GDPR

Privacy Policy (GDPR Statement)

Capay Metteer SE – Operator of the TopdeckTCG Online Store
Effective Date: October 31, 2025

1. Introduction

The operator of the online store Capay Metteer SE, Company ID: 027 59 993, with its registered office at Vítkova 286/5, Karlín, 186 00 Prague 8, registered in the Commercial Register maintained by the Municipal Court in Prague, File No. H 1365, operating the e-commerce website www.topdecktcg.eu (hereinafter referred to as the “Controller”), processes personal data provided by the Customer for the purpose of fulfilling and confirming contractual obligations, processing electronic orders, delivering Goods, settling payments, and maintaining necessary communication between the parties for the period required by applicable law.

2. Basic Information

The Controller of personal data, pursuant to Article 4(7) of Regulation (EU) 2016/679 – the General Data Protection Regulation (GDPR) and Act No. 110/2019 Coll. on Personal Data Processing (zákon č. 110/2019 Sb., o zpracování osobních údajů), is
Capay Metteer SE, ID No.: 027 59 993, with registered office at Vítkova 286/5, 186 00 Prague 8, Czech Republic (hereinafter referred to as the “Controller”).

Contact Information:
E-mail: info@topdecktcg.eu

Personal data refers to any information identifying or capable of identifying a natural person (e.g., name, address, e-mail, or telephone number).

3. Sources and Scope of Personal Data Processing

The Controller processes personal data that:

• has been voluntarily provided by the Customer with their consent; or
• has been obtained by the Controller for the purpose of fulfilling a contract and processing electronic orders through the online store www.topdecktcg.eu.

The Controller processes only identification and contact data necessary for fulfilling the Contract (name, address, e-mail, telephone number, and payment information).

Personal data is processed solely for the purpose of product delivery, payment settlement, and essential communication between the Controller and the Customer.
Personal data is not published or transferred outside the European Union.

4. Purpose of Personal Data Processing

The Controller processes the Customer’s personal data for the following purposes:

• registration on the website www.topdecktcg.eu,
• processing and delivery of electronic orders (name, address, e-mail, telephone number),
• fulfilling legal obligations and contractual rights arising from the relationship between the Customer and the Controller,
• maintaining accounting and tax records as required by law.

Providing personal data is a necessary requirement for the conclusion and fulfillment of the Contract.
Without providing the required data, it is not possible to process an order or conclude the Contract.

5. Data Retention Period

The Controller retains personal data:

• for the duration of the contractual relationship between the Customer and the Controller,
• and for a period of five (5) years following the termination of the relationship, unless a longer period is required by law (e.g., accounting or tax purposes).

After this period, the Controller shall securely erase all personal data.

6. Data Recipients and Processors

Personal data may be disclosed only to third parties directly involved in fulfilling the Contract and processing the Customer’s order.

Sub-processors authorized by the Controller include:

• Czech Post (Česká pošta, s.p.) – delivery service,
• Balíkovna – parcel delivery service,
• Shoptet a.s. – e-commerce platform provider,
• Stripe, Inc. – payment gateway provider,
• Google Ireland Ltd. (Google Analytics) – website analytics.

These entities process personal data strictly according to the Controller’s instructions and in compliance with the GDPR.

7. Customer Rights

Under the GDPR and Act No. 110/2019 Coll., the Customer has the following rights:

• Right of access to their personal data,
• Right to rectification or completion of inaccurate data,
• Right to erasure (“right to be forgotten”),
• Right to object to data processing,
• Right to restrict processing,
• Right to data portability,
• Right to withdraw consent at any time by sending a written or electronic notice to info@topdecktcg.eu,
• Right to file a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů) if the Customer believes their rights have been violated.

8. Data Security

The Controller declares that all appropriate technical and organizational measures have been taken to protect the Customer’s personal data.
Data repositories are secured by passwords, antivirus software, and regular system maintenance.
Access to personal data is restricted to authorized personnel only.

9. Final Provisions

By submitting an electronic order on the website www.topdecktcg.eu, the Customer confirms that they have read and understood this Privacy Policy and agree to its terms in full.
Consent is expressed by clicking the “Order with obligation to pay” button when submitting the order.

The Controller reserves the right to amend this Privacy Policy at any time.
Any new version will always be published on the website of the Controller.

This Privacy Policy is effective as of October 31, 2025.