Dear customers,
in order for you to buy goods through our online shop, we need to process your personal data. Lawful processing of your personal data and its security is our priority. Please allow us to inform you about the processing and protection of your personal data.
Who are we?
Your personal data is processed by the operator of the e-shop (the controller). The controller is a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
The operator of our e-shop www.lajtos.sk is:
LAKLA s.r.o.
registered seat: Nám. Hrdinov 3715/13A, 932 01 Veľký Meder, Slovak Republic
Company ID (IČO): 47 581 735
VAT ID (IČ DPH): SK2024031207
Registered in the Commercial Register of the District Court Trnava, Section: Sro, Insert No. 33514/T
How can you contact us?
We await your comments, questions and requests at:
Tel.: +421 903 748 194
E-mail: info@lajtos.sk
We process the following personal data:
Purchase
Your satisfaction is our top priority. In order to provide you with information, sell and deliver the selected goods and fulfil all related legal and contractual obligations, we process your personal data in the following scope:
name, surname, address, delivery address if different, telephone number, e-mail, order and payment details (order number, ordered goods, payment method and status; we never receive your payment card data), and in the case of a business also the company name, company ID and VAT ID.
Marketing
We strive to be your reliable partner. In order to send you offers, information about products and news, or to contact you with market research, we process your personal data in the following scope:
– e-mail.
Partner account
For contracted business partners we set up a user account on request (public registration is not available). For the purpose of maintaining the partner account we process your personal data in the following scope:
name, surname, company name, company ID, VAT ID, address, delivery address if different, telephone number, e-mail and login details.
Contact forms and enquiries
If you contact us (e.g. with interest in a partnership, tasting sets or contract distilling), we process your personal data in the following scope:
name, surname, company name, telephone number, e-mail and the content of your message.
Visiting the website
When you visit our website we process technical data in the following scope:
IP address, browser type and version, device, language, pages visited, date and time of access and cookie identifiers (see the “Cookies” section).
Protection of legal claims
In the event of a breach of our rights, we process the following personal data:
name, surname, address, delivery address if different, telephone number, e-mail.
For what purpose do we process your personal data?
E-shop
We process your personal data for the purpose of concluding a contract through our e-shop and its proper performance, in particular for: providing information, receiving, recording and processing the order, dispatching the goods, issuing the accounting document and keeping accounts, handling any withdrawal from the contract or any complaint. We therefore process your data on the basis of law, for the purpose of performing the contract, i.e. no separate consent is required. As we sell alcoholic beverages, in case of doubt we may verify that you are at least 18 years old; this processing is based on our legal obligation.
Marketing communication
We process your personal data for the purpose of customer care, providing information about products and services and market research, namely by sending newsletters. If you have not yet purchased from us, we process your personal data for this purpose only if you give us your consent. If you are already our customer, we process your personal data on the basis of legitimate interest.
Partner account
We process your personal data for the purpose of maintaining the partner account, displaying individual partner prices and making purchases in our e-shop easier, on the basis of the contract concluded with the business partner. If you forget your password, you can request a new password to be sent to the e-mail address provided.
Contact forms and enquiries
We process your personal data in order to respond to your enquiry and to discuss possible cooperation, on the basis of pre-contractual steps taken at your request and our legitimate interest.
Operation and security of the website, analytics and advertising
We process technical data to ensure the correct display and security of the website and to diagnose errors, on the basis of our legitimate interest. For measuring traffic and for advertising purposes (Google Analytics, Google Ads, Meta Pixel) we process data only on the basis of your consent given in the cookie banner.
Protection of legal claims
The controller considers the processing of personal data for the purpose of protecting legal claims to be necessary for the protection and exercise of the rights and obligations arising from the legal relationship between the controller and the customer.
What is our legitimate interest?
In certain cases we process your personal data on the basis of our legitimate interest. If you are already our customer, i.e. you have purchased from our e-shop at least once in the past, we take the liberty of sending you a newsletter on the basis of legitimate interest. This marketing activity is directly related to the provision of our services and brings you a benefit in the form of easier future purchases of the type of goods in which you have already shown interest. In this connection we process only your e-mail. Of course, you can stop receiving newsletters at any time, of which you will also be informed directly in each newsletter sent. Direct marketing is our legitimate interest within the meaning of the GDPR.
