Personal Data Processing

Basic Provisions

1. The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: "GDPR") is Metaltrade International s.r.o., ID: 27710157 with registered office Jihlavská 7, 664 41 Troubsko (hereinafter: "controller").
2. Controller contact details:
   • Address: Metaltrade International s.r.o., Jihlavská 7, 664 41 Troubsko
   • Email: info@metal-trade.cz, Phone: +420 547 228 061
3. Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
4. The controller has not appointed a data protection officer.

Legal Basis for Processing Personal Data

1. The legal basis for processing personal data is the performance of a contract between you and the controller pursuant to Article 6(1)(b) GDPR (hereinafter "Contract Performance") – processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
2. The controller does not carry out automated individual decision-making within the meaning of Article 22 GDPR.

Purpose of Processing, Categories and Sources of Personal Data

Legal basis:  Contract Performance

Purpose:  Processing an order or responding to an inquiry sent via contact form

Data : Personal data of clients (contact data)

Data source : Contact form, order

Data Retention Period

1. The controller retains personal data:
   • In the case of an inquiry, we manage the personal data contained in the form only for the purpose of responding or processing your inquiry /only for the duration of negotiations on concluding a contract/ for a maximum of 1 year from your inquiry, unless you give consent for further processing.
   • In the case of an order, for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller and to assert claims from these contractual relationships (for a period of 15 years from the termination of the contractual relationship).
2. After the expiry of the retention period, the controller deletes the personal data.

Recipients of Personal Data (Controller's Processors)

• We determine your satisfaction with the purchase by means of email questionnaires within the Verified Customers program, in which our e-shop participates. We send these to you every time you make a purchase from us, unless you refuse their sending in accordance with § 7(3) of Act No. 480/2004 Coll. on certain information society services. The processing of personal data for the purpose of sending questionnaires within the Verified Customers program is carried out on the basis of our legitimate interest, which consists in determining your satisfaction with purchasing from us. For sending questionnaires, evaluating your feedback and analyses of our market position, we use a processor, which is the operator of the Heureka.cz portal; we may provide them with information about purchased goods and your email address for these purposes. Your personal data are not passed on to any third party for their own purposes when sending email questionnaires. You may object to the sending of email questionnaires within the Verified Customers program at any time by refusing further questionnaires via the link in the email with the questionnaire. In the event of your objection, we will not send you any further questionnaires.
• Personal data of the data subject may be provided to persons who provide the controller with legal, accounting and IT services in the interest of ensuring proper fulfillment of obligations set by generally binding legal regulations for the purpose of proper contract performance. The controller does not intend to transfer personal data of the data subject to a third country, an international organization or other third parties than those mentioned above.

Your Rights

1. Under the conditions set out in the GDPR, you have
   • the right of access to your personal data pursuant to Article 15 GDPR,
   • the right to rectification of personal data pursuant to Article 16 GDPR, or restriction of processing pursuant to Article 18 GDPR,
   • the right to erasure of personal data pursuant to Article 17 GDPR,
   • the right to object to processing pursuant to Article 21 GDPR and
   • the right to data portability pursuant to Article 20 GDPR.
2. Furthermore, you have the right to lodge a complaint with the Office for Personal Data Protection if you believe that your right to protection of personal data has been violated.

Conditions for Securing Personal Data

1. The controller declares that it has taken all appropriate technical and organizational measures to secure personal data.
2. The controller has taken technical measures to secure data storage and storage of personal data in paper form, in particular passwords, antivirus program, backup, locking.
3. The controller declares that only persons authorized by it have access to personal data.

Final Provisions

1. By sending an order from the online order form or an inquiry from the online inquiry form, you confirm that you are familiar with the conditions of personal data protection and accept them in full.
2. The controller is entitled to change these conditions. A new version of the personal data protection conditions will be published on its website.

These conditions take effect on 15.1.2026.

Cookies

For better targeting of advertising and promotion of the Company, the Company processes data on website visits, viewed products and other activities on the websites when using cookies. Processing is only possible on the basis of your consent to the use of relevant cookies .

For this type of advertising, we use the services listed below, within which user segmentation based on common features occurs. This data cannot be linked to a specific person.

• SEZNAM.CZ, a.s. (Sklik). More information HERE /Our websites use advertising targeting technologies from the Sklik service operated by Seznam.cz, a.s. This allows us to show our advertisements to visitors who have already shown interest in our products in the advertising network of Seznam.cz, a.s./
• Google (AdSense, AdWords) More information HERE

In order to improve the functioning of the website, evaluate its traffic and optimize marketing activities, the Controller uses cookie files on its websites. Cookie files are small text files that are stored via the browser locally on the computer or mobile device with which the website is displayed.

