Privacy
notice

1. Controller and contact details

For the purposes set out in this zásady ochrany osobných údajov, the controller of personal data processed through this website is LORDSHIP a.s., with its registered address at V Jámě 699/1, 110 00 Praha 1, Česká republika (the “Controller”). General privacy and website-related enquiries may be sent to info-czechia@lordship.com.

The LORDSHIP group also operates from Rajská 4, 811 08 Bratislava, Slovensko, and through its Nairobi team, Lordship Africa, Bishops Court, 4th Ngong Avenue, off Bishops Road, P.O. Box 47655 – 00100, Nairobi, Keňa. Where an enquiry relates to African operations, the relevant information may also be handled with the support of the Nairobi team and correspondence may additionally be directed to info-africa@lordship.com.

2. Categories of personal data

Depending on the manner in which you use this website, the Controller may process the following categories of personal data:

• identification and contact details, including your name, email address, company name, region selection, enquiry topic, and message content;
• correspondence data you choose to send to us through the contact form, direct email, or other business communication;
• technical and usage information generated when you access the website, to the extent necessary for security, delivery, and basic operation of the site; and
• any additional information you voluntarily provide when discussing investment, development, leasing, media, residential, or other business matters with us.

3. Purposes of processing

The Controller processes personal data only to the extent necessary for specified and legitimate purposes, including:

• responding to enquiries submitted through this website and routing them to the relevant Lordship or Africký tím Lordship;
• communicating about investment opportunities, project proposals, leasing matters, apartment purchases, media enquiries, and general correspondence;
• maintaining appropriate internal records of business communications;
• protecting our legal rights, preventing misuse, and maintaining the security and integrity of the website; and
• meeting applicable legal, regulatory, accounting, and compliance obligations.

4. Legal bases for processing

Depending on the circumstances of the particular communication or activity, personal data may be processed on one or more of the following legal bases under the GDPR:

• to take steps at your request before entering into a contract, or to handle a business approach initiated by you;
• for our legitimate interests in managing communications, evaluating opportunities, operating the website, and protecting our business and legal position, provided those interests are not overridden by your rights and freedoms;
• to comply with legal obligations that apply to us; and
• where povinné, on the basis of your consent.

5. Recipients and sharing of data

Personal data may be disclosed only where such disclosure is reasonably necessary, proportionate, and subject to appropriate confidentiality and security safeguards. This may include:

• relevant internal teams within LORDSHIP and, where your enquiry concerns African operations, with Lordship Africa personnel on a need-to-know basis;
• professional advisers, service providers, and technical suppliers who support website hosting, communications, maintenance, or security; and
• public authorities, regulators, courts, or other third parties where disclosure is povinné by law or necessary to establish, exercise, or defend legal claims.

The Controller does not sell personal data collected through this website.

The contact, careers and newsletter forms on this website are protected by Cloudflare Turnstile, a security service provided by Cloudflare, Inc., which helps prevent spam and automated abuse. When you open a page containing one of these forms, Cloudflare processes technical information about your browser and device, including your IP address, to check that the request comes from a person. We rely on our legitimate interest in keeping the website and its forms secure. More information is available in Cloudflare’s privacy policy at https://www.cloudflare.com/privacypolicy/.

6. Retention of personal data

Personal data is retained only for as long as necessary for the purpose for which it was collected, including any period povinné to respond to an enquiry, manage ongoing business discussions, comply with legal or regulatory obligations, or establish, exercise, or defend legal claims.

The precise retention period may therefore vary according to the nature of the communication, any subsequent relationship, and the applicable legal or compliance framework.

7. Your rights

Subject to the conditions and limitations set out in applicable law, you may have the right to:

• request access to your personal data;
• request rectification of inaccurate or incomplete personal data;
• request erasure of personal data where there is no valid reason for continued processing;
• request restriction of processing in certain circumstances;
• object to processing based on legitimate interests;
• request portability of personal data where processing is based on consent or contract and carried out by automated means; and
• withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact the Controller at info-czechia@lordship.com. If your enquiry concerns Lordship Africa operations, you may also write to info-africa@lordship.com, although requests relating to GDPR rights may still be assessed by the Controller where applicable.

You also have the right to lodge a complaint with the competent supervisory authority, including the authority in the EU or EEA country of your habitual residence, place of work, or the place of the alleged infringement.

8. Cookies and related technologies

This zásady ochrany osobných údajov should be read together with our Cookies page, which provides additional information on the use of cookies and similar technologies on this website.

9. Security and updates

The Controller applies proportionate organisational and technical measures designed to protect personal data against unauthorised access, disclosure, alteration, misuse, or loss. Nevertheless, no method of internet transmission or electronic storage can be guaranteed as completely secure, and website users should therefore avoid including unnecessary sensitive personal data in free-text communications.

This zásady ochrany osobných údajov may be updated from time to time to reflect changes in operational practice, legal requirements, or website functionality. The version published on this page is the current version applicable to this website.

Last updated: 14 September 2026.