We consider the secure and functional operation of the website (protection against attacks, essential cookies, error diagnostics) and responding to your enquiries to be our legitimate interest.
The controller considers the protection of legal claims to be a legitimate interest, in particular for the protection and exercise of the rights and obligations arising from the legal relationship between the controller and the customer.
How can you give us your consent?
In certain cases mentioned above we need your consent in order to process your personal data. We ask for your consent to the processing of your personal data in only two cases:
- subscribing to the newsletter in the case of an interested person who is not yet our customer,
- the use of analytics and marketing cookies.
You can give us your consent to the processing of your personal data in one of the following ways:
- by subscribing to the newsletter, i.e. by entering your e-mail address in the relevant field,
- by ticking the relevant boxes – checkboxes,
- by your choice in the cookie banner when visiting the website.
How can you withdraw your consent?
You can withdraw the consent to the processing of personal data that you have given us at any time. You can withdraw your consent:
- by clicking on the “Unsubscribe from newsletter” link, which is available in every newsletter (advertising mail) sent, or
- by changing your cookie settings (the link to the cookie settings can be found in the footer of the website), or
- you can send us a notice at any time by e-mail to: info@lajtos.sk.
How long do we keep your personal data?
E-shop
We keep purchase contracts concluded through our e-shop for the period of processing the order, or for the time necessary in case rights are exercised, e.g. complaints.
Accounting documents are kept for 10 years by law.
Documents relating to complaints are kept for 5 years.
Partner account data for the duration of the partner account, or of the contract with the business partner.
Contact forms and enquiries
For the period of handling the enquiry, at most 2 years if no contract is concluded.
Protection of legal claims
Documents relating to court disputes are kept for 10 years.
Marketing
We keep your e-mail address until the purpose for which you gave us your consent to processing has ended.
Visiting the website
Server and security logs generally for no more than 90 days; the retention periods of individual cookies are stated in the cookie settings.
To whom do we provide your personal data?
When processing your personal data we also use the services of vetted and contractually bound external business partners who help us process and protect your personal data. For the purpose of providing our services we provide personal data to:
- our external accountant,
- the carrier when the purchased goods are dispatched,
- KROS a.s., registered seat: A. Rudnaya 21, 010 01 Žilina, Company ID: 31635903, for the purpose of issuing invoices through the iKros application,
- Global Payments s.r.o. (GP webpay payment gateway) for the purpose of processing card payments; the payment takes place on the payment gateway's page and card data is processed exclusively by the payment gateway and your bank,
- our bank in the case of bank transfers and refunds,
- Bring Team Ltd, which provides development, maintenance and technical administration of the website and e-shop,
- Wootemple AB (Templ.io), Mariefred, Sweden, which provides web hosting; data is stored on servers in the EU,
- the e-mail delivery service provider (order confirmations),
- Usercentrics GmbH (cookie consent management),
- Google Ireland Ltd. (Google Analytics, Google Tag Manager, Google Ads) and Meta Platforms Ireland Ltd. (Meta Pixel) – only with your consent, for analytics and advertising purposes,
- providers of website security and error-monitoring services (Wordfence / Defiant Inc., Sentry / Functional Software Inc.),
- public authorities where required by law.
Where do we transfer your personal data?
As a rule, we do not transfer the personal data we process for the above purposes to third countries. However, some of the providers listed above (in particular Google, Meta and security/monitoring services) may also process data in the USA; in such a case the transfer is based on an adequacy decision of the European Commission (EU-US Data Privacy Framework) or on standard contractual clauses approved by the Commission.
Cookies
Our website uses cookies. On your first visit, the cookie banner allows you to accept or decline non-essential cookies by category; you can change your choice at any time via the link in the footer of the website.
- Essential cookies – required for the e-shop to function (cart, checkout, language selection, security, storing your consent); they cannot be switched off.
- Analytics cookies – Google Analytics, for measuring traffic; only with your consent.
- Marketing cookies – Google Ads and Meta Pixel, for measuring and targeting advertising; only with your consent.
Where can you turn if you are not satisfied?
Your satisfaction is our goal. For this reason we always try to meet all your requests. However, if you are not satisfied with the way we process your personal data, write to us by e-mail at: info@lajtos.sk
You also have the option of lodging a complaint with the Office for Personal Data Protection of the Slovak Republic (Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk), in particular if you believe that we are processing your personal data unlawfully.
