Privacy Policy

This policy explains how GeekyGrowth Studio handles personal data when you visit https://www.geekygrowth.com/ (the "Website") or contact us. It is intended to comply with the GDPR (Regulation (EU) 2016/679) and Hungarian data protection law.

Read together with our Terms & Conditions.

Some campaign or landing pages on the Website include an application form and their own tracking. Where a page displays its own privacy notice, that notice applies to data submitted through it, and this policy continues to apply to everything else.

1. Data Controller

GeekyGrowth Studio Operated by Rák Miklós Márk, sole proprietor, 1158 Budapest, Apollo utca 58, Hungary Registration number: 59575153 (Register of Sole Proprietors of Hungary) Tax number: 90388512-1-42 (EU VAT: HU90388512) Email: [email protected]

We have not appointed a Data Protection Officer. For privacy-related questions or requests, you can contact us directly at the email address above.

2. What We Process and Why

We do not operate accounts or newsletters. We do not sell personal data or use it for advertising or profiling. Personal data is processed in four situations.

Visiting the Website. Our hosting infrastructure automatically processes your IP address, request time, pages requested, browser and operating system, referring URL, and status codes. This is used to deliver the Website, keep it secure and stable, and diagnose faults. Some scripts and stylesheets load from third-party content delivery networks, which receive your IP address as a technical necessity of delivering the file, and nothing else. Legal basis: Article 6(1)(f) GDPR — our legitimate interest in a secure, functional website.

Booking a call. We use Cal.com's appointment scheduling services, accessed through our booking page. When you click "Schedule a Call" you leave the Website, and the information you submit is transmitted to us: your name, email address, company or professional details, meeting date, time and timezone, answers to booking questions, and any notes. We use it to arrange and prepare for the meeting, follow up on your enquiry, and discuss our services. Providing this data is voluntary, but without it we cannot arrange a meeting. Legal basis: Article 6(1)(b) GDPR where necessary to take steps at your request before entering a contract, and/or Article 6(1)(f) GDPR — our legitimate interest in managing business enquiries.

Contacting us by email. We process your email address, name, any contact details you include, and the content of your message, in order to respond and where relevant discuss or provide our services. Standard email is not fully secure; please do not send confidential information unencrypted. Legal basis: Article 6(1)(b) or 6(1)(f) GDPR, as above.

Applying through a campaign page. We occasionally run campaigns offering a project at a reduced rate, with an application form on a dedicated page. Through that form we collect the following, all of which are required:

We do not ask for, and ask that you do not submit, any special category data (health, political opinions, religious beliefs, and similar), or confidential business information.

We use this data for three purposes:

• To assess your application and select an applicant. We read what you submit, check it against the campaign's conditions, and decide whether your business is a fit for the work we want to produce. Legal basis: Article 6(1)(b) GDPR, steps taken at your request prior to entering into a contract.
• To contact you about the outcome, whether or not we select you. Legal basis: Article 6(1)(b) GDPR, and Article 6(1)(f) GDPR — our legitimate interest in responding to applications we do not take forward.
• To follow up on your enquiry. If you are not selected but your business looks like a fit for our paid services, we may contact you once to say so. You can object at any time, and we will not contact you again. Legal basis: Article 6(1)(f) GDPR — our legitimate interest in business development.

If you become a client — whether through a campaign or otherwise — we also process data needed to manage the contract, deliver services, invoice you, and meet legal obligations (Article 6(1)(b) and 6(1)(c) GDPR). We may process data where necessary to establish, exercise, or defend legal claims (Article 6(1)(f) GDPR).

3. Recipients

We may also disclose data to our professional advisers, to competent authorities where required by law, or where necessary for legal claims.

Where required by applicable law, we enter into appropriate data processing agreements with our processors.

4. International Transfers

Some providers are established in or transfer data to the United States. Where data leaves the European Economic Area, we rely on the European Commission's Standard Contractual Clauses, certification under the EU-U.S. Data Privacy Framework where applicable, or another mechanism recognised under Chapter V GDPR.

Each provider's safeguards are described in their own documentation: Webflow (https://webflow.com/legal/eu-privacy-policy), Cal.com (https://cal.com/privacy), Google (https://policies.google.com/privacy/frameworks).

‍

5. Retention

Where a statutory retention obligation applies, we restrict processing to that purpose alone until the period expires. Third-party providers apply their own retention policies.

6. Cookies and Tracking

Most of the Website does not use advertising pixels, marketing trackers, analytics platforms, or other non-essential tracking technologies.

Where we run an advertising campaign, the relevant campaign page may load the LinkedIn Insight Tag to measure advertising performance. This is a non-essential tracking technology and loads only where you have given consent through our cookie banner. You may withdraw consent at any time through the banner settings. LinkedIn processes this data under its own privacy policy. On pages where no such technology is used, no banner is displayed.

Strictly necessary technical cookies or similar technologies may be used where required for the secure and reliable operation of the Website. These do not require consent under applicable law.

The booking page is operated by a third party and subject to its own cookie practices.

If we introduce further analytics, non-essential cookies, or other data-collection functionality, this policy will be updated and any required consent mechanism implemented beforehand.

7. Automated Decision-Making

Applications and enquiries are reviewed by a person. We do not carry out automated decision-making producing legal or similarly significant effects, and we do not engage in profiling, within the meaning of Article 22 GDPR.

8. Your Rights

Subject to the conditions in applicable law, you may request access to your data (Art. 15), rectification of inaccurate data (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and portability (Art. 20). Where processing is based on consent, you may withdraw it at any time without affecting prior lawfulness.

You may also object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 21), including the follow-up contact described in Section 2. We will then stop unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is needed for legal claims.

Contact [email protected] to exercise these rights. We respond within one month, extendable by up to two further months for complex or numerous requests, in which case we will tell you within the first month. We may need to verify your identity. Requests are free unless manifestly unfounded or excessive.

9. Complaints

You have the right to lodge a complaint with a data protection supervisory authority. You may complain to the authority in your country of residence or workplace, or in the country where the alleged infringement occurred. As we are established in Hungary, the Hungarian supervisory authority also has competence.

You also have the right to an effective judicial remedy before the competent courts.

10. Security

We apply appropriate technical and organisational measures, including encrypted transport (TLS), access controls and multi-factor authentication on our business accounts, and selection of providers maintaining recognised security standards. No method of electronic transmission or storage is completely secure.

11. Children

The Website and our services are directed at businesses and are not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes

We may update this policy to reflect changes in our services, technology, or legal requirements. The current version is always published on this page with the relevant "Last updated" date. Where a change materially affects how we process your data, we will take reasonable steps to bring it to your attention.

13. Contact

GeekyGrowth Studio
‍Rák Miklós Márk
[email protected]
1158 Budapest,
Apollo utca 58, Hungary
https://www.geekygrowth.com/