Privacy Policy
1. Controller
The controller of your personal data is Lyons Weinberg Czech, s.r.o., Company ID 07305150, registered office Výjezdní 752/3, 160 00 Prague 6, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, Insert 298779 (“controller”, “we”).
Contact:
2. Why and on what legal basis we process data
| Purpose | Data | Legal basis | How long |
|---|---|---|---|
| Registration and bidder account | first and last name, e-mail, phone, address, login details, two-factor authentication settings where used | performance of a contract (Art. 6(1)(b) GDPR) | for as long as the account exists |
| Bidding and account services | bids and automatic bidding limits, favourite and watched works, watchdog alerts, privilege requests, auction notifications | performance of a contract | for as long as the account exists; bids on sold works as below |
| Purchase contract, invoicing, payment, collection or shipping | identification and contact data, billing and delivery address, payment and handover details | performance of a contract; legal obligations (Art. 6(1)(c) GDPR – accounting and tax law) | 10 years from the end of the accounting period |
| Offering a work for auction and the contract with its owner | name, contact, description and photographs of the work, ownership details | steps prior to and performance of a contract; legal obligations | offer without a contract 1 year; concluded contract 10 years |
| Enquiries and communication (e-mail, phone, forms, chat) | name, contact, content of the enquiry | legitimate interest in handling the enquiry (Art. 6(1)(f) GDPR) | until handled, at most 1 year |
| Newsletter and auction news | e-mail, name, language, e-mail opens and clicks | consent; for our clients legitimate interest (Section 7 of Czech Act No. 480/2004 Coll.) | until you unsubscribe (link in every e-mail) |
| Website security and form protection | IP address, technical browser data, login records | legitimate interest in protecting the website | at most 90 days |
| Anonymous traffic measurement (without cookies) | page viewed, action on the website, shortened IP address (last part removed), device type | legitimate interest in knowing how the website is used | record on our server 90 days; in Google Analytics 14 months |
| Statistics with consent (Google Analytics) | cookie identifier, behaviour on the website; for logged-in users a pseudonymous account number (no name or e-mail) | consent (Art. 6(1)(a) GDPR) | 14 months |
| Ad measurement and targeting with consent (Google Ads, Meta) | cookie identifiers, ad click identifier, pages visited, registration | consent | 90 days (cookies); services per their policies |
| Record of cookie consent | chosen categories, date and time, anonymous identifier, shortened IP address | legal obligation to prove consent; legitimate interest | while the consent is valid + 3 years |
Providing data for registration, bidding and the purchase contract is necessary – without it we cannot enter into a contract with you. All other data is provided voluntarily. We do not carry out automated decision-making or profiling with legal effects; automatic bidding places bids only up to the limit you set yourself.
You may object at any time to processing based on legitimate interest. You may withdraw consent at any time – for cookies via the Cookies bar in the website footer, for the newsletter via the link in the e-mail or at
3. Who receives the data
We share data only with those who need it for the given purpose; processors are bound by a data processing agreement with us:
- INTERNET CZ, a.s. (Forpsi) – website and e-mail hosting, Czech Republic
- semakin.cz – website development and maintenance
- SuperFaktura – invoicing and payment matching
- Acyba SAS (AcyMailing) – newsletter and e-mail delivery, France
- Google Ireland Limited – Google Analytics, Google Ads
- Meta Platforms Ireland Limited – Meta Pixel (only with consent)
- Cloudflare, Inc. – form protection (Turnstile)
- Šéfbot (sefbot.cz) – website chat window
- carriers and shipping companies – when a work is shipped
- public authorities where required by law
If you bid via Livebid.cz, its operator processes your registration and bidding data as an independent controller; we receive from it the data needed to conclude and perform the purchase contract.
4. Transfers outside the EU
Google, Meta and Cloudflare may also process data in the USA. Transfers are based on the European Commission's adequacy decision (EU–U.S. Data Privacy Framework) or on standard contractual clauses.
5. Your rights
You have the right of access to your data, to rectification, erasure, restriction of processing, data portability and the right to object. Send your request to
6. Cookies
Details about cookies and how to change your consent are on the Cookie policy page.
This policy is effective from 24 September 2026 and replaces the policy effective from 1 May 2025.