The controller of your personal data is Metemi s.r.o., ID No.: 220 78 991, with registered office at Kaprova 42/14, Staré Město, 110 00 Prague 1, registered in the Commercial Register maintained by the Municipal Court in Prague under file reference C 410628 (hereinafter referred to as the "Controller"), which operates the Metemi mobile application and possibly related websites or platforms (hereinafter referred to as the "Application"). The Controller operates an online social service that allows users (hereinafter referred to as "Users") to create profiles, communicate, and establish contacts with other users. In this Application, the Controller processes and controls the processing of your personal data as data subjects.
The Controller processes your personal data, and thus decides how your personal data will be processed, for what purpose, and for how long. The Controller may also select other personal data processors who will assist with the processing of personal data, and who are listed in these Personal Data Processing Principles.
Within the scope of providing services, mutual processing of your data by Application Users also takes place. These Personal Data Processing Principles do not apply to this processing.
The Controller can be contacted for all matters related to the processing of personal data at the email address support@metemi.com or by mail at: Metemi s.r.o., ID No.: 220 78 991, Kaprova 42/14, Staré Město, 110 00 Prague 1. Requests are handled without undue delay, but within a maximum of one month. In exceptional cases, especially due to the complexity of the request, this period may be extended by another two months. The Controller will inform data subjects in advance of any such extension and its justification.
The Controller declares that, as a personal data controller of Application users, it fulfills all legal obligations required by valid legislation, especially Act No. 110/2019 Coll., on the processing of personal data, as amended, and Regulation (EU) No. 2016/679 of the European Parliament and of the Council (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR"), and thus that:
In connection with the provision of Application services, the Controller processes the following personal data:
The Controller primarily processes the first and last name of data subjects, gender, date of birth, primarily for the purpose of accessing the Application or creating an account.
The Controller primarily processes Users' phone numbers and email addresses to properly provide services within the Application.
The Controller processes data about your image, which you upload to the Application yourself. Your image may also be uploaded to your profile in the Application when using the single sign-on service of Meta or Google Inc., if you give voluntary consent in advance.
If you choose to use optional identity verification features in the Application, or if you are prompted to do so by the Controller (e.g., to verify age or the authenticity of your profile), we may process additional data for this purpose. This includes your current photo or video (selfie) taken for verification purposes and possibly data from your personal document (e.g., ID card or passport), if such verification is required. This data will be used exclusively for verifying your identity or age and will not be used for any other purpose. We store identity verification data only for the time strictly necessary to perform the verification, after which it is securely deleted. If we process biometric data as part of the verification (e.g., a biometric facial image obtained from your photo for automated comparison with the document), such data will be processed only on the basis of your explicit consent according to Article 9(2)(a) GDPR, which we will request from you in advance within the Application interface.
Especially transaction data, what was purchased, transaction date, price. The rest of the personal data needed to complete the transaction is then processed by an external platform such as Google Pay as an independent personal data controller.
This data includes both the content of messages sent between Users themselves, between data subjects and the Application, and metadata about the sending and delivery of these messages.
This data includes data about your personal and relationship preferences, as well as data about your sexual orientation and sexual life according to Article 9 GDPR. Specifically, the Controller processes data regarding your sexual orientation, sexual, relationship, dating, leisure, political, ethnic, health, and religious preferences.
To facilitate the search for other nearby Users, we process Users' location data using GPS or other geolocation within the Scanner function. This data helps us display Users who are in the vicinity of other Users. You can thus use this function to search for other Users nearby, and other Users can also find you through this function. When this tool is used, the Application displays the approximate distance of Users, so it is not the exact location of Users. Location data is obtained and processed directly from your mobile device to ensure the functionality of the Scanner. Within the Application, it is also possible to share your exact current location with selected Application Users. The specifically designated User will then see your location directly on the map. Sharing precise location carries security risks, which are more specifically regulated in the third part of the General Terms and Conditions. The collection of this data is always conditioned by your approval and can be immediately terminated by the User disabling access to location services in the device settings or revoking approval directly in the Application. Users' location data is stored only for the strictly necessary time (maximum 72 hours) to ensure the functionality of searching for other Users and is then automatically deleted.
The Controller primarily processes the type of browser used, its operating system, and IP address, order data, or behavior within the Application. By using the Application, some data is automatically sent from the data subject's device. From logs, where information about the data subject's activity in the Application is also recorded for security reasons, it is possible to read the duration of one login, actions performed by the data subject in the application, and also information about data entered into forms. The Controller performs the above to constantly improve services and adapt them to current technical possibilities.
If the browser or application allows the storage of so-called cookies, the Controller obtains, for example, information about the pages you visit, user preferences on your mobile phone. This also includes data from similar tracking technologies.
