 931/13, Vinohrady, 120 00 Prague 2, Czech Republic, Company ID (IČ) 285 99 349, registered in the Commercial Register kept by the Municipal Court in Prague, file no. C 158886 (“we”).
Contact for all data protection matters: info@lejaan.com. We have not appointed a data protection officer.

What data we process

When you visit www.lejaan.com, create an account or place an order, we process: identification and contact data (name, email address, telephone number if you provide it), delivery and billing address, order details and order history, payment information (payment method and transaction status; full card details are handled by the payment provider, not by us), your communication with our customer care, and, if you consent, data collected by cookies and similar technologies.

Purposes and legal bases

Concluding and performing the contract (processing and delivering your order, returns, claims, customer account): Article 6(1)(b) GDPR.
Complying with legal obligations (accounting and tax records, consumer protection): Article 6(1)(c) GDPR.
Our legitimate interests: protecting against fraud and unlawful conduct, establishing and defending legal claims, measuring customer satisfaction, and sending our customers offers of similar products by email (you can opt out in every message): Article 6(1)(f) GDPR.
Your consent: newsletter subscription if you are not yet a customer, and analytics and marketing cookies: Article 6(1)(a) GDPR. You can withdraw consent at any time, by the unsubscribe link in each email, in the cookie settings, or by writing to info@lejaan.com. Withdrawal does not affect processing carried out before it.

Providing the data needed for your order is a contractual requirement; without it we cannot conclude the contract with you. Providing data for marketing is voluntary.

Recipients

We share personal data only with processors and recipients who need it for the purposes above, in particular: the provider of our e-commerce platform (Shopify), the carrier delivering your order (GLS), payment service providers, providers of email marketing, analytics and advertising tools (for analytics and marketing only with your consent), and our accountants, tax advisers, auditors, legal advisers and IT service providers. Your personal data may also be passed to entities conducting customer satisfaction surveys (in particular Favi a.s.) on the basis of our legitimate interest; you may object to this at any time.

Transfers outside the EU

Some of our processors, including Shopify and providers of analytics and advertising tools, may process personal data outside the European Economic Area, in particular in Canada and the United States. Such transfers take place only on the basis of a European Commission adequacy decision (including the EU–U.S. Data Privacy Framework for certified companies) or standard contractual clauses approved by the European Commission.

Automated decision-making

We do not make decisions based solely on automated processing that produce legal effects for you or similarly significantly affect you. If you consent to marketing cookies or subscribe to our newsletter, our tools may group customers by their interests and purchases so that we can show more relevant offers.

Cookies

We use cookies on the website www.lejaan.com. The terms of their use are set out on the Cookie Policy page.

Retention period

We process your personal data only for as long as necessary to fulfil the purpose of processing and our legal and contractual obligations: for the duration of the contract or of the legal obligation (accounting and tax documents for the periods required by law) and, where no archiving obligation applies, for 3 years from the day the purpose of processing was fulfilled. Data processed on the basis of consent is processed until you withdraw consent.

Your rights

You have the right of access to your personal data, the right to rectification of inaccurate data, the right to erasure (“right to be forgotten”), the right to restriction of processing, the right to data portability, the right to object to processing based on legitimate interest (and at any time to processing for direct marketing), and the right to withdraw your consent at any time. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úrad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz, or with the data protection supervisory authority in the EU Member State where you live or work.

To exercise any of your rights, write to info@lejaan.com.