Privacy Policy

Maturing Online Store – www.maturing.cz

Effective from: 27 October 2026

1. Who Processes Your Personal Data

The data controller is:

Katarina Frajova
Trading name: Maturing
Registered address: Polevsko 236, 471 16 Polevsko, Czech Republic
Business Identification Number (IČO): 24432342
Email: maturingcz@gmail.com
Website: www.maturing.cz

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR) and other applicable legislation.

2. What Personal Data We Process

In connection with operating our online store, we may process the following personal data:

• Customer's first and last name.

• Billing and delivery addresses.

• Email address and telephone number.

• Organisation name and Business Identification Number, if purchasing on behalf of a school or company.

• Information about ordered products, payments and deliveries.

• Information relating to complaints, returns and customer communications.

• Technical information associated with website visits, such as IP addresses and data stored through cookies.

We do not process payment card details directly. Card payments are handled by our payment service provider, Stripe.

3. Why We Process Personal Data

Processing Orders

We use personal data to receive and process orders, arrange payments, deliver products and communicate with customers. This also includes orders submitted through our online order form.

Legal basis: Performance of a contract under Article 6(1)(b) GDPR, or taking steps at the customer's request before entering into a contract.

Accounting and Legal Obligations

We retain information contained in accounting records and other legally required documents to comply with our legal obligations.

Legal basis: Compliance with a legal obligation under Article 6(1)(c) GDPR.

Complaints and Protection of Our Rights

We may process personal data when handling complaints, withdrawals from purchase agreements, disputes and the protection of legitimate legal claims.

Legal basis: Performance of a contract, compliance with a legal obligation or legitimate interests, depending on the nature of the processing.

Customer Communication

If you contact us by email or through a contact form, we use the information you provide to respond to your enquiry.

Legal basis: Legitimate interest in communicating with customers or taking steps prior to entering into a contract.

Marketing Communications

If you give us your consent, we may occasionally send you emails about new games, educational materials and offers from Maturing.

Consent is voluntary and can be withdrawn at any time by using the unsubscribe link in our emails or by contacting maturingcz@gmail.com.

Where permitted by law, we may also send existing customers offers relating to our own similar products without obtaining separate consent, provided they were given the opportunity to opt out when their contact details were collected and can opt out of every subsequent message.

Legal basis: Consent under Article 6(1)(a) GDPR or, where legally permitted, legitimate interests.

4. Who May Have Access to Your Personal Data

Where necessary, personal data may be shared with service providers involved in operating our online store:

• Webnode – website hosting, operation and technical support for the online store.

• Stripe – processing online card payments.

• Zásilkovna / Packeta – shipping and delivery of orders.

• Google (Gmail) – email communication with customers.

• Google Forms – collecting and processing information submitted through our online order form.

• Banking service providers – processing bank payments.

• Accounting service providers – processing accounting records, where such services are used.

We share only the information necessary for these providers to deliver their services. Some recipients act as independent data controllers, while others act as data processors on our behalf.

We do not sell personal data to third parties.

5. Transfers of Personal Data Outside the European Economic Area

Some providers of technical and payment services may process personal data outside the European Economic Area (EEA).

Where such transfers take place, an appropriate level of personal data protection must be ensured in accordance with the GDPR, for example through an adequacy decision issued by the European Commission or the use of Standard Contractual Clauses.

The specific conditions governing these transfers are also described in the privacy policies of the relevant service providers.

6. How Long We Retain Personal Data

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected:

• Order information: For the duration of the contractual relationship and subsequently for as long as necessary to handle complaints, resolve disputes and protect legal claims.

• Accounting and tax records: For the period required by applicable legislation, generally five years for accounting documents unless a different statutory retention period applies.

• Communications and enquiries: For as long as necessary to respond to the enquiry and, where applicable, protect legal claims.

• Marketing contacts: For as long as consent remains valid or marketing communications are permitted under another lawful basis. After an unsubscribe request, we may retain the minimum information necessary to record the opt-out and prevent further marketing messages.

Once the relevant retention period has expired, personal data will be deleted or anonymised unless further retention is required by law.

7. Cookies and Technical Data

Our website uses cookies and similar technologies that may be necessary for the proper functioning of the website, shopping cart and checkout process.

Depending on the current website settings, additional cookies provided by the website service provider may also be used.

We currently do not independently use Google Analytics or Meta Pixel.

Strictly necessary cookies may be used without prior consent where permitted by law. Non-essential cookies are used only with the visitor's appropriate consent.

More detailed information about individual cookies and how to manage them is available through the cookie settings on our website.

8. Your Rights

Under the conditions set out in the GDPR, you have the right to:

• Request access to your personal data.

• Request correction of inaccurate or incomplete personal data.

• Request deletion of your personal data where the legal conditions are met.

• Request restriction of processing.

• Object to processing based on legitimate interests.

• Receive your personal data in a portable format where the right to data portability applies.

• Withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, please contact us at maturingcz@gmail.com.

We will respond to your request without undue delay, generally within one month of receiving it.

9. Right to Lodge a Complaint

If you believe that we are processing your personal data in violation of applicable data protection laws, you have the right to lodge a complaint with the supervisory authority:

Czech Data Protection Authority (Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Prague 7, Czech Republic
Website: www.uoou.gov.cz

You may also contact us first at maturingcz@gmail.com so that we can try to resolve any concerns.

10. Personal Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or unauthorised disclosure.

Access to personal data is limited to individuals who need it to process orders or ensure the operation of our online store.

11. Changes to This Privacy Policy

We may update this Privacy Policy, particularly if there are changes to the services we use, how we process personal data or applicable legislation.

The current version is always available at www.maturing.cz.