In what form do we process your personal data?
We process your personal data in electronic and paper form, and we do not use automated individual decision-making or profiling. Paper-based processing of your personal data is carried out only for the purpose of keeping accounts.
How do we ensure the protection of your personal data?
As stated at the beginning of this document, the security of your personal data is our priority. For this reason we have adopted the necessary and appropriate technical and organisational measures to protect your personal data, among other things, against loss, manipulation or unauthorised access. The technical means used for processing personal data are duly secured with passwords known only to authorised persons. The e-shop data is stored with our hosting provider on servers in the European Union and transmitted over an encrypted (HTTPS) connection. Only authorised persons have access to it, who have been duly instructed and are familiar with our internal rules and guidelines governing the handling of personal data. The measures adopted are subject to regular review and are continuously adapted to the latest state of the art. Should a breach of the protection of your personal data occur, we will inform you without undue delay, within 72 hours, if such a breach could result in a high risk to your rights.
What rights do you have?
Right of access to data
First of all, you have the right to know whether we process your personal data. If we process your personal data, you can ask us for access to it. On the basis of your request we will issue a confirmation with information about the processing of your personal data by our company.
Right to rectification
You have the right for the personal data we process to be accurate, complete and up to date. If your personal data is inaccurate or out of date, you can ask us to correct or complete it.
Right to erasure
Under certain circumstances you have the right to have your personal data erased. You can ask us to erase your data at any time. We will erase your personal data if:
- we no longer need your personal data for the purpose for which you provided it to us;
- you withdraw your consent;
- you object to the processing of your personal data;
- we process your personal data unlawfully;
- the personal data must be erased in order to comply with a legal obligation;
- you are a child, or the parent of a child, who consented to the processing of personal data via the internet.
However, there may be cases where, despite your request, we will not be able to erase your personal data (or part of it) due to the fulfilment of a legal obligation. We will inform you of this without delay.
Right to restriction of processing
You can also ask us to restrict the processing of your personal data. If we grant your request, we will only store your personal data and will not process it further. Processing of your data will be restricted if:
- you notify us that your personal data is inaccurate, until we verify its accuracy;
- we process your personal data unlawfully, but you do not agree to its erasure and instead request that we only restrict the processing of your personal data;
- we no longer need your data, but you need it to establish, exercise or defend your rights or claims;
- you object to the processing of your personal data, until we verify whether our legitimate interests override your grounds.
Right to data portability
You have the right to request that we provide you with your personal data in electronic form (e.g. an XML or CSV file) that will allow you to easily transfer the data to another company. Alternatively, on the basis of your written request, we will transfer your personal data directly to the company of your choice. We will grant your request if you provided the personal data to us directly and gave us your consent to its processing, or if we process it on the basis of a contract.
Right to object
You have the right to object to our processing of your personal data. If we process your personal data for direct marketing purposes, you can object to its processing at any time. On the basis of your objection we will erase your personal data. If we process your personal data in the following cases:
- for the performance of a task carried out in the public interest or in the exercise of official authority,
- on the basis of our legitimate interest,
you may object to its processing if you have personal reasons for doing so.
How can you exercise these rights?
We await your requests at:
Tel.: +421 903 748 194
E-mail: info@lajtos.sk
Handling of requests
We will deal with all your requests and inform you of the outcome in the same way as you submitted the request. When handling your request to exercise the rights of a data subject under the GDPR, we may ask you for reliable verification of your identity.
Each of your requests to exercise the rights of a data subject will be assessed individually and competently, and we will always inform you of the outcome no later than one month after receipt of the request. The process of handling a request related to the exercise of the rights of a data subject under the GDPR is free of charge.
If your request is manifestly unfounded or excessive, in particular because of its repetitive character, we are entitled to charge a reasonable fee taking into account the administrative costs of providing the requested information. In the case of a repeated request for copies of the personal data being processed, we reserve the right to charge a reasonable fee for administrative costs for this reason.
If, in your opinion, we have not handled your request to exercise the rights of a data subject in accordance with the GDPR, you have the option of lodging a complaint with the supervisory authority (www.dataprotection.gov.sk) or seeking a judicial remedy directly before the competent general court.
Final provisions
This privacy policy takes effect on the day of its publication on 23 September 2026.
We reserve the right to change this policy if there is a change in the processing of personal data in our company. The current version is always published on this page.