Last updated: 24 September 2026
This Privacy Policy explains how Galevi s.r.o. ("Orbit UAV", "we", "us"), registered at Plzeňská 155/113, Košíře, 150 00 Praha, Czech Republic (Company No. / VAT: CZ28883586), processes personal data collected through orbituav.com (the "Site") as data controller under the EU General Data Protection Regulation (GDPR).
| Source | Data | Purpose |
|---|---|---|
| Contact / quote form | Name, work email, organisation, message text | Respond to your enquiry |
| Contact form (automatic) | IP address, user-agent, submission timestamp | Spam & abuse prevention, rate limiting |
| Contact form (if present) | UTM parameters and Google click ID (gclid) from the page you arrived on | Understand which campaign or page an enquiry came from |
| Cloudflare Turnstile | A challenge token confirming you are not an automated script | Block spam submissions, no personal profile is built from it |
| Ahrefs Web Analytics | Page visited, referrer, approximate country, browser/device type, session length | Aggregate traffic reporting — no individual profiles |
| Google Tag Manager (once configured) | Standard analytics/advertising identifiers via Google Analytics 4 and, for ad campaigns, Google Ads conversion tracking | Measure which pages and campaigns lead to an enquiry |
We do not use the contact form to build marketing profiles, and we do not sell personal data to third parties.
Legitimate interest — responding to enquiries, preventing abuse of the contact form, and understanding aggregate site traffic and campaign performance. Consent — where a jurisdiction requires it for non-essential analytics or advertising cookies; where required, a cookie banner will be shown before those technologies load. Legal obligation — where we must retain records for tax, accounting, or export-control compliance purposes.
Campaign attribution (UTM parameters, gclid) is currently held in your browser's
sessionStorage for the duration of your visit only — it is cleared when
you close the tab and is not a persistent tracking cookie. Cloudflare Turnstile may set
a short-lived verification token. Once Google Tag Manager is configured with live
analytics/advertising tags, those tags will set their own standard cookies (e.g. Google
Analytics, Google Ads); this Policy will be updated and, where legally required, a
cookie-consent banner will be added before that happens.
Personal data may be processed by the following categories of processor, strictly to provide the Site and respond to enquiries:
We do not share personal data with any party for their own independent marketing purposes.
Some of the processors above (notably Cloudflare and Google) may process data outside the European Economic Area. Where this happens, transfers are made under an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses, as provided by those processors' own data-processing terms.
Contact-form enquiries and any resulting correspondence are kept for as long as needed to handle the enquiry and any resulting business relationship, and thereafter as required by applicable tax, accounting, or export-control record-keeping rules. Rate-limit records used for spam prevention expire automatically within hours. Aggregate analytics data is retained per the relevant provider's standard retention period.
Under the GDPR you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure; restrict or object to processing; request data portability; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.cz) or with the data-protection authority in your own EU member state.
The Site is a business-to-business resource and is not directed at, or knowingly used to collect data from, children.
We may update this Policy as our data practices evolve (for example, once Google Analytics/Ads tracking goes live behind Google Tag Manager). The "Last updated" date above reflects the current version.
Data-protection queries or rights requests: {{ contactEmail }}, or by post to Galevi s.r.o., Plzeňská 155/113, Košíře, 150 00 Praha, Czech Republic.