PRINCIPLES OF HANDLING YOUR DATA

We are the company MetalPlast Lipník n. B. a.s. We operate an e-shop on the website eshop.metalplast.cz.

For the sale of goods and the operation of our website, we process certain personal data.

The processing of personal data is primarily governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ("GDPR").

PERSONAL DATA PROCESSING

Processing of Personal Data in Case of Using the Contact Form

If you inquire about our products and services, we will work with the contact details you provide to us, mainly via the inquiry form. These are: First Name, Last Name, and Email Address.

• For what reason? We contact you using these details for further agreement regarding the goods.

• On what legal basis? This is processing based on Art. 6(1)(b) GDPR – negotiations on a contract, or taking steps prior to entering into a contract at your request.

• How long will we process the personal data? If we do not establish further cooperation, we will process your data for a maximum of 90 days from our last communication.

Processing of Personal Data in Case of Purchase

If you make a purchase from us, we will work with the data you fill in. These are mainly billing details: First Name, Last Name, Address, Phone Number, and Email Address.

• For what reason? We need to process personal data to fulfill our contract – to deliver our goods to you. We will also use your contact details to communicate with you regarding the status of your order, or regarding complaints or your queries.

  We will further process personal data to fulfill our legal obligations (mainly for accounting and tax purposes, or for processing complaints and others).

• On what legal basis do we process personal data? This is processing based on Art. 6(1)(b) GDPR – performance of a contract, and Art. 6(1)(c) GDPR – compliance with our legal obligation.

• How long will we process the personal data? For the duration of the provision of our service and thereafter 10 years from the last delivery of goods.

Newsletters (Commercial Communications)

If you are a purchasing customer and you have not forbidden us from doing so during the purchase, we will use your email address to send our news.

• On what legal basis? Section 7(3) of Act No. 480/2004 Coll., on Certain Information Society Services allows us to do so, provided you did not forbid it during the purchase.

• How long will we process the personal data? 10 years from your last purchase. You can unsubscribe from the mailing list at any time via email or by contacting us at: jana.krmencikova@metalplast.cz.

WHO GETS ACCESS TO THE DATA?

Your data stays with us. However, certain companies or other persons work for us who get access to the data because they help us run our e-shop. These are:

• Operator of the e-shop platform Shoptet (Shoptet a.s., with registered office at Dvořeckého 628/8, Břevnov, 169 00, Prague 6, ID No.: 289 35 675, registered at the Municipal Court in Prague, Section B, Insert 25395)

• Companies involved in the dispatch of goods (Česká pošta, Zásilkovna, PPL, DPD)

• Companies involved in payment processing (Shoptet Pay)

We process personal data strictly within the territory of the European Union.

WHAT ELSE YOU SHOULD KNOW

• Our company does not have a designated Data Protection Officer (DPO).

• Our company does not engage in decision-making based on automated processing or profiling.

• If you have questions regarding personal data, contact us at the email address jana.krmencikova@metalplast.czor call us at +420 581 726 237.

USE OF COOKIES

Cookies are text files containing small amounts of information that are downloaded to your device when you visit our website. Cookies are then sent back to the originating website or another website that recognizes them on each subsequent visit.

Cookies perform various tasks, such as allowing efficient navigation between web pages, remembering your preferences, and generally improving the user experience. They can also help ensure that advertisements displayed online are better tailored to you and your interests.

We use the following cookies on our website:

• Necessary cookies: required for the operation of the website; they enable, for example, logging into secure areas of the site and other basic website functionalities. This category of cookies cannot be disabled.

• Analytical/statistical cookies: allow us, for example, to recognize and count the number of visitors and to see how visitors move around our website. They help us improve the way the website works, for example, by ensuring that users find what they are looking for easily. We run these files only with your prior consent.

• Advertising cookies: used to track preferences and allow displaying advertising and other content that best corresponds to your interests and online behavior. We run these files only with your prior consent.

Please note that third parties (including, for example, external service providers) may also use cookies and/or access data collected by cookies on the website.

Cookies Used:

Further information about cookies and an up-to-date list can be found via individual internet browsers, most commonly under Developer Tools.

Consent can be given via the checkbox contained in the cookie banner. You can subsequently refuse cookies in your internet browser settings or set it to use only certain ones.

Information on cookie management in individual browsers can be found at the following links:

• Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies

• Google Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en

• Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

• Safari: https://support.apple.com/guide/safari/sfri11471/mac

• Opera: https://help.opera.com/en/latest/web-preferences/#cookies

• Microsoft Edge: https://docs.microsoft.com/en-us/sccm/compliance/deploy-use/browser-profiles

YOUR RIGHTS IN CONNECTION WITH PERSONAL DATA PROCESSING

Among other things, the GDPR gives you the right to contact us and request information about what personal data we process, request access to this data, and have it updated or corrected, or request restriction of processing. You can request a copy of the processed personal data, request the erasure of personal data under certain circumstances, and in certain cases, you have the right to data portability. You may object to processing based on legitimate interest.

If you believe that we are not handling your data correctly, you have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů) or take your claims to court.

These terms and conditions are effective as of July 1, 2026.