Privacy notice
Personal data on the Farma Kosoř website and web app.
Updated 30 October 2026
The controller of personal data on the Farma Kosoř website and web app is Lucia Pechová, based at Zborovská 1118/16, 150 00, Praha 5 - Smíchov, Česká republika. IČO (business identification number): 19260636. She is currently not VAT-registered and has no DIČ. Contact details: farma.kosor@gmail.com; +420 776 373 985; +420 721 01 09 01.
Before app store submission, retention periods and provider agreements still need to be confirmed and documented, including any safeguards for international data transfers.
1. Contact requests
We collect your name, email, message, selected language and request date. Requests are stored in the project and a copy is sent to the farm’s Gmail mailbox so we can respond. The purpose is handling enquiries and potential business relationships; depending on the request, the legal basis is pre-contractual steps or a legitimate interest in responding.
2. Newsletter
Subscription is optional. We store your email, language and subscription date, and share your email with Brevo to send farm news. The legal basis is consent expressed by subscribing. Withdraw consent using the unsubscribe link in newsletters or by emailing the farm. Withdrawal does not affect earlier lawful processing.
3. Accounts and assistant
Accounts use email and credentials managed by the authentication service. If you choose Google or Lovable sign-in, that provider also processes sign-in under its own notice. The assistant stores user identifiers, conversations, language and dates to maintain the service. Messages are sent to Lovable AI Gateway to generate replies. Unanswered questions are privately forwarded to the farm. Do not include sensitive information. Processing is for the requested service and its security.
4. Shop and payments
Shopify provides the catalogue, cart and checkout. The cart contains product and cart identifiers and quantities. During checkout, Shopify and payment providers may collect contact, delivery and payment details under their own privacy notices. This site does not directly store full payment card numbers. The purpose is fulfilling purchases and applicable legal obligations.
5. Device storage and external services
The cart is stored in browser local storage; sign-in uses the authentication service’s session mechanisms. Clearing site data in your browser removes the saved cart and sign-in. Fonts load from Google Fonts, so your browser contacts Google to retrieve them. The site code does not include advertising analytics. Hosting services may process technical data and logs for operation and security. Current features do not require camera, microphone, contacts or location access.
6. Recipients and transfers
Authorised farm personnel access necessary data. Services include Lovable Cloud for hosting, authentication and storage, Lovable AI Gateway for the assistant, Brevo for newsletters, Gmail for email and Shopify for purchases. Some providers may process data outside the European Economic Area. Before store submission, the controller must verify processing locations, transfer safeguards and applicable agreements.
7. Retention
The current site has no fixed automatic deletion deadlines for requests, subscribers or conversations. The controller must establish and document actual retention periods according to purposes and legal obligations. Cart data remains in the browser until removed or replaced. You can request deletion of your data or account by email; legal retention obligations may affect the response.
8. Your rights
Under the GDPR you may request access, rectification, erasure, restriction and, where applicable, portability. You may object to legitimate-interest processing and withdraw consent. Contact farma.kosor@gmail.com; identity verification may be needed to protect your data. You may complain to the relevant supervisory authority, including the Czech Office for Personal Data Protection (uoou.gov.cz).
Cookies and browser storage
The site uses no advertising or analytics cookies, so it shows no consent banner. We store only necessary data in your browser: language, cart and sign-in. At checkout Shopify may use its own necessary cookies. If we add cookies requiring consent in future, we will add consent settings.