1. Data controller
matu.sk, Sabinovská 362/5, 821 03 Bratislava, Slovakia, Company ID: 50 756 893, e-mail: uctovnictvo@matu.sk
The operator of the matu.sk mobile app is ACC-NET s.r.o., a co-owner of matu.sk, Sabinovská 362/5, 821 03 Bratislava, Company ID: 51 482 711, e-mail: uctovnictvo@matu.sk. The same company holds the account in the Apple Developer Program and on Google Play.
2. What data do we process?
We process personal data you provide voluntarily through the contact form: name, company name, e-mail, phone number, the service you are interested in and the content of your message. This data is used solely to answer your enquiry. Immediately after you send the form, we deliver an automatic confirmation to the e-mail address you entered, letting you know that we have received your message.
3. Purpose and legal basis
We process the data on the basis of your consent (Art. 6(1)(a) GDPR) and for the purposes of pre-contractual relations (Art. 6(1)(b) GDPR).
4. Retention period
A maximum of 3 years from the last contact, unless the law requires longer archiving.
5. Sharing of data
We do not pass your data to third parties, except where required by law and except for the processor named in point 8. The AI chat is operated by Anthropic PBC (USA) – the transfer is covered by the EU Standard Contractual Clauses.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, portability and objection. You can exercise them at uctovnictvo@matu.sk. You also have the right to lodge a complaint with the Slovak Data Protection Authority (uoou.sk).
7. Cookies and browser storage
The public part of the site uses almost no cookies – the only exception is the chat: when you send or receive an image there, a temporary cookie is set for 1 day so we can load that image again. Otherwise, your light or dark mode setting and any chat conversation in progress are stored by your browser itself and are never sent to our server. We measure traffic without cookies and without storing IP addresses.
The client zone (matu.sk/klient/) is behind a login and uses three strictly necessary cookies: the sign-in itself (it ends when you close the browser), the chosen language – stored only once you switch the language yourself – and remembering the browser for 30 days, likewise only if you ask for it, so that the second verification step is not requested again; it holds nothing but a random number, the access credential itself stays on our server.
We use no analytics or marketing cookies, so the site needs no consent banner.
8. The AI chat on this site
We run a chat assistant that answers questions about our services. If you give us your name and e-mail in the chat, we use them to send you the conversation transcript and to be able to get back to you; providing this data is voluntary and the chat works without it. If you ask for a phone call in the chat and leave us your phone number, we will use it solely to make that call and keep it together with the conversation; this too is voluntary.
The text of the conversation is processed on our behalf by Anthropic PBC (USA) as a processor, under a data processing agreement and the EU Standard Contractual Clauses. Your messages are not used to train AI models.
We send the transcript of the conversation to the e-mail address you provide and to uctovnictvo@matu.sk. We also keep the text of the conversation on our server so that we can follow up on your question later; it is deleted automatically after 3 years under point 4, and we will delete it sooner on request.
You can attach an image to the chat – for example a photo of an invoice or a screenshot. The image is viewed only by the accountant; it is not sent to the artificial intelligence. We store it on our own server together with the conversation and delete it within the same period under point 4. Attaching images is voluntary; please send only what we really need to see, and not documents containing data of third parties unrelated to the matter.
The answers are generated by artificial intelligence and may contain inaccuracies – they are not binding tax or accounting advice. Please do not enter personal identification numbers, bank account numbers or other sensitive data into the chat. The legal basis is your consent (Art. 6(1)(a) GDPR) and pre-contractual relations (Art. 6(1)(b) GDPR).
9. Calls through the website
If you choose a call straight from your browser in the chat, the audio travels directly between your device and the accountant's phone. Our server only introduces the two sides – it does not listen in and does not store the call.
The call may be recorded to improve the quality of our services and to keep an accurate record of what was agreed. We tell you so with a spoken notice and in writing in the chat window before the call is connected; if you do not agree to being recorded, simply do not start the call – you can leave us a phone number instead or carry on in the written chat.
The recording is transcribed into text on our own server – we do not hand the voice recording to any third party. The audio itself is deleted as soon as it has been transcribed; we keep only the text transcript and a short summary of it, together with the conversation as described in point 4. We will e-mail you the summary of the call if you gave us your address and confirmed it. When the summary is being written, the text of the transcript is processed by Anthropic PBC (USA) under the same terms as the chat text described in point 8.
The legal basis is our legitimate interest in the quality of our services and in being able to prove what was agreed (Art. 6(1)(f) GDPR), together with your decision to start the call after being notified. You may object to the recording at any time at uctovnictvo@matu.sk and we will delete the transcript.
10. Issuing an invoice on the site
On the Online invoice page you can issue an invoice and download it as a PDF. The details you fill into the form – including the customer's details – reach us only for the moment in which the server draws the PDF from them, and that is sent straight back to your browser. None of it stays on our server: we do not store, register or read the invoice.
The only exception are the images you upload (logo, stamp, signature). The site necessarily puts them into a temporary file for the time the request is processed, and once the invoice is drawn the system deletes them automatically. No data from the invoice is written into the server's operational log.
To keep the page from being abused to overload the server, we record the times of recent requests. Your IP address is not stored in readable form – only an unreadable fingerprint of it is used. Requests older than an hour stop counting and the record itself is deleted as the page keeps being used. The legal basis is our legitimate interest in the operation and security of the site (Art. 6(1)(f) GDPR).
Your company details are remembered by your browser and the downloaded template for the next invoice sits on your computer – we keep nothing from them. They reach our server only at the moment you have an invoice drawn, just like the rest of the form. You can erase them from the browser with a button right on the page.
We only record how many invoices are issued on the page – one number per day. Nothing from the invoice is stored, nor your IP address or anything else that could reveal who issued the invoice. Such a total is not personal data.
11. Security
Communication is encrypted using HTTPS. Received messages are accessible only to authorised persons.
