Privacy Policy

1. Data Controller

G&G Resources s.r.o., ID: 26847957, VAT: CZ26847957, registered office at Teslova 1129/2B, 702 00 Ostrava - Přívoz, Czech Republic, registered in the Commercial Register maintained by the Regional Court in Ostrava, Section C, File 50337 (hereinafter “Controller”).

Contact: dominik.gucky@gmail.com, tel: +420 111 111 111

2. What Data We Process

We only process data that you provide to us through the contact form:

• First and last name
• Email address
• Phone number (optional)
• Company name (optional)
• Business ID (IČO) and VAT ID (for businesses)
• Billing and delivery address (for binding orders)
• Attachments added to the inquiry (uploaded files)
• Content of your message / inquiry
• IP address and technical data (cookies, analytics)
• Marketing attribution data: traffic source (UTM parameters), referring page (referrer) and landing page - processed on the basis of legitimate interest in evaluating which channels generate inquiries
• Data from AI agent / API inquiries (email, company, requested products and quantities)

3. Purpose of Processing

• Responding to inquiries: processing based on your consent (Art. 6(1)(a) GDPR) and legitimate interest (Art. 6(1)(f) GDPR)
• Preparing a commercial offer: processing for the purpose of contract performance or pre-contractual measures (Art. 6(1)(b) GDPR)
• Website analytics: PostHog (data stored in the EU) for measuring and improving the website, activated based on your consent
• Marketing attribution: evaluating the source of visits (UTM, referrer, landing page) on the basis of legitimate interest (Art. 6(1)(f) GDPR)
• Advertising measurement: Google Analytics, Google Ads and Seznam Sklik for measuring traffic and the effectiveness of advertising campaigns, activated only based on your consent (Art. 6(1)(a) GDPR)

4. Retention Period

Personal data from the contact form is retained for 3 years from the last contact, or until you withdraw your consent. Analytics data is anonymized after 14 months.

5. Data Recipients

Your data may be shared with:

• Supabase (database, EU region - Frankfurt): storage of inquiry form data. Data is processed and stored in the European Union (eu-central-1), with no transfer to a third country.
• Resend Inc. (USA): sending confirmation and internal inquiry notification emails. The transfer to the USA is secured by Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR.
• PostHog (EU): website analytics, data processed and stored in the European Union, only with your consent
• Google Ireland Ltd. (EU / USA): Google Analytics, Google Ads and Google Tag Manager for traffic and advertising measurement, only with your consent. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF).
• Seznam.cz, a.s. (Czech Republic, EU): the Sklik advertising system for conversion measurement and ad targeting, only with your consent. Data is processed in the European Union.
• Vercel Inc. (USA): website hosting. Vercel is certified under the EU-U.S. Data Privacy Framework (DPF).

Our own traffic statistics (anonymous event logging on the website) run on our own infrastructure and are not shared with any third party for other purposes. Before you grant or decline cookie consent we record only a fully anonymous event (event name, page, language) without any session identifier. After you decline cookies these statistics are not collected.

Form data (Supabase) and website analytics (PostHog) are processed within the European Union. For processors based in the USA, the transfer mechanism is stated for each one: Resend - Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR; Vercel and Google - EU-U.S. Data Privacy Framework (DPF).

6. Your Rights

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase data (“right to be forgotten”)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent for processing
• Lodge a complaint with the Office for Personal Data Protection (www.uoou.cz)

You can exercise your rights by e-mail at the controller’s contact address listed in the website footer. We will respond to your request within one month of receiving it. Exercising your rights is free of charge.

7. Cookies

This website uses analytics and advertising tools for traffic measurement, service improvement and evaluating the effectiveness of advertising campaigns. All of these tools are activated only with your explicit consent (Google Consent Mode v2). Without consent we collect only fully anonymous, cookieless traffic statistics.

Tools and storage used:

• PostHog (EU): website analytics, sets cookies to recognise a session, data processed in the European Union, only after your consent
• Google Analytics 4 and Google Tag Manager: traffic and on-site behaviour measurement, activated only after your consent
• Google Ads: conversion measurement and remarketing for advertising campaigns, activated only after your consent
• Seznam Sklik: conversion measurement and ad targeting within the Seznam.cz network, activated only after your consent
• Own traffic statistics: anonymous event logging (page views, contact clicks) on our own infrastructure. Without your consent we do not store a session identifier; after you decline cookies these statistics are not collected
• cookie-consent: stores your cookie preference (localStorage), no expiration
• Technical performance measurement: anonymous speed metrics (page load) with no cookies and no session identifier

We track anonymized events such as page views, contact link clicks, and scroll depth to improve user experience.

You can change your cookie preferences at any time by clicking “Cookie Settings” in the website footer.

8. Security

Your personal data is protected by encrypted transmission (HTTPS), secure databases, and access restricted to authorized personnel only.