Privacy Policy
1. Data Controller
The controller of the personal data processed through this website is:
Company name: matchiareň s.r.o.
Registered office: Banky 491, 972 25 Diviaky nad Nitricou, Slovakia
Phone: +421 910 771 737
E-mail: info@matchiaren.eu
Company ID (IČO): 56983948
Tax ID (DIČ): 2122523238
VAT ID: SK2122523238
Bank: Tatra banka, a.s.
Account name: matchiaren s.r.o.
IBAN: SK8711000000002942265212
(hereinafter referred to as the "Controller")
Contact persons for personal data protection
Tomáš Svoreň and Anna Mária Uhlárová
E-mail: info@matchiaren.eu
The Controller processes personal data in accordance with:
- Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR);
- Act No. 18/2018 Coll. on Personal Data Protection of the Slovak Republic.
The Controller is not required to appoint a Data Protection Officer pursuant to Article 37 of the GDPR.
We collect personal data directly from the data subject when placing an order, registering an account, communicating with us, or using our website.
2. Scope of Personal Data Processed
2.1 Order Data
- First name and surname
- Billing address
- Delivery address
- E-mail address
- Telephone number
- Information about the ordered goods
- Payment information (excluding payment card details)
2.2 Data Collected Through the Website
- IP address
- Online identifiers
- Cookies
- Device and browser information
- Website access logs
- Website usage behaviour
Detailed information about cookies is available in our separate Cookie Policy.
2.3 Marketing Data
- Name
- E-mail address
- Purchase history (for existing customers)
3. Purposes and Legal Bases for Processing
3.1 Performance of the Purchase Contract
Purpose: Processing orders, delivering goods and handling complaints.
Legal basis: Article 6(1)(b) GDPR – performance of a contract.
Retention period:
- Accounting documents: 10 years
- Orders: 5 years
- Complaints: 3 years
Providing personal data is a contractual requirement. Without these data, it is not possible to conclude a purchase contract.
3.2 Marketing – Newsletter
Existing Customers
Legal basis: Legitimate interest pursuant to Article 6(1)(f) GDPR.
The legitimate interest consists of informing existing customers about our own similar products and services.
Retention period: Until the customer unsubscribes.
The data subject has the right to object at any time to the processing of personal data for direct marketing purposes.
Non-Customers
Legal basis: Consent pursuant to Article 6(1)(a) GDPR.
Retention period: 5 years or until consent is withdrawn, whichever occurs first.
Every newsletter contains an unsubscribe option.
3.3 Cookies, Analytics and Marketing
We use the following types of cookies on our website:
- Essential cookies
- Analytical cookies
- Marketing cookies
Analytical and marketing cookies are used solely on the basis of your consent provided through our cookie banner.
We mainly use:
Google Analytics
Purpose: Website traffic analysis and user behaviour analysis.
Legal basis: Consent.
Personal data may be transferred to the United States based on an adequacy decision (EU–US Data Privacy Framework) or Standard Contractual Clauses pursuant to Article 46 GDPR.
Facebook Pixel
Purpose: Measuring advertising effectiveness and displaying personalised advertisements.
Legal basis: Consent.
3.4 Payments
Card payments are processed through Shoptet Pay, a payment service provided by Shoptet, a.s.
Payment card details are not processed by our company but directly by the payment gateway provider in a secure environment.
Legal basis: Performance of a contract.
3.5 Fraud Prevention and Security
Purpose: Protection of property, fraud prevention and ensuring the security of IT systems.
Legal basis: Legitimate interest pursuant to Article 6(1)(f) GDPR.
Retention period: 3 years.
3.6 Handling Data Subject Rights
Legal basis: Compliance with a legal obligation pursuant to Article 6(1)(c) GDPR.
Retention period: 10 years.
4. Recipients of Personal Data
Personal data may be disclosed to:
- Accounting service providers
- IT service providers
- Marketing agencies
- Courier companies
- Payment gateway providers
- Legal advisors
We have concluded Data Processing Agreements with all processors in accordance with Article 28 GDPR.
5. Transfers to Third Countries
When using Google and Meta services, personal data may be transferred to the United States.
Such transfers are carried out in accordance with:
- Article 45 GDPR – Adequacy Decision (EU–US Data Privacy Framework), or
- Article 46 GDPR – Standard Contractual Clauses.
6. Profiling
The Controller may perform basic marketing profiling, such as sending offers based on purchase history or website browsing behaviour.
Such profiling does not produce legal effects or similarly significant consequences for the data subject.
We do not carry out automated decision-making with legal effects pursuant to Article 22 GDPR.
7. Your Rights
You have the right to:
- access your personal data;
- rectify inaccurate personal data;
- request the erasure of your personal data ("right to be forgotten");
- request restriction of processing;
- data portability;
- object to processing;
- withdraw your consent at any time.
You may exercise your rights:
- by post to the Controller's registered office, or
- by e-mail at: info@matchiaren.eu
You also have the right to lodge a complaint with the supervisory authority:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12
820 07 Bratislava 27
Slovak Republic
Website: https://www.dataprotection.gov.sk
8. Data Security
We implement appropriate technical and organisational measures to protect personal data.
However, no transmission of data over the Internet can ever be guaranteed to be 100% secure.
9. Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy at any time.
The current version is always available on our website.
Bratislava, 1 August 2026