Privacy Policy under the GDPR

1. Introduction

This Privacy Policy describes how, to what extent and for what purposes METRIE spol. s r. o. processes personal data in connection with the operation of its online shop, print configurator and related services. Personal data is processed in full compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Act No. 110/2019 Coll., on the Processing of Personal Data, and other applicable laws of the Czech Republic. The purpose of this document is to provide customers and visitors with clear information about what data is processed, why it is processed, how long it is retained, to whom it may be disclosed and what rights data subjects have.

2. Data Controller

The data controller is:

METRIE spol. s r. o., Moravičanská 20, 789 83 Loštice, Czech Republic.
Company ID: 45194467, VAT ID: CZ45194467.
Email: [email protected].
Phone: +420 606 766 253

3. Personal Data We Process

The controller primarily collects and processes the following categories of personal data:

Billing and identification data: first and last name, company name, company ID, VAT ID, billing and delivery address, bank details.
Contact details: email address, telephone number and, where applicable, contact details provided in enquiries and forms.
Order data: products ordered, product specifications, quotations, order history, payment details and information relating to complaints.
Data from the print configurator: artwork files, logos, images, text designs, uploaded files and technical specifications. These materials are used exclusively to create the design and fulfil the specific order.
Technical and operational data: IP address, device and operating system type, web browser type, cookies and data about user behaviour on the website.

4. Purposes and Legal Bases for Processing

Personal data is processed for the following purposes and on the following legal bases:

Performance of a contract: The data is necessary to accept orders, manufacture and deliver goods and communicate with the customer. Data is also processed for handling complaints and operating the print configurator.
Compliance with legal obligations: This includes retaining and processing data for accounting and tax obligations and archiving documents.
Legitimate interests of the controller: This includes protecting legal claims, ensuring website security, basic web analytics, remarketing and measuring advertising performance.
Consent of the data subject: Where you provide consent to processing (for example for certain marketing activities), you may withdraw it at any time.

5. Personal Data Retention Periods

We retain personal data only for as long as necessary, generally for the following periods:

Accounting documents and orders: 10 years.
Marketing data: a maximum of 5 years.
Communication and enquiries: a maximum of 3 years.
Complaints: for the periods required by applicable law.
Cookies: the retention period depends on the type of cookie and the user’s browser settings.

After these periods expire, the controller securely deletes or disposes of the personal data.

6. Recipients of Personal Data and Transfers Outside the EU

To operate the online shop, data may be made available to contracted processors. The scope of data disclosed is always limited to the minimum necessary to provide the relevant service. These recipients include:

IT and hosting providers, accounting and logistics services (carriers), and payment gateway providers.
Operators of analytics and advertising systems (e.g. Google Analytics, Google Ads, Microsoft, Meta Platforms – Facebook and Instagram).

Where data is transferred outside the European Union (typically in connection with services provided by Meta Platforms or Google), such transfers are carried out in full compliance with the GDPR using Standard Contractual Clauses issued by the European Commission.

7. Use of Cookies

Cookies are small text files that help the website and configurator function correctly. We use:

Technical cookies: necessary for the basic operation of the website.
Functional cookies: used to remember your user preferences.
Analytics cookies: used to measure website traffic (e.g. through Google Analytics) and improve functionality.
Marketing cookies: used to display relevant advertising in advertising networks.

Users are informed about the use of cookies during their first visit via a cookie banner. You can change your preferences at any time using the banner or your browser settings.

8. Personal Data Security

We have implemented organisational and technical measures to prevent unauthorised access, damage, misuse or loss of data. All data transmitted between the website and the server is securely encrypted via an SSL connection, and access to the data is restricted to authorised persons.

9. Your Rights (Data Subject Rights)

Under the GDPR, you have the following rights in relation to the processing of your personal data:

Right of access – to request information about the personal data we process about you.
Right to rectification – to request correction of outdated or inaccurate data.
Right to erasure (right to be forgotten) – to request deletion of data where the purpose for processing no longer applies.
Right to restriction of processing.
Right to data portability – to receive your data in a structured format.
Right to object – where we process your data on the basis of our legitimate interests.
Right to withdraw consent – at any time.
Right to lodge a complaint – if you believe your rights have been infringed, you may contact the Office for Personal Data Protection.

If you have any questions or wish to exercise your rights, please contact us at [email protected] or by phone at +420 606 766 253.

10. Final Provisions

This Privacy Policy becomes valid and effective upon publication on the website. The controller reserves the right to update it from time to time in the event of changes to legislation, technology or the services we provide.