The Controller processes personal data based on the following legal grounds:
In order for you to create an account in the Application and fully utilize the Application as a User, we will process all the above categories of personal data. This processing also includes sharing your personal data with other users, according to your choices made in the Application. The legal basis for this processing is the performance of the contract you enter into with us in the manner described in the General Terms and Conditions, with the exception for the processing of any sensitive data under Article 9 GDPR being your consent. For this purpose, we process your data primarily for the duration of your use or provision of services with us in the Application. This purpose includes, in particular, account creation and management, matchmaking, sending and receiving messages, user verification including biometrics, payment management, and internal development and improvement of Application functionalities.
The Controller will process Users' personal data (email, first and last name, address, and any other data provided by the User) for the purpose of responding to user inquiries, content reporting. The legal basis for this processing is the performance of the contract you enter into with us in the manner described in the General Terms and Conditions. For this purpose, we process your data primarily for the duration of your use or provision of services with us in the Application.
The Controller further processes the above personal data of data subjects for the protection of its rights and the maintenance of internal records of data subjects, for potential enforcement of rights or effective defense in any dispute. For this purpose, the Controller may process all categories of data listed above. The legal basis for processing here is the Controller's legitimate interest in protecting rights, legal claims, and in keeping records of services provided, with the exception for the processing of your sensitive data under Article 9 GDPR being the establishment, exercise, or defense of our legal claims. Personal data is generally kept for the duration of the statutory limitation period, but usually no longer than sixteen (16) years after the service is provided or after the contract is terminated, including the deletion of the user account.
Your personal data, with the exception of sensitive data according to Article 9 GDPR, is used by the Controller for the purpose of promoting its brand, including information about offers and news about the services provided within the Application, all in a way that does not cause you unnecessary annoyance. The legal basis for processing is the Controller's legitimate interest in promoting its brand, Application, and services. At the same time, in some cases, you may give your consent to the processing of personal data. If the Controller processes your personal data based on legitimate interest, it does so for the duration of the account, which you can delete at any time. You have the right to object to such processing. If the Controller processes your personal data based on your consent, it does so until you withdraw your consent.
As part of marketing communication and informing about services, we may also use push notifications in the Application. If you have push notifications enabled on your device, we may send you information about new features, special offers or promotions, or other notifications related to the use of the Application. We set these notifications so that they do not annoy you excessively and are relevant to you. If you no longer wish to receive marketing notifications in the form of push notifications, you can disable or adjust them at any time in your mobile device settings or directly in the Application settings. We consider sending commercial communications via push notifications to be our legitimate interest (promotion of our services to existing users), and if you disagree, you have the right to object – in which case we will no longer send you push notifications with commercial content. If push notifications contain only necessary operational announcements (e.g., notification of a new message from another User or security alerts), their sending is necessary for the proper provision of the service; however, you can still disable them on your device, but with the knowledge that you may miss important real-time notifications.
The Controller processes personal data that it receives from its data subjects when accessing the Application, account, or by monitoring the behavior of visitors and users in the Application or websites. The Controller obtains further personal data within the Application, which mainly includes derived data from mutually provided data between data subjects. The Controller may then obtain further personal data from other users of the Services and from its partners. Such partners are controllers of your personal data, who transfer them to the Controller according to their own instructions and purposes, and where the Controller is only a processor for your personal data, meaning that it processes personal data according to the instructions of its partners. However, there may also be partners with whom the Controller will be in joint controllership, which means that the Controller who will decide on the processing of your personal data in the given case will be responsible for the processing of your personal data.
Our Platform is not intended for persons under 18 years of age. If we discover that we have inadvertently collected personal data of a child without parental consent, we will promptly delete such data. If you are a parent or legal guardian and believe that your child has provided us with personal data without your consent, please contact us at the contact details provided above.
When using the website or Application, cookies or other technologies are stored on the device (phone).
Some cookies are stored directly based on the technical operations of the website and Application and are essential for their functioning. The Controller warns that if the User chooses to block these - Necessary cookies, then the website or Application may not function correctly and may show technical errors. Necessary cookies are obtained mainly when navigating between different parts of the website and Application and during repeated visits, when displaying content of the website and Application, when ensuring security or recording errors of the website or Application.
