Information about the processing of personal data according to the Regulation of the European Parliament and Council No.
2016/679 of April 27, 2016, on the protection of individuals regarding the processing
of personal data and on the free movement of such data, and repealing Directive 95/46/EC

Data Controller

The data controller is the organization Forest.Ink z.s., ID No. 06878997, located at Sklenářka 458,
517 41 Kostelec nad Orlicí, registered in the registry of associations kept by the Regional Court in
Hradec Králové under file no. L 11640 (hereinafter referred to as the "controller").

This document informs you that the controller is processing your personal data and your
rights. You can contact the controller in writing at the registered address or via the email address admin@forest.ink.

Scope of Personal Data Processing

Personal data is processed to the extent that you have provided it to the data controller, in connection with entering into a contractual or other legal relationship with the controller, or which the controller has collected otherwise and processes it in accordance with applicable legal regulations or to fulfill the controller's legal obligations. Personal data may also be processed to protect the legitimate interests of the controller or based on your consent.

Depending on the purpose of processing, the following personal data is mainly processed: name, surname,
phone number, email, date of birth, birth number, ID number, residence, bank account number, and
possibly other data that you provide to the controller.

Transfer of Personal Data to Third Parties

Your personal data may be transferred to third parties only to the necessary extent if required to fulfill the controller's legal obligations or in connection with the facilitation
of voluntary residence.

Method and Duration of Personal Data Processing

Your personal data is processed only to the extent necessary to achieve the purpose for which it was
collected. The processing of personal data is carried out by the controller. To protect personal data, the controller has adopted necessary technical measures to prevent unauthorized or
accidental access to personal data, their alteration, destruction, or loss, unauthorized
transfers, their unauthorized processing, as well as other misuse of personal data.

The controller processes and retains personal data for the necessary time to ensure all rights and obligations arising from the relevant contractual relationship and further for the period during which the controller is obliged to retain personal data according to generally binding legal regulations. Personal data is then handled in accordance with applicable legal regulations, particularly according to Act No. 499/2004 Coll., on archiving and file service, and on amendments to certain laws.

Your Rights

The right of access to data – the controller will provide you upon your request confirmation of whether
or not your personal data is being processed. If the controller is processing your personal data, it will provide your personal data along with information on how this personal data
is being processed.

The right to rectify personal data – if you find that the data that the controller has about you is
inaccurate, you can request its correction at any time.

The right to erasure – at your request, the controller will erase personal data concerning you if it no longer
needs your data or is not obliged to process it for the purpose of fulfilling its legal
obligations, if you have withdrawn consent on which the processing of personal data was based,
if you have raised objections against its processing, if the personal data has been processed
illegally or if erasure is required by law. You can send a request for the erasure of your personal data
to the email address admin@forest.ink.

The right to restriction of processing – in addition to erasure, you can request the restriction of processing
of personal data. In such case, the data will remain stored by the controller, but it will not be
accessed or otherwise handled unless necessary for fulfilling its legal
obligations. You have the right to object at any time to processing based on the legitimate interests of the controller, third parties
or necessary to fulfill a task carried out in the public interest or in the exercise of public
authority.

The right to data portability – you have the right to obtain your personal data that has been
provided to the controller in a structured, commonly used, and machine-readable format.
You also have the right not to be subject to any decision based solely on
automated processing.

The right to lodge a complaint with the Office for Personal Data Protection – if you believe that the controller
is violating your rights, you can lodge a complaint against it with the Office for Personal Data Protection,
located at Pplk. Sochora 27, 170 00, Prague 7, web: www.uoou.cz.

The right to withdraw consent – if the processing of personal data is based on your
consent, you have the right to withdraw consent to the processing of personal data that is
processed by the controller based on this consent at any time.

This information may be updated at any time due to a change in the controller's procedure for
processing personal data or due to changes in legal regulations.