Privacy Policy
Effective 1 January 2025 · matplace s.r.o.
1. Data Controller
The data controller is matplace s.r.o., Company ID: 22499008, registered office at Rybná 716/24, Staré Město, 110 00 Prague 1, Czech Republic, registered at the Municipal Court in Prague under file no. C 417491 (hereinafter "we" or "matplace").
Contact: info@matplace.com
2. Personal Data We Collect
- Identity data – first and last name, company name, company ID (optional)
- Contact data – email address, phone number, city/address
- Order data – print description, model files, material, quantity, deadline, chat messages
- Payment data – processed exclusively by Stripe; we store only the transaction ID and payment status
- Technical data – IP address, browser type, access timestamps, cookies
- Ratings and reviews – customer reviews of printers
3. Purpose and Legal Basis
| Purpose | Legal Basis |
|---|---|
| Brokering print requests between customers and printers | Contract performance (Art. 6(1)(b) GDPR) |
| Managing user and printer accounts | Contract performance (Art. 6(1)(b) GDPR) |
| Payment processing (escrow) | Contract performance (Art. 6(1)(b) GDPR) |
| Transactional emails (confirmations, offers, ratings) | Contract / legitimate interest (Art. 6(1)(f) GDPR) |
| Platform security and fraud prevention | Legitimate interest (Art. 6(1)(f) GDPR) |
| Legal obligations (accounting, tax) | Legal obligation (Art. 6(1)(c) GDPR) |
| Analytics and service improvement | Legitimate interest / consent (Art. 6(1)(a) or (f) GDPR) |
4. Retention Periods
- Order data – 5 years after completion (tax law requirements)
- User and printer accounts – for the duration of registration; deleted or anonymised within 30 days of account closure
- Emails and messages – 3 years from last activity
- Logs and technical records – max. 12 months
5. Recipients of Personal Data
We do not sell your data. We share it only with:
- Registered printers – to the extent necessary to fulfil your request (name, email, order content)
- Stripe, Inc. – payment gateway (stripe.com/privacy)
- Zásilkovna / PPL – delivery partners, for shipment only
- Hosting provider – servers within EU/EEA
- Anthropic, Inc. – AI assistant provider; messages sent to the chat widget are processed by the Claude model (anthropic.com/privacy)
6. International Transfers
Stripe, Inc. and Anthropic, Inc. are based in the USA. Transfers are covered by Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Your Rights
- Right of access – request a copy of your data at any time
- Right to rectification – correct inaccurate data
- Right to erasure – under Art. 17 GDPR (unless we have a legal obligation to retain the data)
- Right to restriction – Art. 18 GDPR
- Right to data portability – receive your data in a machine-readable format
- Right to object – to processing based on legitimate interest
- Right to withdraw consent – where processing is consent-based
- Right to lodge a complaint – with the Czech Office for Personal Data Protection (uoou.cz)
Send requests to info@matplace.com. We will respond within 30 days.
8. Cookies
We use only essential session cookies for login and CSRF protection. We do not use third-party advertising or tracking cookies. Session cookies expire when you close your browser or after 24 hours of inactivity.
9. Security
Data is transmitted over TLS encryption. Passwords are stored as one-way hashes (bcrypt). We never process or store card numbers – all payments go directly through Stripe.
10. Changes to This Policy
We will notify you of material changes by email or a site notice at least 14 days before they take effect.
11. Contact
matplace s.r.o.
Rybná 716/24, Staré Město, 110 00 Prague 1, Czech Republic
Email: info@matplace.com
12. Account & Data Deletion
To delete your account and all associated personal data:
- Send an email from the address you used to register, to info@matplace.com
- Subject: Account deletion
- In the body, confirm you want to delete your account and all personal data
We process such requests within 30 days of receipt. We will delete or anonymise:
- Customer, printer, or designer profile
- Contact data (email, phone, address)
- OAuth connections (Google, Facebook)
- Chat message history
Some data must be retained for legal reasons (Czech accounting law — tax records for orders, invoices, payments; typically 5–10 years). This data is anonymised in relation to your profile but remains in accounting to the extent required by law.
You can also remove the Facebook OAuth connection directly from Facebook Settings → Apps and Websites.
