Privacy Notice

1. Introduction

This Privacy Notice explains how Avora Forge s.r.o. (“Avora Forge”, “we”, “our” or “us”) collects, uses, stores and protects personal data.

We are committed to protecting your privacy and processing personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation or “GDPR”) and applicable European Union and Member State data protection laws.

Controller

Avora Forge s.r.o.
Vrchlabská 1131/22
197 00 Prague
Czech Republic

Email: jiri.svorc@avoraforge.eu

Avora Forge acts as the controller of personal data processed in connection with its website, business development activities and the provision of consultancy and advisory services.

2. The personal data we collect

Depending on our relationship with you, we may collect and process:

Identity Data

  • name;
  • title;
  • employer or organisation;
  • professional role or position.

Contact Data

  • email address;
  • telephone number;
  • postal address;
  • LinkedIn profile information where voluntarily shared.

Business Information

  • information provided during discussions regarding projects, proposals, partnerships or consultancy engagements;
  • correspondence and communications;
  • information relating to Horizon Europe, Horizon 2020, FP10 or other research and innovation activities.

Technical Data

When you visit our website, we may collect technical information such as:

  • IP address;
  • browser type and version;
  • device information;
  • website usage information;
  • cookies and similar technologies.

Marketing and Communication Preferences

  • preferences relating to communications, updates and events.

Avora Forge does not intentionally collect special categories of personal data unless such information is voluntarily provided and necessary for a specific engagement.

3. How we collect personal data

We may collect personal data:

  • directly from you;
  • through communications by email, phone, LinkedIn or other channels;
  • when you submit an enquiry through our website;
  • during project, proposal or partnership discussions;
  • from publicly available sources, such as organisational websites, professional profiles and publicly accessible registers;
  • from project partners, coordinators or collaborating organisations where appropriate.

4. Purposes and legal bases

We process personal data only where we have a lawful basis under Article 6 GDPR.

Contractual necessity

We process personal data where necessary to:

  • discuss, negotiate and manage consultancy engagements;
  • deliver services requested by clients;
  • communicate regarding projects, proposals and contractual matters;
  • administer invoices and payments.

Legitimate interests

We may process personal data where necessary for our legitimate interests, including:

  • business development;
  • maintaining professional relationships;
  • proposal preparation and consortium building activities;
  • responding to enquiries;
  • improving our services and website;
  • ensuring network and information security;
  • protecting and defending legal rights.

Legal obligations

We may process personal data where necessary to comply with:

  • accounting obligations;
  • tax obligations;
  • corporate and regulatory requirements;
  • lawful requests from public authorities.

Consent

Where required by law, we will seek your consent before processing personal data, particularly in relation to optional marketing communications.

You may withdraw consent at any time.

5. Marketing communications

We may occasionally send information relating to:

  • research and innovation activities;
  • events;
  • publications;
  • consultancy services;
  • collaboration opportunities.

Where required by applicable law, such communications will only be sent with your consent.

You may unsubscribe or opt out at any time by contacting us or using the unsubscribe mechanism included in the communication.

We do not sell personal data to third parties.

6. Sharing personal data

We may share personal data with:

Professional service providers

Including:

  • IT providers;
  • website hosting providers;
  • cloud storage providers;
  • accountants;
  • auditors;
  • insurers;
  • professional advisers.

Project partners

Where necessary for proposal development, consortium activities or delivery of consultancy services.

Public authorities

Where required by law or necessary to exercise or defend legal rights.

All third parties are required to implement appropriate measures to protect personal data.

7. International transfers

Some service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, Avora Forge will ensure that appropriate safeguards are in place, including:

  • European Commission adequacy decisions;
  • Standard Contractual Clauses;
  • other transfer mechanisms recognised under GDPR.

8. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

Retention periods may depend on:

  • the nature of the relationship;
  • contractual requirements;
  • legal and regulatory obligations;
  • limitation periods applicable to legal claims.

When personal data is no longer required, it will be securely deleted or anonymised.

9. Your rights

Under GDPR you may have the right to:

  • access your personal data;
  • rectify inaccurate personal data;
  • erase personal data;
  • restrict processing;
  • object to processing;
  • data portability;
  • withdraw consent at any time;
  • not be subject to solely automated decision-making producing legal or similarly significant effects.

To exercise any of these rights, please contact:

jiri.svorc@avoraforge.eu

10. Complaints

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with your local data protection authority.

For Avora Forge, the competent supervisory authority is generally:

Úřad pro ochranu osobních údajů (Office for Personal Data Protection)
Pplk. Sochora 27
170 00 Prague 7
Czech Republic

Website: https://www.uoou.gov.cz

You may also lodge a complaint with the supervisory authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

11. Security

Avora Forge implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Access to personal data is limited to those who require it for legitimate business purposes.