Privacy Policy

Data controller

The controller of personal data is:

Personal data we may process

Depending on your interaction with us, we may process:

• your name and business or organisation;
• email address and other contact information you provide;
• correspondence and information contained in enquiries;
• contract, order, invoice and service-delivery information;
• payment status, amount, currency, transaction reference and related billing information;
• information required to comply with accounting, tax, legal and regulatory obligations;
• IP address, browser information, device information, timestamps, requested pages and security logs generated through normal website hosting and delivery.

The website does not currently contain a contact form, customer account, advertising tracker, analytics service or third-party social media embed.

Information about the website's current cookie setup is available in the Cookie Policy.

Payment information

Payments may be processed by external payment service providers, including Stripe.

Payment card details are entered into the payment provider's secure systems. LIS System s.r.o. does not normally receive or store the full payment card number or card security code.

Payment providers process personal data according to their own legal obligations and privacy information. We may receive transaction details needed to identify a payment, issue an invoice, provide the purchased service, process a refund, prevent fraud and maintain business records.

Purposes and legal bases

We may process personal data for the following purposes:

• responding to enquiries and taking steps requested before entering into a contract;
• entering into and performing contracts;
• delivering services and digital products;
• issuing invoices and administering payments;
• processing refund, cancellation and complaint requests;
• maintaining accounting and statutory records;
• protecting the website, systems, customers and company against misuse, fraud and security incidents;
• establishing, exercising or defending legal claims;
• complying with applicable legal obligations.

Depending on the circumstances, processing is based on:

• performance of a contract or steps taken before entering into a contract;
• compliance with a legal obligation;
• the legitimate interests of LIS System s.r.o. in operating and protecting its business, communicating with customers, maintaining records and resolving disputes;
• consent, where consent is specifically requested.

Recipients and service providers

Personal data may be made available, where necessary, to:

• website hosting and technical service providers;
• email and communication service providers;
• payment service providers, including Stripe;
• accounting, banking and payment-processing providers;
• professional advisers, auditors and legal advisers;
• public authorities where disclosure is required by law;
• other suppliers needed to provide an agreed service.

Recipients receive only the information reasonably necessary for their role.

International transfers

Some technology or payment providers may process data outside the European Economic Area.

Where applicable, transfers are made using a lawful transfer mechanism, such as an adequacy decision, standard contractual clauses or another safeguard recognised by data-protection law.

Retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal requirements.

As a general approach:

• unsuccessful or general enquiries may be retained for up to three years after the last substantive communication;
• contract, invoice, payment and accounting records may be retained for the period required by applicable accounting and tax law, generally up to ten years;
• information relevant to a dispute or legal claim may be retained until the applicable limitation period and related proceedings have ended;
• technical security logs are retained for a limited period appropriate to security and troubleshooting needs.

A longer period may apply where required by law or necessary for a pending claim, investigation or dispute.

Data security

We use reasonable organisational and technical measures designed to protect personal data against unauthorised access, alteration, loss, misuse or disclosure.

No internet transmission or storage system can be guaranteed to be completely secure.

Your rights

Subject to the conditions of applicable law, you may have the right to:

• obtain confirmation whether your personal data is processed;
• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive certain data in a portable format;
• withdraw consent where processing is based on consent;
• lodge a complaint with a supervisory authority.

Requests may be sent to info@lis-system.eu.

We may request reasonable information to verify the identity of the person making a request.

Supervisory authority

You may lodge a complaint with:

Automated decision-making

LIS System s.r.o. does not use personal data collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects.

Changes to this policy

This Privacy Policy may be updated to reflect changes in the website, services, providers or legal requirements.

The current version and its update date will remain available on this page.