GORILLA BUSINESS / LEGAL
Privacy policy
How Gorilla Business processes enquiries, protects personal data and handles optional analytics and advertising, including your rights and choices.
Last updated: 28 October 2026Who is responsible
The data controller and website operator is Kirill Tkachev, trading as Gorilla Business, IČO 14379422. Address: Čenětická 2413/1a, Chodov, 149 00 Praha, Czech Republic. Contact: ceo@gorilla-business.net; +420 603 960 199.
Enquiries and project work
We use the name, company, phone, email, selected service and project details you choose to provide to answer your enquiry, prepare a proposal and deliver agreed services. The homepage form prepares an email draft locally: you review it and send it through your own email account. Preparing a draft does not send us the enquiry. Other enquiry forms may submit to our first-party /api/leads endpoint, which delivers the message through our email provider and, if configured, Telegram.
The basis for responding to a requested proposal is taking steps before a contract (GDPR Article 6(1)(b)); delivering a contract uses the same basis. Managing business correspondence and defending legal claims relies on legitimate interests (Article 6(1)(f)). Legal and accounting duties rely on Article 6(1)(c). Reading the privacy notice or submitting a project enquiry is not consent to advertising or a newsletter. Please do not include sensitive personal data.
Hosting and security
Cloudflare provides hosting, delivery and security. Requests necessarily disclose technical information such as IP address, request time, browser information and requested resources to the infrastructure serving them. Protecting and operating the website relies on our legitimate interest in a secure, functioning service. Rejecting optional tracking does not prevent these necessary requests or a message you deliberately send.
Optional analytics and advertising
Analytics and advertising are separate, optional purposes based on consent (Article 6(1)(a)). Until you allow a category, its scripts and our conversion API calls remain blocked. Analytics covers page visits and a limited set of interaction events. Advertising, when enabled, uses Meta Pixel and optionally Meta Conversions API to measure campaigns. The provider inventory and storage details are in our Cookie policy and settings.
We do not attach form contents, names, phone numbers or email addresses to tracking events. Server conversion events can include IP address, browser user agent, a clean page path, event name, time and a random event ID for deduplication. Advertising providers may combine received information with their own account or device data under their own notices. Google Signals and Google advertising personalisation are disabled in our configuration.
Who receives information
Recipients are the operator, authorised people working on your request, Cloudflare, our email provider (currently GoDaddy/Titan depending on mailbox delivery), and Telegram if first-party form notifications are configured. Contacting WhatsApp or Telegram directly also involves that service. Google or Meta receive optional tracking data only when the corresponding provider is enabled and you consent to that purpose. We do not sell enquiry data.
Some providers may process data outside the EEA. Where a transfer requires safeguards, the applicable GDPR mechanism must cover it, such as an adequacy decision for an eligible recipient or standard contractual clauses and any necessary supplementary measures. Contact us for details of safeguards relevant to your data.
Retention
Our working retention period for an unconverted enquiry and related correspondence is up to 24 months from the last meaningful contact, unless an earlier deletion is appropriate or legal claims require retention. Contract and accounting documents follow the applicable statutory periods. Email and messenger services may retain copies under their own retention and backup rules.
Your cookie decision expires after 180 days, whether you accept or refuse. The application also treats an expired local copy as invalid. Analytics and advertising storage periods are described in the Cookie policy; provider-side retention depends on the actual account configuration.
Your control and rights
Use Cookie settings on any page to withdraw optional consent or change categories. Disabling a category saves your new choice, removes accessible first-party tracker identifiers and reloads the page. Withdrawal stops future collection through our integration; it cannot undo a request already sent or automatically delete a provider’s historical records. Withdrawal does not affect the lawfulness of earlier processing.
Subject to the GDPR conditions, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Email ceo@gorilla-business.net. We normally respond within one month and may request proportionate identity verification. You may complain to the Czech Office for Personal Data Protection (ÚOOÚ), or your local supervisory authority.
Other information
We do not use enquiry data for automated decisions with legal or similarly significant effects. This website presents business services and is not directed at children. We update this notice when our practices change; new optional providers or materially changed purposes require a new choice.
Configured optional providers
- Google Analytics 4Analytics · consent required