Skip to Content

Personal Data Processing

The protection of personal data is an integral part of fulfilling our obligations towards natural persons (hereinafter referred to as the "data subject") for Forko CZ s.r.o., with its registered office at: Brožíkova 284/8, 266 01 Beroun, Czech Republic; ID No. (IČ): 287 99 658. We are dedicated to personal data protection on a long-term, systematic basis, providing it with the attention that this matter requires, and always in accordance with the applicable legislative framework of the Czech Republic, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "General Regulation" or "GDPR") and Act No. 110/2019 Coll., on Personal Data Processing.

What personal data do we process?

Forko CZ s.r.o. processes the following personal data:

  1. Address and identification data – name, surname, date and place of birth, gender, marital status, personal identification number (rodné číslo), nationality, permanent residence address, identity document number
  2. Contact details – email address, phone number, delivery address
  3. Descriptive data – education, number of children, previous employment, information about previous health insurance company, bank details


Why do we process personal data and on what legal basis?

Processing of personal data based on law (legal obligation)

Forko CZ s.r.o., as the personal data controller, is authorized to process personal data on the basis of legal regulations. Furthermore, it may process personal data for the purpose of fulfilling legal obligations based on the legislation of the Czech Republic governing the field of accounting and financial control.

Processing of personal data based on legitimate interest

Forko CZ s.r.o., as the personal data controller, also processes the personal data of the data subject within the meaning of Article 6(1)(f) of the General Regulation for the purpose of ensuring direct marketing, which includes, for example, sending a regular newsletter or occasional emails with information related to the activities of Forko CZ s.r.o.

Processing of personal data based on the performance of a contract

Forko CZ s.r.o., as the personal data controller, processes the personal data of the data subject within the meaning of Article 6(1)(b) of the General Regulation for the purpose of maintaining employment contracts, processing payroll, and for the purpose of fulfilling obligations of external service and property providers.

Processing of personal data based on consent

Within the meaning of Article 6(1)(a) of the General Regulation, Forko CZ s.r.o. processes personal data based on the consent of the data subject granted for a specified scope of processed personal data and purpose of processing. Forko CZ s.r.o. is authorized to process this personal data for the period for which the consent was granted or until it is withdrawn.

Who processes your data and to whom do we transfer your data?

In most cases, your personal data is processed directly by Forko CZ s.r.o. This means that Forko CZ s.r.o. determines the purposes defined above for which it collects your personal data, specifies the means of processing, and is responsible for its proper execution.

Forko CZ s.r.o. may also transfer your personal data for processing to other entities, which are:

  • State administration authorities, or persons defined by the legal order of the Czech Republic within the framework of mandatory cooperation.

Note: Forko CZ s.r.o., as the data controller, has a written agreement with all processors defining and declaring the performance of processing activities in order to ensure compliance with the General Regulation and achieve maximum security of the processed personal data.

Forko CZ s.r.o. does not transfer your personal data to third countries or international organizations. Should such a transfer be necessary, specific information will be provided in that particular case.

From what sources do we obtain your personal data?

We obtain personal data from:

  • Clients
  • Relevant registers
  • Directly from the data subjects
  • From state and other authorities within the fulfillment of legal obligations set by relevant legal regulations
  • From publicly accessible registries

How long do we retain personal data?

Forko CZ s.r.o. stores the processed personal data only for the period processing is strictly necessary.


What basic data protection rights can you exercise?

Right of access to personal data

You have the right to request confirmation as to whether or not your personal data is being processed. If so, you have the right to request information regarding what data and to what extent it is processed, specifically: categories of personal data processed, purpose of processing, retention period, information about recipients to whom the personal data is disclosed, any available information about the source of the personal data, and information on whether automated decision-making, including profiling, takes place.

Right to rectification or completion

If you suspect that the processed data is incorrect, you have the right to request the rectification or completion of your personal data.

Right to data portability

The data subject has the right to request the controller to transfer their personal data (if technically feasible) in a structured, commonly used, and machine-readable format to another controller.

Right to erasure (Right to be forgotten)

In certain cases, you have the right to have your personal data erased. We will erase your personal data without undue delay if:

  • We no longer need your personal data for the purposes for which it was processed,
  • You withdraw your consent to the processing of personal data, provided that it concerns data for which your consent is necessary and we have no other legal reason to continue processing it,
  • The provision of the service based on the concluded contractual relationship has terminated,
  • You believe that the processing of personal data carried out by us is no longer in compliance with generally binding regulations.

The right to erasure does not apply if the processing of your personal data remains necessary for compliance with a legal obligation or for the establishment, exercise, or defense of legal claims.

Right to restriction of processing

In some cases, in addition to the right to erasure, you can exercise the right to restriction of processing of personal data. This right allows you to request that your personal data be marked and not subjected to any further processing operations – however, in this case, not forever (as with the right to erasure), but for a limited period. We must restrict the processing of personal data when:

  • You contest the accuracy of the personal data, until we agree on what data is correct,
  • We process your personal data without a sufficient legal basis (e.g., beyond what we must process), but you prefer restriction of such data instead of its erasure,
  • We no longer need your personal data for processing purposes, but you require it for the establishment, exercise, or defense of your legal claims.

Right to object to processing

You have the right to object to the processing of personal data that occurs on the basis of the legitimate interest of Forko CZ s.r.o. If you object to processing for marketing activities, we will no longer process your personal data for these purposes. In other cases, we will do so unless we have compelling legitimate grounds to continue such processing.

Right to withdraw consent

You can withdraw your consent to the processing of personal data at any time. However, the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. The withdrawal of consent also has no effect on any mutual contractual relationship.

Right not to be subject to automated individual decision-making, including profiling

You have the right not to be subject to any decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except where the decision is:

  • Necessary for entering into, or performing, a contract between you and the data controller, 
  • Authorized by European Union or Czech Republic law,
  • Based on your explicit consent.

Right to lodge a complaint

In the event of an alleged violation of applicable personal data protection laws, you can exercise this right. You can lodge a complaint against the processing of personal data carried out by Forko CZ s.r.o. with the supervisory authority, specifically the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), located at Pplk. Sochora 27, 170 00 Prague 7.

How can you exercise your rights?

All your requests will be handled within Forko CZ s.r.o. by the authorized person/managing director of the company.

You can exercise your rights at any time by submitting a request:

By mail to the address: Brožíkova 284/8, 266 01 Beroun

By email: info@forko.cz
Via Data box: xyt5uqi

The deadline for processing requests is 30 days from the date of delivery.