Data Processing Principles and Data Protection System under the GDPR Regulation

The operator (controller) of your personal data under Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as GDPR) is the company Matwork s.r.o., Javorová 643/8, 949 01 Nitra, ID: 55201598.

Contact details of the operator:

Phone: +421 902 777 801

Email: contact@matwork.store

(hereinafter referred to as the "Operator")

What is personal data?

Personal data refers to information relating to an identified or identifiable natural person, who can be identified directly or indirectly, particularly based on a generally used identifier, such as a name, surname, identification number, location data, or online identifier, or based on one or more characteristics or traits that constitute their physical, physiological, genetic, mental, economic, cultural, or social identity.

What is the processing of personal data?

Processing of personal data means any operation or set of operations performed on personal data or sets of personal data, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, combination, restriction, erasure, or destruction, whether by automated or non-automated means.

The Operator (Controller) is not obligated to appoint/designate a Data Protection Officer.

Sources and categories of personal data:

The Operator processes personal data (obtained directly from you) that you have provided, or personal data obtained in connection with fulfilling your order.

Your identification, contact details, and data necessary for the performance of the contract.

Legal basis and purpose of processing:

The legal basis for processing is:

• Performance of a contract between you and the Operator under Article 6(1)(b) GDPR
• The Operator's legitimate interest in providing direct marketing under Article 6(1)(f) GDPR
• Your consent to the processing of personal data for direct marketing purposes under Article 6(1)(a) GDPR

The purpose of processing personal data is:

• Processing your order and exercising rights and obligations arising from the contractual relationship between you and the Operator. When placing an order, personal data necessary for the successful processing of the order (name, address, contact) are required under Article 6(1)(b) of the Regulation (this also includes subsequent payment processing, delivery of goods or services, handling complaints, etc.); the processing of the customer's personal data takes place without the customer's consent, as the legal basis for processing their personal data for the purpose of fulfilling the contract is the specific distance contract concluded between the customer and the Operator. Providing personal data is a necessary requirement for the conclusion and fulfillment of the contract; without providing personal data, it is not possible to conclude the contract or fulfill its terms by the Operator.
• Sending marketing offers and conducting other marketing activities.

The Operator does not engage in automated individual decision-making within the meaning of Article 22 GDPR.

Retention period:

The Operator retains personal data:

• for the period necessary to exercise rights and obligations arising from the contractual relationship between you and the Operator and to enforce claims arising from these contractual relationships;
• until consent to the processing of personal data for marketing purposes is withdrawn.

After the retention period of personal data, as required by Act No. 395/2002 Coll. on Archives and Registries and on the Amendment of Certain Acts, the Operator will delete the personal data.

Recipients of personal data:

• The recipient is anyone to whom personal data is provided, regardless of whether they are a third party. A public authority processing personal data under a specific regulation is not considered a recipient.
• These are persons involved in the delivery of goods, services, or payment processing under the contract.
• The Operator does not provide, disclose, or make personal data available to third countries.

Conditions for ensuring personal data security:

The Operator declares that it has implemented appropriate personnel, technical, and organizational measures to ensure the protection of personal data.

The Operator has implemented technical measures to secure data storage and storage of personal data in physical form.

The Operator declares that only authorized persons have access to personal data.

Your rights:

Under the conditions set out in the GDPR, you have:

• The right to access your personal data under Article 15 GDPR
• The right to rectification of personal data under Article 16 GDPR
• The right to restriction of processing
• The right to erasure under Article 17 GDPR
• The right to object under Article 21 GDPR
• The right to data portability under Article 21 GDPR
• The right to withdraw consent (electronically or by mail to the correspondence address)
• The right to lodge a complaint with the data protection authority if you believe that your rights to personal data protection have been violated.

You also have the right to lodge a complaint with the Data Protection Office if you believe that your rights to personal data protection have been violated.

Right to access data.

You have the right to know whether we process your personal data. If we do, you can request access to it. Based on your request, we will issue a confirmation with information about the processing of your personal data. You can submit the request electronically, to the email address contact@matwork.store, or by mail to the correspondence address Matwork s.r.o., Javorová 643/8, 949 01 Nitra.

Right to rectification.

You have the right to have your personal data that we process be accurate, complete, and up-to-date. If your personal data is incorrect or outdated, you can request correction or supplementation electronically to the email address contact@matwork.store, or by mail to the correspondence address Matwork s.r.o., Javorová 643/8, 949 01 Nitra.

Right to erasure.

Under certain circumstances, you have the right to have your personal data erased. You can request the deletion of your data at any time. We will delete your personal data if:

• we no longer need your personal data for the purpose for which you provided it to us,
• you withdraw your consent,
• you object to the processing of your personal data,
• we process your personal data unlawfully,
• the personal data must be erased to comply with a legal obligation,
• if you are a child, or the parent of a child, who consented to the processing of personal data via the internet.

Right to restriction of processing.

You can request that we restrict the processing of your personal data. If we comply with your request, we will only store your personal data and will not process it further. Processing of your data will be restricted if:

• you inform us that your personal data is inaccurate, until we verify its accuracy,
• we process your personal data unlawfully, but you do not agree to its erasure and instead request restriction of processing,
• we no longer need your data, but you need it to establish, exercise, or defend legal claims,
• you object to the processing of your personal data, until we verify whether our legitimate interests outweigh your reasons.

Right to data portability.

You have the right to request that we provide you with your personal data in an electronic format (e.g., XML or CSV file) that allows you to easily transfer the data to another company. You can also request that we transfer your personal data directly to a selected company. We will comply with your request if you provided the personal data directly to us and gave us consent to process it.

Right to object.

You have the right to object to the processing of your personal data. If we process your personal data in the following cases:

• based on our legitimate interest,
• for creating a customer profile,
• you can object to its processing if you have personal reasons for doing so.

You can contact us with your request in one of the following ways:

• in writing by email: contact@matwork.store
• by mail to the correspondence address Matwork s.r.o., Javorová 643/8, 949 01 Nitra.

Updated 27.10.2024