Personal data protection

The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (the "GDPR") and of Czech Act No. 110/2019 Coll., on personal data processing, is Folk Food Catering s.r.o., Company ID 17647983, registered office at Dlouhá 3403/2b, Moravská Ostrava, 702 00 (the "controller").

Contact details of the controller: e-mail info@folkfoodcatering.cz, telephone +420 778 028 838 or +420 731 407 330.

Personal data means any information relating to an identified or identifiable natural person.

You provide data through our forms, by email or by phone. This includes your name, email, phone number, event location and date, guest count, selected food, collection or delivery arrangements and any notes you include. Required fields are marked in each form.

For dietary requirements, please describe the food you need without naming individual guests or including their medical history.

We use these details to respond to your request, prepare a quote and fulfil an agreed order. Processing necessary for these purposes is based on steps taken at your request before entering into a contract and on performance of that contract. Statutory accounting records are kept to comply with legal obligations. The forms do not subscribe you to marketing messages.

✦Handling your enquiry, quote and catering order (name, address, e-mail, telephone number).
✦Fulfilling the rights and obligations arising from the contractual relationship between you and the controller – delivering the catering and settling payments.
✦E-mail communication necessary to arrange, clarify and confirm your event.

When you submit a form, we also save an approximate visit source, such as Google, ChatGPT or Instagram, to understand how customers find us. We retain only a source category from a fixed list, not the full referring URL, search terms or advertising identifiers. We do not send this information to the search engine or social network. This feature does not use cookies or persistent browser storage. Sources we cannot identify are marked as direct or unknown.

We retain enquiry and order details for as long as needed to handle the request and fulfil the order. Records subject to statutory retention requirements are kept for the applicable period. Data needed to establish, exercise or defend legal claims is retained for that purpose. Contact info@folkfoodcatering.cz for information about your specific records.

We use Railway for website hosting, the database and private backup storage, Resend for transactional emails, and Google Calendar to plan confirmed events. We share only the information needed for the relevant purpose.

You may exercise the following rights subject to the conditions set out in the GDPR. Contact info@folkfoodcatering.cz:

✦to access your personal data,
✦to have your personal data rectified,
✦to have your personal data erased,
✦to restriction of processing,
✦to object to processing,
✦to data portability,
✦to withdraw consent where processing is based on consent; this does not affect the lawfulness of processing before withdrawal,
✦to lodge a complaint with the Czech Office for Personal Data Protection if you believe that your right to the protection of personal data has been infringed.

Access to enquiry and order management is protected by administrator authentication. Please do not include unnecessary sensitive information in free-text fields. We regularly back up the database in encrypted form to separate private storage. Operational backups are normally retained for 35 days; if backups fail, we retain at least the seven most recent archives. Short-term request limits based on a fingerprint of the IP address help protect forms against misuse. Administrator sign-in uses a necessary cookie valid for eight hours.

This page provides information about data processing; it is not a request for blanket consent. When this information changes, we will update it here.