Privacy policy

Protecting your personal data is a matter of course for us. This page explains what personal data we process when you use this website, why, for how long and what rights you have. We comply with Regulation (EU) 2016/679 (GDPR), Czech Act No. 110/2019 Coll. on personal data processing and Czech Act No. 127/2005 Coll. on electronic communications.

1. Who processes your data

The website is operated by FLS Group. The controller of your personal data is the group company that your inquiry, application or question relates to:

• FLS One s.r.o., company ID 26206757, registered office Sokolovská 106/42, 186 00 Prague 8 – events and hospitality (FLS One),
• FLS One Agency s.r.o., company ID 21920389, registered office Francouzská 299/8, Prague 10 – staffing services and recruitment (FLS One Agency).

If your inquiry or question falls within the scope of the other company, we will pass it on to that company. In this policy, both companies are referred to together as “FLS”, “we” or “us”.

Contact for data protection matters: e-mail kobylka@fls.cz, phone +420 602 333 031, postal address Obchodní 2722/10, 251 01 Říčany, Czech Republic. No Data officer has been appointed.

2. What data we process and why

Inquiries submitted through forms

When you send us an inquiry for an event, workers or hostesses, we process your name, e-mail, phone number, company name and the details of your inquiry (type and venue of the event, date, expected start and end time, number of guests or workers, requested services, selected hostesses and notes).

• Purpose: handling your inquiry, preparing a quote and further communication with you.
• Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR); for company representatives, our legitimate interest in communicating with business partners (Art. 6(1)(f) GDPR).
• Retention: for as long as needed to handle the inquiry and then for no longer than 2 years in case of follow-up cooperation. If we conclude a contract, for its duration and the periods required by accounting and tax regulations (up to 10 years).

Job applications

Through the form on the Careers page we process your name, e-mail, phone number, area of interest, your message, your CV and the information in it and, where applicable, the position you are applying for.

• Purpose: the recruitment process and job offers.
• Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Retention: until the end of the recruitment process, for no longer than 6 months. If you tick the consent box in the form, we keep your CV for future job offers for 2 years (Art. 6(1)(a) GDPR) – you can withdraw your consent at any time by e-mail.

Please do not include your personal identification number or information about your health, religion or other sensitive data in your CV – we do not need it for the recruitment process.

E-mail and phone communication

If you contact us by e-mail or phone, we process the information you give us in order to handle your request (legitimate interest or steps prior to a contract). We keep the communication for as long as necessary to handle it and for no longer than 2 years.

Photos of hostesses

On this website we publish portraits of the hostesses we work with. We publish the photos only with their consent (Art. 6(1)(a) GDPR) and without names – only with a reference code. Consent can be withdrawn at any time and we will then remove the photo from the website.

Visitor analytics (Leady)

Only if you consent in the cookie banner, we use the Leady tool. It processes your IP address, information about your browser and the pages you visit and uses the IP address to identify the company or organisation the visit comes from.

• Purpose: evaluating website traffic and companies’ interest in our services, approaching companies with business offers.
• Legal basis: your consent (Section 89(3) of the Czech Electronic Communications Act, Art. 6(1)(a) GDPR). Without consent, the analytics does not run.
• Retention: 24 months.

Google Maps

The Contact page contains a map from Google Maps. It loads only after you click “Load map”, or automatically if you have allowed external content in the cookie banner. When the map loads, Google receives your IP address and may store its own cookies.

Website operation and security

With every visit, the server automatically records technical data (IP address, time, page visited, browser type). We use it to keep the website secure and running and to protect it against attacks (legitimate interest, Art. 6(1)(f) GDPR). The records are kept for 30 days.

3. Who we share data with

We do not sell your data. It can be accessed by authorised FLS employees and contractors and by processors who provide certain services for us and are bound by contract and confidentiality:

• website hosting provider,
• e-mail service provider,
• Leady – visitor analytics (only with consent),
• Google Ireland Limited – map (only after a click or with consent).

We may also disclose data to public authorities where required by law. We do not transfer data outside the European Union, with the exception of Google services, which may process data in the USA; Google is certified under the EU-US Data Privacy Framework.

4. Cookies

Cookies are small files that a website stores in your browser. We use essential cookies without consent because the website cannot work without them (for example, they remember your cookie choice). We use other cookies and services only if you agree to them in the cookie banner. Consent is voluntary and you can change or withdraw it at any time – using the button below or the “Cookie settings” link in the website footer. You can also delete or block cookies in your browser settings.

Change cookie settings

Overview of the categories, services and cookies the website currently uses:

5. Your rights

In connection with the processing of your personal data, you have the right:

• to access your data and obtain a copy,
• to have inaccurate or incomplete data corrected,
• to have your data erased if it is no longer needed or the processing is not lawful,
• to restrict processing,
• to data portability for data processed on the basis of consent or a contract,
• to object to processing based on legitimate interest,
• to withdraw your consent at any time – withdrawal does not affect processing carried out before it.

You can exercise your rights by e-mail at kobylka@fls.cz. We will reply within one month at the latest. We do not carry out automated decision-making or profiling with legal effects. If you believe that we process your data in breach of the law, you can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.

6. Security

The website uses encrypted communication (HTTPS), only authorised persons have access to the data and we back up data regularly.

7. Changes to this policy

We may update this policy, for example when the services on the website change. The current version is always available on this page. This policy is effective from 29. 10. 2026.