Privacy Policy
1. Data controller
The data controller is Kočárky Hračky Karlov s.r.o., Company ID 282 35 100, registered office Čechova 1433, 256 01 Benešov, Czech Republic, registered with the Municipal Court in Prague, Section C, Insert 97580, operator of the LuggageSend service and the Luggage Storage Myšák facility, Vodičkova 710, 110 00 Prague 1. Contact for data protection matters: info@luggagesend.com.
2. What data we process
For a transport order: name, address, phone and e-mail of the sender and the recipient, shipment details (dimensions, weight; contents and value for routes outside the EU), the order number and related communication. We do not obtain the recipient's data (or the sender's, if the sender is not the customer) from them directly but from the customer who entered it in the order; the customer is responsible for being entitled to provide it to us. For an inquiry (quote without an offer): name, e-mail, phone and message, together with the calculator input. When using the calculator without ordering: technical details of the quote (route, postcodes, luggage parameters) without identifying a person; quotes are deleted after 7 days and only anonymous aggregates are kept for statistics. From the contact form: name, e-mail, optionally phone number and the message text. With consent given in the order: your e-mail for a single review request after delivery. Technical data for operating and securing the website: your IP address to protect forms against abuse (for up to 2 hours) and records of website and form errors (browser and device type, page, error code, the form field where the error occurred) — without the content you enter into the forms.
3. Purposes and legal basis
Order data is processed to conclude and perform the transport or storage contract (Art. 6(1)(b) GDPR), to comply with legal obligations, in particular accounting and tax (point (c)), and to protect our legal claims, e.g. in claim proceedings (legitimate interest, point (f)). Inquiry data is processed to handle the inquiry at your request (point (b)). Order status e-mails are part of performing the contract; we send no marketing messages. Messages from the contact form are processed to handle your enquiry (legitimate interest, point (f)) or pre-contractual steps (point (b)). Analytics and marketing cookies are used only on the basis of your consent (point (a)), which you may withdraw at any time. If you consent in the order, we send you one e-mail after delivery asking you to review the service (consent, point (a)). You can withdraw consent at any time by replying to any of our e-mails. Providing the order data (name, address, phone and e-mail of the sender and the recipient, and for routes outside the EU the contents and value of the shipment) is a contractual requirement: without it we cannot arrange the transport or storage and the order cannot be completed. Other data (e.g. company, collection note, consent to a review request) is optional. We do not carry out automated decision-making or profiling that would produce legal effects concerning you or similarly significantly affect you. Analytics and remarketing (section 6) take place only with your consent.
4. Recipients
Data is shared only to the extent necessary to provide the service: with the shipping platform Zaslat s.r.o. and the selected carrier (delivery), the e-mail infrastructure provider Resend Inc. (confirmations and notifications), the hosting and database providers (Vercel Inc., Neon Inc.) and the error-monitoring provider Functional Software, Inc. (Sentry, data stored in the EU), who act as processors under data processing agreements. Some processors may process data in the USA; transfers are safeguarded by EU standard contractual clauses or an adequacy decision (EU-U.S. Data Privacy Framework). We do not share data with third parties for marketing. If you consent, data about your behaviour on the website (cookie identifiers, IP address, pages visited, events such as completing an order) is also processed by Google Ireland Ltd. (Google Analytics, Google Ads) and Meta Platforms Ireland Ltd. (Meta Pixel). These providers may transfer data to the USA; transfers are covered by the EU–US Data Privacy Framework and standard contractual clauses.
5. Retention
Orders and related documents are kept for the duration of the contract and thereafter as required by law (tax documents 10 years). Inquiries and contact-form messages are kept for up to 2 years after resolution. Quotes without an order are deleted after 7 days; quote statistics contain no personal data. Form error records are kept for 90 days, IP addresses used for abuse protection for up to 2 hours. After these periods data is deleted or anonymised.
6. Cookies and analytics
Necessary cookies (always on): storing your cookie choice (ls_consent, 6 months) and staff login to the administration. The website does not work without them and they do not require consent. Analytics cookies (with consent only): Google Analytics 4 — measuring visits and the order funnel (cookies _ga, _ga_*; up to 2 years). Marketing cookies (with consent only): Google Ads — ad conversion tracking and remarketing (e.g. _gcl_au; up to 90 days); Meta Pixel — conversion tracking and remarketing on Facebook and Instagram (_fbp; up to 90 days). Without your consent, the tracking scripts are not loaded at all. You can change or withdraw your consent at any time via “Cookie settings” in the website footer; withdrawal does not affect the lawfulness of processing before it.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and the right to object to processing based on legitimate interest. Requests are handled within one month at the latest via the controller's contact e-mail. If you believe processing violates the law, you may lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
8. Security
Data is transferred encrypted (HTTPS) and stored with vetted providers with controlled access; staff access to orders is role-restricted and logged. Customer access to order details is protected by a unique unpredictable link.
9. Changes to this document
We may update this document, in particular when processors or the scope of services change. The current version is always published on the website; material changes will be announced on the service website.