Personal data protection (GDPR)

Controller

The controller of personal data is Fortal Partners s.r.o., registered office at Zenklova 24/54, Libeň, 180 00 Praha 8, IČO: 248 94 036, DIČ: CZ24894036.

Contact: info@fortal.cz

This information applies to the fortal.cz website, the Fortal zóna client portal, and all services we provide: mentoring, workshops, events, gift vouchers, and the preparation of Czech CliftonStrengths reports.

What data we process

• identification and contact details (first and last name, email, phone, company name and position)
• billing details (IČO, DIČ, registered office, payment information)
• CliftonStrengths assessment results (talent ranking) and the reports and development materials derived from them
• ratings and comments from feedback (satisfaction surveys after mentoring, workshops, and events)
• communication content (emails, inquiries and orders from the website, form responses)
• data about participation in services and events (registrations, tickets, service usage status)
• technical data during website visits (cookies, see below)

Purposes and legal basis

Performance of a contract: providing ordered services, sending out access codes for the CliftonStrengths assessment, preparing and delivering reports and development materials, issuing invoices and matching payments, issuing and redeeming gift vouchers, event registrations and tickets, operating the Fortal zóna portal.

Legitimate interest: responding to inquiries and questions, maintaining internal client records (CRM), evaluating feedback and improving service quality, protecting the website and forms against misuse, reasonable business communication with existing clients.

Consent: sending commercial communications, analytics and marketing cookies, sharing talents with colleagues in the Fortal zóna team overview. You can withdraw your consent at any time.

Legal obligation: retention of accounting and tax documents.

Retention period

• contract data and data in client records: for the duration of the cooperation and no longer than 3 years after the last contact
• accounting and tax documents: for the period set by law (usually 10 years)
• data in Fortal zóna: for the duration of the company's access
• operational backups: no longer than 90 days, after which they are automatically deleted

Processors and recipients

Vetted services help us handle personal data, each only to the extent of its purpose:

• Airtable: internal records of clients and orders (CRM)
• Google (Drive, Sheets, Cloud): storage of reports, documents, and overviews, technical processing of reports
• Resend: sending emails (confirmations, reports, invitations, reminders)
• Fakturoid: issuing invoices; Fio banka: receiving and matching payments
• Vercel: operating the website and portal; Upstash: short-term technical operational data
• Sentry: monitoring technical errors on the website
• DeepL and Anthropic: machine translation and AI processing (see the next section)
• Cloudflare: protecting forms against bots (Turnstile)
• Google Analytics and Meta: analytics and marketing, only after consent to cookies

The CliftonStrengths assessment itself takes place on Gallup's pages under its terms; Gallup is a separate controller for this data. Some providers may process data outside the EU; in such cases the transfer is covered by standard contractual clauses or by an adequacy decision (e.g. the EU-U.S. DPF framework).

Use of AI tools

Artificial intelligence tools help us prepare materials. We translate English CliftonStrengths reports into Czech using DeepL with AI language proofreading (Anthropic). AI tools also help prepare personalized development materials from talent data and maintain internal records.

Data passed to these services is used solely for the given task. Under their terms, the providers do not use it to train their models. Outputs intended for clients are always reviewed by a person.

Fortal zóna (client portal)

Fortal zóna is a secure portal where, for the duration of the cooperation, a company has its team's talent data (CliftonStrengths results) available. For this employee data, Fortal acts as the processor and the company (employer) as the controller. The data is processed for the purpose of team development.

A specific person's talents are visible to other members of the company only after that person gives explicit consent (confirmed by email). Without consent, colleagues see only their name. Consent can be withdrawn at any time; write to us at info@fortal.cz or contact the zone administrator at your company.

Logging in to the portal is done via a one-time link sent by email. Access is granted only to invited users of the given company, and data is kept separate for each company. Access lasts for the duration of the cooperation; once it ends, the portal is locked. Reports (PDF) are stored on secure cloud storage (Google Drive) and made available only after logging in.

Data of corporate clients' employees

When a corporate client provides us with the data of its employees (e.g. a list of mentoring or workshop participants), the company acts as the controller and Fortal as the processor. Informing employees about the processing is the responsibility of the employer; the terms of processing are governed by a data processing addendum that is part of the contract with the corporate client. An employee can request the hiding of their data in team overviews at any time.

Cookies and analytics

Necessary cookies (portal login, form protection) always work. Analytics cookies (Google Analytics) and marketing cookies (Meta Pixel, Google Ads) are activated only after your consent in the cookie bar. You can change your choice at any time via the "Cookie settings" link in the website footer or in your browser settings.

Your rights

You have the right to access your personal data, to rectify it, erase it, restrict its processing, to data portability, and the right to object to processing based on legitimate interest. You can withdraw a granted consent at any time. Send your request to info@fortal.cz; we will respond within one month at the latest.

Supervisory authority

You have the right to lodge a complaint with the Office for Personal Data Protection (uoou.cz).