The Controller uses the following Necessary cookies:
| Category | Purpose | Legal Basis (GDPR) |
|---|---|---|
| Authentication and session tokens | Maintaining user login and ensuring secure sessions with servers. | Necessary for contract performance / Legitimate interest |
| User preferences | Remembering user settings and personalization preferences. | Legitimate interest / Necessary for service provision |
| Application instance identifier | Identification of a single application installation to provide necessary services. | Legitimate interest / Necessary for service functionality |
| Security tokens / nonce | Protection against abuse and ensuring secure API requests. | Legitimate interest (system security) |
| Cache and temporary files | Improving performance and reducing data load by storing temporary data. | Legitimate interest (ensuring functionality and efficiency) |
| Error and crash logs | Collecting technical information about errors to increase stability. | Legitimate interest (ensuring stability and security) |
In addition to necessary cookies, the Application may also use cookies and technologies for analytical and statistical purposes. These allow us to monitor the use of the Application and improve our services (e.g., measure traffic, the functionality of individual features, and understand User interaction with the Application). Specifically, we may use third-party tools, such as Google Analytics from Google, which collect data about your device and use of the Application (e.g., device identifiers, anonymized IP address, information about the use of Application features, etc.). These analytical tools process data for our legitimate interests in improving and optimizing the Application. If required by law, we will ask for your consent to use analytical cookies and similar technologies. The User has the option to refuse the storage of these cookies or subsequently withdraw their consent (e.g., through device or Application settings) without affecting the basic functionality of the Application.
The Controller protects personal data to the maximum possible extent using modern technologies that correspond to the level of technical development. The Controller has adopted and maintains all possible (currently known) technical and organizational measures that prevent misuse, damage, or destruction of users' personal data.
The protection of your data is a priority. For this reason, the Controller has adopted, maintains, and constantly improves technical and organizational measures to protect against leakage, loss, deletion, or misuse of personal data. These primarily include the following measures:
The Controller does not carry out any decision-making concerning Users that is based solely on automated processing of personal data (without human intervention) and that would produce legal effects concerning the User or similarly significantly affect them within the meaning of Article 22 GDPR. In other words, we do not engage in automated individual decision-making that would, by itself, determine your rights or obligations or otherwise seriously affect you.
While the Application uses algorithmic data processing (for example, your stated preferences, location, and other information) for the purpose of connecting you with other Users and personalizing your environment in the Application – this can be considered a form of profiling within the meaning of the GDPR. However, this profiling does not serve automated decisions that would prevent you from using the service or penalize you in any way. Its primary purpose is to evaluate the data you provide and your behavior in the Application so that relevant suggestions and content that match your interests are offered to you (e.g., displaying profiles of other Users who meet your specified preference filters). The final decision on who you communicate or meet with is entirely up to you as the User – our system merely pre-selects options for you based on the data you provide, but it does not make binding decisions on your behalf.
We do not perform profiling for direct marketing purposes (e.g., tailoring offers or advertisements to your interests) without your consent. If we were to ever perform such marketing profiling based on legitimate interest, you have the right to object at any time, and we would then cease such processing. Your rights in connection with profiling and automated decision-making are further described in the "User Rights" section of these Principles (especially the right to object according to Article 21 GDPR and the right not to be subject to a decision based solely on automated processing according to Article 22 GDPR).
Employees and collaborators of the Controller, who are bound by confidentiality and are trained in personal data processing security, have access to users' personal data.
To ensure certain specific processing operations that the Controller cannot ensure on its own, it uses the services and applications of processors who specialize in the given processing and proceed in accordance with the GDPR.
The Controller further, with your permission, makes your personal data accessible to other users of the Application.
The Controller may also transfer your personal data, based on your consent, to other entities acting as controllers.
The Controller uses the following personal data processors for processing personal data:
The Controller reserves the right to decide in the future to use other applications or processors to facilitate and improve processing, while placing at least the same demands on the security and quality of processing when selecting a processor.
Data is primarily processed in the European Union or in countries that ensure an adequate level of protection based on a decision by the European Commission.
Equivalent protection of personal data is ensured. The Controller continuously re-evaluates this fact, and if equivalent protection ceases to be ensured, it will take measures in accordance with the GDPR to ensure that personal data remains properly protected.
All data transfers outside the EU will only be carried out if the relevant processor or controller undertakes to comply with the standard contractual clauses issued by the European Commission, available at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_en.
In connection with the protection of personal data, the Controller respects a number of rights. Data subjects can contact the Controller using the contact details provided above to exercise their rights.
If you give your consent to the Controller for the processing of personal data, this consent is entirely voluntary and you can withdraw it at any time by sending an email to support@metemi.com. The Controller notes that the withdrawal of consent does not affect the lawfulness of processing prior to this withdrawal or the possibility of maintaining the processing of personal data based on other legal titles.
Users always have the right to object to the processing of personal data that occurs on the basis of the Controller's legitimate interest. The Controller will always comply with such an objection if it processes personal data for marketing purposes; for other reasons, the Controller will cease processing personal data unless it has compelling legitimate grounds to continue processing the personal data.
These personal data processing and protection principles are effective as of September 22, 2025.