Privacy Policy
Last updated:
This policy explains how GeekTech Ltd. ("GeekTech", "we") processes personal data when you use geektech.com, contact us or subscribe to our updates.
1. Who we are
The controller of your personal data is GeekTech Ltd., a company registered in Bulgaria, with its registered address at Perform Business Center, Pozitano 1, Sofia, Bulgaria.
Contact for privacy matters: contact@geektech.com.
2. Scope
This policy covers this website, our forms, meeting bookings, the newsletter and email communication with us.
3. Data we collect
- Contact form data: name, email, company, role, company size, message and your answers to qualifying questions.
- Audit and assessment requests: the above plus details such as your app URL, technology and processes.
- Booking data: details you enter when booking a call, processed by our booking provider.
- Newsletter: your email address and the date and method of your confirmation.
- Resource requests: first name, email and the resource you requested.
- Analytics data: pages visited, device and approximate location, only with your consent.
- Aggregate measurement data: page path, referrer, browser, device type, country and page-load timings, collected without cookies through our host, Vercel. Visits are counted with a short-lived hash that resets daily, so you can't be recognized across days or sites.
- Technical data: IP address, browser details, logs and security or bot-protection data.
4. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Responding to inquiries and preparing proposals | Contact, audit, assessment and booking data | Steps prior to entering a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business inquiries (Art. 6(1)(f)) |
| Sending resources you request | Name, email, requested resource | Your request and consent (Art. 6(1)(a)) |
| Newsletter | Email address, confirmation record | Consent, confirmed by double opt-in (Art. 6(1)(a)) |
| Website analytics | Pseudonymous usage data | Consent (Art. 6(1)(a)); only if you accept analytics cookies |
| Aggregate traffic and performance measurement (Vercel Web Analytics and Speed Insights) | Page path, referrer, browser, device type, country and page-load timings; no cookies, no cross-site identifiers | Legitimate interest in understanding overall traffic and keeping the site fast (Art. 6(1)(f)) |
| Website security and fraud prevention | IP address, logs, bot-protection signals | Legitimate interest in keeping the site and forms secure (Art. 6(1)(f)) |
| Legal obligations | Records we must keep, e.g. for accounting | Legal obligation (Art. 6(1)(c)) |
5. Recipients and processors
We share personal data only with service providers that process it on our behalf under a data processing agreement: website hosting and aggregate measurement (Vercel), Cloudflare (content delivery and bot protection), Google Analytics (with consent), our email provider, our CRM, and our booking tool.
The current list of processors is available on request from contact@geektech.com and in our Trust Center.
We do not sell personal data.
6. International transfers
Some providers are based in, or access data from, countries outside the European Economic Area, such as the United States. Where this happens, we rely on the provider's certification under the EU-US Data Privacy Framework or on Standard Contractual Clauses approved by the European Commission, together with additional safeguards where needed.
7. Retention
| Data | Retention |
|---|---|
| Inquiries and proposals | As long as needed to handle your inquiry and any resulting engagement, then deleted |
| Newsletter | Until you unsubscribe |
| Analytics | Per our Google Analytics 4 settings (14 months) |
| Server and security logs | A short period needed for security and troubleshooting |
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to processing, including processing based on legitimate interest;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting processing that took place before.
To exercise any of these rights, email contact@geektech.com. We'll respond within one month. You can unsubscribe from the newsletter with the link in every email.
9. Right to complain
You can lodge a complaint with the Commission for Personal Data Protection (Bulgaria), or with the supervisory authority in the EU country where you live or work. We'd appreciate the chance to address your concern first.
10. US visitors
We collect the categories of personal data described in section 3 for the purposes in section 4. We do not sell or share personal data for cross-context behavioral advertising. To request access to or deletion of your data, email contact@geektech.com. We won't treat you differently for making a request.
11. Automated decision-making
We do not make decisions with legal or similarly significant effects based solely on automated processing.
12. Children
This website is intended for businesses and is not directed at children.
13. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. For material changes, we'll ask for your consent again where required.