Consent to the processing of personal data

1. Mateza spol. s r.o., with its registered office at Pod Kyjovskou 4166, 580 01 Havlíčkův Brod, Tax ID: CZ15059278, Company ID: 15059278, as the operator of the e-shop www.mateza.cz and therefore the controller of personal data that will be provided to it by the customer, undertakes to process this personal data in accordance with legal regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
2. Mateza spol. s r.o. processes, in particular, the following personal data during the operation of the e-shop www.mateza.cz: First name, last name, delivery address, phone number, email address, IP address, cookies.
3. Personal data is processed on the legal basis of fulfilling a contractual obligation of Mateza spol. s r.o. towards customers, and furthermore on the legal basis of protecting the legitimate interests of Mateza spol. s r.o.
4. Recipients of personal data may be:
   1. transport services when delivering ordered goods;
   2. public authorities, if required by law;
   3. external service providers, in particular tax and legal advisors;
   4. operators of selected direct marketing tools.
5. Mateza spol. s r.o. processes only personal data strictly necessary to fulfill the purposes of its processing, i.e. to fulfill its contractual obligations (in particular delivery of goods) and protect its legitimate interests, including direct marketing.
6. The processing of personal data is carried out by the controller; however, personal data may also be processed for the controller by the following processors:
   1. KomTeSa spol. s. r.o., Masarykova 2853, 580 01 Havlíčkův Brod
   2. Česká pošta, s.p., Politických vězňů 909/4, 225 99 Praha 1
   3. GLS, Průmyslová 5619/1 586 01 Jihlava
   4. Heureka - Heureka Shopping s.r.o., Karolinská 650/1, 186 00 Praha 8 – Karlín
   5. the company ECOMAIL.CZ, s.r.o., Company ID: 027 62 943, with registered office at Na příkopě 388/1, Staré Město, 110 00 Praha, represented by Ing. Jakub Stupka, Managing Director, registered in the Commercial Register maintained by the Municipal Court in Prague, File No. C 223183
   6. Google - Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
      • Google Analytics
      • Google Tag Manager
      • Google Adwords
      • Google Merchant
   7. Seznam.cz, a.s. Radlická 3294/10, 150 00, Praha 5
      • Sklik
      • Firmy.cz
      • Zbozi.cz
7. Personal data will be processed for the period strictly necessary to fulfill contractual obligations and protect legitimate interests, and after its expiration, it will be handled in accordance with applicable legal regulations, Act No. 499/2004 Coll. (Act on Archiving and Records Management and on Amendments to Certain Acts) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR Regulation).
8. In relation to their personal data, the customer has in particular the following rights:
9. The right of access to personal data means that the customer has the right to obtain information from the controller as to whether their personal data is being processed, and if so, what data it is and how it is processed. The customer also has the right to have the controller rectify inaccurate personal data concerning them without undue delay upon request. The customer has the right to supplement incomplete personal data at any time. This right can be exercised in particular through the customer account on the website of the e-shop www.mateza.cz.
10. The right to erasure of personal data represents, in other words, the obligation of the controller to destroy personal data processed about the customer if certain conditions are met and the customer requests it.
11. The customer has the right to have the controller restrict the processing of their personal data in certain cases. The customer has the right to object at any time to processing that is based on the legitimate interests of the controller or a third party or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
12. The right to data portability gives the customer the possibility to obtain personal data provided to the controller in a structured, commonly used, and machine-readable format. They may subsequently transmit this data to another controller, or, if technically feasible, request that the controllers transmit it directly to each other.
13. The right to withdraw consent to the processing of personal data at any time does not apply, as the customer's personal data is processed for the purpose of fulfilling a contract concluded with the customer, not on the basis of consent to processing.
14. In the event that the customer is dissatisfied in any way with the processing of their personal data carried out by the controller, they may lodge a complaint directly with the controller or contact the Office for Personal Data Protection.

Controller Declaration

The controller declares that it will collect personal data to the extent necessary to fulfill the specified purpose and process it only in accordance with the purpose for which it was collected. Employees of the controller or other natural persons who process personal data under a contract with the controller and other persons are required to maintain confidentiality regarding personal data, even after the termination of employment or work assignment.