Privacy Policy

gilconsult.com — Last updated: August 2026

This Privacy Policy sets out the rules for collecting, processing and protecting the

personal data of users of gilconsult.com, operated by the business consultancy

practice GIL Consult. By using the site you accept this Policy (this does not apply

to cookies — analytics and marketing cookies require your separate consent, see

section 9).

The controller of users' personal data is Hil Studio Oksana Hil — a sole

proprietorship (JDG) trading under the brands GIL Consult and Hil Studio.

ul. Nowoursynowska 139N lok. 10, 02-776 Warsaw, Poland.

NIP: 9512610634. REGON: 540313146.

Email: hi@hilstudio.eu. Phone: +48 790 716 047.

1. Purpose and scope of processing

Personal data is collected and processed in order to:

• handle enquiries submitted through the booking form (quiz);
• correspond with users (email, Telegram);
• provide consulting services (business diagnostics, process systematisation, marketing, sales, AI solutions);
• agree on participation, packages and payment;
• carry out marketing activities with the user's prior consent;
• run analytics and statistics to improve the site.

Booking form (quiz). To book a diagnostic session, users answer a few questions about their business: the current situation, the main difficulty, the desired outcome and an approximate monthly revenue band. The form does not ask for a name, phone number, email address or company name. Alongside the answers we store the referral tags (UTM) from the page address and the time of submission.

Data also reaches us when you write to us directly, and may include: your name or Telegram username, email address, the content of your message, and any other information you provide voluntarily.

2. Requirement to provide data

Providing personal data is voluntary. However, in certain cases providing specific

data is necessary to meet the user's expectations regarding the controller's services.

3. Legal basis for processing

Data is processed on the basis of:

• Art. 6(1)(a) GDPR — the user's consent (analytics and marketing cookies);
• Art. 6(1)(b) GDPR — performance of a contract or steps taken at the user's request before entering into one;
• Art. 6(1)(f) GDPR — the controller's legitimate interest (site security, remembering your chosen theme).

4. Recipients of personal data

Personal data may be disclosed to:

• employees and contractors involved in providing the services;
• IT suppliers and hosting providers;
• accounting and legal firms;
• public authorities in accordance with applicable law.

Main recipients:

Data processing agreements. Agreements under Art. 28 GDPR are in place with LH.pl (hosting), Google (email, analytics) and chill-crm (CRM for submissions and the booking calendar — confirm an agreement is in place)

in your client panel and that email runs on **Google Workspace with a signed Data

Processing Amendment**, not a free consumer Gmail account.

5. Transfers to third countries

The website is hosted on servers in Poland, i.e. within the EU — no third-country

transfer arises there.

The controller uses Google and Meta (Facebook/Instagram) services, which may process

data outside the EU. Transfers are made only to entities ensuring GDPR compliance,

in particular on the basis of Standard Contractual Clauses (SCCs) and certification

under the EU–U.S. Data Privacy Framework.

Telegram processes data outside the EEA under Art. 49(1)(b) GDPR — the transfer is

necessary to carry out correspondence you initiated yourself.

6. Data retention

Personal data is kept for as long as necessary to achieve the purposes of processing,

or until the user withdraws consent, or for the period required by applicable law.

7. Users' rights

Every user has the right to:

• access their personal data;
• rectify inaccurate or incomplete data;
• erasure ("right to be forgotten");
• restriction of processing;
• data portability;
• object to processing;
• withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise your rights, write to: hi@hilstudio.eu — we respond within 30 days.

8. Automated decision-making

The controller does not carry out profiling or automated decision-making that would

produce legal effects for the user or similarly significantly affect them.

9. Cookies

gilconsult.com uses cookies and similar technologies for technical, analytics and

marketing purposes.

Analytics and marketing tools do not load until you give consent via the banner

on the site. You can change or withdraw your choice at any time — the "Cookie

settings" link in the site footer.

The following types of cookies are used:

Partner site previews. In the "About me" section you can preview partner company

websites (Hil Studio, Opsoft) in an embedded window. Doing so loads a third-party

site, which may set its own cookies under its own policy. The window opens only when

you click it, runs in an isolated mode, and does not pass on information about the

page you came from.

10. Changes to this Policy

The controller reserves the right to amend this Policy. New versions are published on

gilconsult.com with the date of update. Continued use of the site constitutes

acceptance of the changes.

11. Right to lodge a complaint

Users have the right to lodge a complaint with the data protection supervisory

authority. In Poland this is the President of the Personal Data Protection Office

(UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

GIL Consult — business consulting. Warsaw, Poland. NIP: 9512610634.

Email: hi@hilstudio.eu. Phone: +48 790 716 047. Website: gilconsult.com.

© 2026 GIL Consult. All rights reserved.