Privacy Policy

1. Data controller

LA GEM s.r.o., IČO: 23811358, DIČ: CZ23811358, registered office Dukelská 953/9, Vršovice, 100 00 Prague 10, registered at the Municipal Court in Prague, file C 433283.

Correspondence and complaints address: Truhlářská 1103/15, 110 00 Nové Město, Prague, Czechia.
Telephone: +420 778 005 125 · E-mail: clientservice@lagem.cz

Contact for personal-data matters: clientservice@lagem.cz (subject "Osobní údaje / Personal data"). Write to us here to exercise any of the rights in section 8.

We operate the website lagem.cz. Personal data is processed in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and Act No. 110/2019 Coll., on personal data processing.

We have not appointed a data protection officer, because the conditions of Article 37 of the GDPR are not met.

2. What data we collect

Depending on how you reach us, we process the following categories of personal data:

• Identification and contact data: your name, e-mail address, telephone number and, where relevant, your delivery or correspondence address.
• The content of your enquiry or message, including messages you send us through the contact form or via Instagram, WhatsApp or Telegram.
• Order and contract data: the piece, gemstones, sizes, design details, price and delivery arrangements.
• Payment-related data: bank-transfer details and invoices. We never see or store your card numbers.
• Communication history: the record of what we have discussed, so we can serve you well over time.
• Client-account data, once you create an account with us (a feature we are preparing).
• Technical data: your IP address and browser or device type, kept only briefly in our server logs.
• Cookies and local storage, as described on our Cookies page.

Date of birth is optional. We ask for it only if you choose to share it, and use it solely for a personal greeting or an anniversary note, and only with your consent. It is never required to place an order.

3. Consultations in our atelier

Much of our work happens in person. During private consultations in our Prague atelier we make notes about your wishes and requirements: your vision for a piece, gemstone preferences, sizes, occasions, budget and similar details discussed while preparing your order and contract.

This information is treated with absolute discretion. It is used by LA GEM to prepare your proposal, your contract and your piece, and to serve you better in the future. It is stored in our internal client system, hosted by Hetzner in Germany; copies of order documents may be held in Google Drive and related task notes in Notion, in each case under a processor contract (see section 7). It is never sold and never used for third-party marketing.

We keep these client notes for the duration of the contract and a further 4 years. You may ask us at any time to show, correct or erase them (see section 8).

4. How and why we use data

1. Performance of a contract (Art. 6(1)(b)). Data provided when ordering is processed without your separate consent because it is necessary to conclude and perform the contract: to prepare your commission, communicate with you and deliver your piece.
2. Steps before a contract (Art. 6(1)(b)). When you send an enquiry or complete the contact form, we use your name, e-mail and phone number to answer you and, if you wish, to prepare an offer, as steps taken at your request before entering into a contract.
3. Legal obligations (Art. 6(1)(c)). We further process data where the law requires it, in particular the record-keeping and archiving of accounting and tax documents.
4. Legitimate interest (Art. 6(1)(f)). We keep short-lived security logs to protect and operate the website, and we may process data to establish, exercise or defend legal claims. We may also write to existing clients about pieces or services similar to those they have acquired from us (see section 5).
5. User account. Data provided when creating an account is processed solely to operate and administer that account.
6. Consent (Art. 6(1)(a)). Broader marketing and the optional birthday note happen only with your explicit consent, which you may withdraw at any time. If you are under 15, consent must be given by your legal guardian; we may ask for confirmation of age.

We will only use your personal data for a purpose other than the one for which it was collected on the basis of your consent.

5. Marketing communications

From time to time we may write to existing clients about pieces, gemstones or events similar to what they have shown interest in. We write rarely and quietly; we do not send mass campaigns.

If you prefer not to receive marketing e-mails, simply write to clientservice@lagem.cz. We will place your address on our internal do-not-contact list and you will receive no further marketing from us. You may also unsubscribe using the link included in every marketing e-mail. Opting out never affects communications necessary for an ongoing order.

When you give or withdraw consent to marketing, we record that choice and its date, so we can show on what basis we contacted you (see section 6).

6. How long we keep data

We keep personal data only as long as we need it for the purpose it was collected, or as long as the law requires. In practice:

7. Who has access to data

Within the scope necessary to perform a contract or our legal obligations, we share data with carefully chosen processors:

• Hetzner Online GmbH (Germany, EU): hosting of the website, our internal client system and the databases behind them.
• Google (Gmail and Google Drive; Ireland / USA): receives contact-form e-mails and copies of order documents.
• Notion Labs, Inc. (USA): task notes created while preparing orders, which may include a client name.
• Meta Platforms (Instagram; Ireland / USA): where you contact us through Instagram, that conversation is processed by Meta and may be saved to our client system.
• Our external accountant and secure carriers or couriers, as needed to invoice and to deliver your piece.

On request we will tell you exactly who processes your data. Some of our processors (Google, Notion, Meta) may process data in the USA; such transfers rely on the EU-US Data Privacy Framework and, where applicable, on standard contractual clauses.

8. Your rights

1. Withdraw consent at any time by e-mail, telephone or letter; withdrawal does not affect the lawfulness of processing before it.
2. Access: ask whether we process your data and receive a copy, together with the purpose, categories, recipients and retention period. Additional copies may carry a small administrative fee.
3. Rectification of inaccurate data and completion of incomplete data, without undue delay.
4. Objection to processing for direct marketing; after your objection we stop such processing immediately.
5. Erasure, where data is no longer needed, consent was withdrawn, you objected, or processing was unlawful, unless legal grounds require us to keep it.
6. Restriction of processing while accuracy or the legitimacy of processing is being resolved, or where you need the data for legal claims.
7. Data portability: receive the data you provided in a structured, commonly used, machine-readable format and have it transferred to another controller.

You can exercise all rights through the contact details in section 1, at clientservice@lagem.cz. We respond within one month of your request (Art. 12(3) GDPR); in complex cases this period may be extended, and we will tell you if so.

9. Cookies

Cookies and local storage are small pieces of data kept in your device that allow the website to function, for example to remember the language you chose or the pieces you added to your favourites. We use only what is strictly necessary for the features you use; we do not use analytics, advertising or third-party tracking cookies.

A full list of what we store, why and for how long is on our Cookies page, where you can also review or change your choices at any time through the Cookie settings panel.

10. Security

We protect your personal data with measures appropriate to the risk. The website is served only over encrypted connections (TLS). Access to client data is limited to the staff who genuinely need it, and the admin area is protected by individual logins.

Server logs that contain an IP address are deleted within 30 days. Database backups are encrypted, and access to them is restricted.

11. Supervisory authority

We will always try to resolve any concern about your data personally and to your satisfaction. You also have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), www.uoou.cz, which supervises data protection in the Czech Republic. If you live or work in another EU member state, you may contact the supervisory authority of that state.

12. Automated decisions and profiling

We do not make any decisions about you by solely automated means, and we do not profile you within the meaning of Article 22 of the GDPR.

13. Changes to this policy

We may update this policy as our services or the law change. The current version always lives at this address; the date and version below tell you which text is in force. For material changes we will draw your attention to them where it makes sense, for example the next time you contact us.

LA GEM s.r.o., Prague · version 2026-09 · valid from 8 September 2026