Cookie files do not serve and do not enable personal identification of website users. Types of cookie files that the Controller company collects on its websites:

• Session cookies – temporary and remain stored in the device until leaving the website;
• Permanent cookies (login) – serve for permanent customer login. The cookie is stored for 14 days or until logout;
• Third-party cookies – Google Analytics, Microsoft Clarity for obtaining statistical information | expiration according to browser settings, or until removal.

Overview of Cookies

We process all cookies on the basis of the legitimate interest of the controller

The list of different types of cookie files that may be used on the Controller's website is as follows. The Controller points out that if information collected through cookies constitutes personal data, the provisions of the privacy policy apply, which supplement these policies – their wording can be found here.

• Necessary cookies – are necessary for the proper functioning of the pages, enable navigation on the website and use of its services and functions. Without these strictly necessary cookies, the websites would not function smoothly, and some services or functions would probably not be able to be provided (e.g. session cookies, load balancing, user ID, security cookies);
• Preference cookies – collect information about user choices and preferences and allow the Controller to remember the language or other local settings and customize the websites accordingly (e.g. language, location, mobile, reference pages, last visit and activity, recently viewed video, flash cookies, page history);
• Social network tracking cookies – are used to track members (and non-members) of social networks for market research and product development purposes (e.g. Facebook, Twitter, etc.);
• Analytical cookies – collect information about how the user uses the website and allow the Controller to improve their functioning. They show, for example, what is most frequently visited on the website, help record any problems users encounter on the website, and show whether the Controller's advertising is effective, enable general patterns of website use to be recognized, but not how it is used by a specific person (e.g. Google Analytics, Microsoft Clarity).
• Marketing cookies – advertising cookies are used for marketing purposes (advertising, market analysis, campaign/promotion, fraud detection, etc.)

Cookie Removal Procedure

Cookie files and data stored about you can be removed at any time. The procedure for removing cookies in the browser can be found in the links below:

• Internet Explorer
• Mozilla Firefox
• Google Chrome
• Opera
• Safari
• iPhone, iPad and other Apple devices
• Flash cookies (for all browsers)
• Android devices

Embedded Content from Other Websites

Posts on these pages may contain embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if the visitor had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking and monitor your interaction with this embedded content, including tracking interaction with embedded content if you have an account and are logged in to the relevant website.

These are mainly posts on social networks that serve as citations. Especially Twitter and Facebook.

Google Analytics 4 (GA4)

For website analysis using cookie files, the Controller uses the Google Analytics 4 service, developed and operated by Google LLC, with registered office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: " Google ").

Google Analytics 4 is a modern analytics platform that collects data on user interactions with websites. Data are processed on Google servers, which may be located in various locations including the USA and EU. Google Analytics 4 is designed with privacy in mind and enables advanced data anonymization options.

Google will not link the transmitted data with other data without your consent. Google's privacy statement can be viewed here .

The website visitor can prevent the collection of cookie files and their analysis via the Google Analytics service by changing the browser settings, as stated above, and also by installing the browser add-on to deactivate Google Analytics, available here .

Within the Google Analytics service, the Controller also uses related advertising features provided by Google, such as extended reporting of anonymous demographic data (e.g. age, gender, interests) or display of advertising in the content network based on viewed products (so-called remarketing), including the Google Ads service for personalizing advertising and improving advertising targeting.

Within Google Ads service, we use Enhanced Conversions, which hashes user-provided data (email, phone, name) from order forms and securely sends it to Google for more accurate conversion attribution to advertising campaigns. Data is hashed before sending and cannot be used by Google to identify the user.

The website visitor of the Controller can disable or modify personalization of advertising via their Google account, using the link available here .

Microsoft Clarity

Our websites use the Microsoft Clarity service, an analytical tool provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA (hereinafter: " Microsoft ").

Microsoft Clarity uses cookies and other tracking technologies to collect data on user behavior on our websites. The service analyzes how visitors use our pages, including mouse movements, clicks, scrolling and other interactions. This data helps the Controller better understand user behavior and improve user experience.

The collected data are anonymized and cannot be used to identify specific individuals. More information about data processing by the Microsoft Clarity service can be found in Microsoft Corporation's privacy statement .

You can refuse the use of the Microsoft Clarity service by adjusting cookie settings in your browser.