INFORMATION ON THE PROCESSING OF PERSONAL DATA
LYRA CHOCOLATE s.r.o., with its registered office at Pri parku 1, 951 12 Ivanka pri Nitre, Slovak Republic, Company ID No.: 44 473 826, registered in the Commercial Register of the District Court Nitra, Section: Sro, File No.: 23414/N (hereinafter referred to as the “Controller”), hereby provides data subjects (visitors of this website) with information on the processing of personal data in connection with the use of the website www.lyrachocolate.com, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”), and Act No. 18/2018 Coll. on Personal Data Protection, as amended.
- PROCESSED PERSONAL DATA
When visiting the website, personal data are processed to a limited extent; more specifically, the following data are processed: the IP address of the user’s device, technical data concerning the device and the web browser used, and data processed through cookies that are strictly necessary for the proper functioning of the website.
The website uses exclusively strictly necessary cookies ensuring its functionality and security. These include in particular the XSRF-TOKEN cookie, which serves to protect against CSRF (Cross-Site Request Forgery) attacks, and the lyra_chocolate_session cookie, which ensures the proper functioning of the website during the user’s session. The use of such cookies does not require the consent of the data subject in accordance with Section 109(8) of Act No. 452/2021 Coll. on Electronic Communications. Any other type of cookies would require your previous consent given through the so-called "cookie banner”.
The website does not use contact forms or other means of actively collecting personal data from users, and personal data are not processed for marketing purposes.
- PURPOSES OF PROCESSING
Personal data are processed for the purpose of ensuring the proper functioning of the website and protecting the website and the Controller’s IT infrastructure.
The legal basis for the processing is the Controller’s legitimate interest pursuant to Article 6(1)(f) GDPR.
- RECIPIENTS
Personal data may be disclosed to processors providing IT support and hosting services, who ensure the operation of the website, to the extent necessary for the performance of their tasks.
- TRANSFERS TO THIRD COUNTRIES AND INTERNATIONAL ORGANISATIONS
No transfers of personal data to third countries outside the European Economic Area take place.
- RETENTION PERIOD
Personal data are retained for the period necessary to ensure the functionality and security of the website, typically for the duration of the session and, in the case of technical logs, for several weeks.
- OUR CONTACT DETAILS AND YOUR RIGHTS
You may contact us, including for the purpose of exercising your rights set out below, as follows:
- in person at the Controller’s contact point: Pri parku 1, 951 12 Ivanka pri Nitre;
- via our customer service line: +421 902 117 041;
- by e-mail: [email protected]; or
- in writing at the Controller’s address: LYRA GROUP s.r.o., Pri parku 1, 951 12 Ivanka pri Nitre.
We will endeavour to respond to your request as soon as possible, but always no later than 30 days from its receipt.
Under applicable legal regulations and the GDPR, you have the following rights:
Right of access
You have the right to obtain confirmation as to whether or not your personal data are being processed and, if so, to obtain a copy of such data and additional information pursuant to Article 15 GDPR. Where we process a large quantity of data, we may request that you specify your request.
Right to withdraw consent
Where the processing of your personal data is based on consent, you have the right to withdraw such consent at any time.
Right to rectification
In order to ensure that we process only accurate personal data, we kindly ask you to notify us of any changes without undue delay. You have the right to request rectification of inaccurate personal data.
Right to erasure
Where the conditions set out in Article 17 GDPR are met, you have the right to request the erasure of your personal data, in particular where the data are no longer necessary for the purposes for which they were collected, or where the processing is unlawful. However, your data will not be erased where their processing is necessary for the establishment, exercise or defence of legal claims.
Right to restriction of processing
Where the conditions set out in Article 18 GDPR are met, you have the right to request restriction of processing, for example while contesting the accuracy of the data or where the processing is unlawful but you oppose erasure.
Right to data portability
Where processing is based on your consent or on a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit those data to another controller, where technically feasible.
Right to object
Where processing is based on the Controller’s legitimate interests, you have the right to object to such processing. Following your objection, we will restrict processing and, unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms or grounds for legal claims, we will cease processing and erase your personal data. You also have the right to object at any time to processing for direct marketing purposes.
Right to lodge a complaint
If you believe that the processing of your personal data is in breach of the GDPR or applicable law, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. In the Slovak Republic, the supervisory authority is the Office for Personal Data Protection, with its registered office at Park One, Nám. 1. mája 18, 811 06 Bratislava, Slovak Republic, website: www.dataprotection.gov.sk.
LYRA GROUP s.r.o.
Ivanka pri Nitre, July 2025