Lucia Tužinská
HomePaintingsPrintsCommissionsAboutContact

Privacy

Effective from 1 July 2026

1. Who we are

The controller of your personal data is encode s. r. o., registered office Račianska 88B, 831 02 Bratislava, Slovak Republic, Company ID (IČO): 51 968 622 (the "we"), operator of the online shop at luciatuzinska.com.

For anything related to your personal data, write to info@luciatuzinska.com.

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on personal data protection.

2. What we process, why, and on what legal basis

Orders and delivery

When you place an order we process your name, billing and delivery address, email address, phone number, the items ordered and payment status. We use this data to conclude and perform the contract of sale — to confirm and process your order, deliver the artwork, issue the invoice and handle any returns or complaints.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR); issuing and keeping invoices is a legal obligation (Art. 6(1)(c) GDPR).

Payments

Payments are processed by Stripe. Your card or wallet details are entered directly with Stripe and never reach our servers — we receive only confirmation of payment and the last digits of the card for order identification.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Enquiries and correspondence

When you write to us — through the contact page, an "ask about this painting" enquiry, or a commission request — we process your name, email address and the content of your message in order to reply and, where relevant, prepare an offer.

Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

Newsletter

If you subscribe to the newsletter we process your email address to send you occasional news about new works and exhibitions. Subscription uses double opt-in: we send you a confirmation email and only add you to the list after you confirm. You can unsubscribe at any time via the link in every email or by writing to us.

Legal basis: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

Website analytics

We use privacy-preserving, cookie-less analytics that give us aggregate statistics (page views, referrers, countries) without identifying individual visitors, storing anything on your device, or tracking you across sites.

3. Who receives your data

We share personal data only with service providers who help us run the shop, and only to the extent necessary:

  • Stripe (Stripe Payments Europe, Ltd. / Stripe, Inc.) — payment processing;
  • Websupport, s. r. o. (Slovakia) — website hosting;
  • Cloudflare, Inc. — content delivery network, security and cookie-less analytics;
  • Shipping carriers (e.g. Slovenská pošta, Packeta, GLS, or a courier appropriate to the destination) — name, address, phone and email needed to deliver the shipment;
  • [Newsletter provider — TBD] — sending the newsletter;
  • [Accounting firm] — processing of invoices required by law.

We never sell personal data and never share it for third-party advertising.

4. Transfers outside the EU

Some providers (Stripe, Cloudflare) may process data in the United States. Such transfers are safeguarded under the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

5. How long we keep data

  • Orders, invoices and related records — 10 years, as required by Slovak accounting and tax law;
  • Enquiries and correspondence that do not lead to an order — up to [2 years] after our last exchange;
  • Newsletter data — until you unsubscribe or withdraw consent (we keep the consent record itself as proof of lawful sending);
  • Complaint and return records — for the time needed to handle the claim and any legal limitation periods.

6. Your rights

You have the right to:

  • access the personal data we hold about you and obtain a copy;
  • have inaccurate data corrected and incomplete data completed;
  • have your data erased where there is no longer a legal ground to keep it;
  • restrict processing in the cases set out in Art. 18 GDPR;
  • receive the data you provided in a portable, machine-readable format;
  • object to processing based on our legitimate interest;
  • withdraw consent at any time (this does not affect processing carried out before withdrawal).

To exercise any of these rights, email info@luciatuzinska.com. We will respond within one month.

You also have the right to lodge a complaint with the supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.

7. Cookies

This website uses only essential cookies — short-lived cookies set by the shop software to keep your cart contents and checkout session working. They are strictly necessary for the service you request, contain no advertising or cross-site tracking, and are deleted automatically. Because we use no non-essential cookies, no cookie consent banner is required.

8. No profiling

We do not use automated decision-making or profiling.

9. Changes to this policy

We may update this policy from time to time, for example when we change a service provider. The current version, with its effective date, will always be published on this page.