This policy explains how Geeky Digital EOOD (company ID 207936510, 2-4 Kozloduy Str., Haskovo, Bulgaria) processes personal data when you use https://www.geekydigital.net and our services. We are the data controller. Contact: billing@geekydigital.net.
1. What we collect
- Account data: name, email address, password (stored only as a hash), country, two-factor authentication settings.
- Billing data: company name and ID, VAT number and its VIES check result, address, phone number, invoices, payments, account credit.
- Payment data: payments are processed by Stripe, PayPal and NOWPayments. We never receive full card numbers; we keep the card brand, last four digits, expiry date and issuing country, or the PayPal account email, when you save a method for automatic renewals.
- Service data: server configuration, hostname, IP addresses, reverse DNS, requests you send (reboots, reinstalls, upgrades, cancellations), root credentials (stored encrypted).
- Support data: tickets, messages and attachments, quote requests.
- Technical data: IP address and browser at sign-in and when you place an order, sign-in history, session cookies (see the Cookie Policy).
2. Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Creating your account, delivering and supporting your servers, billing | Performance of the contract (Art. 6(1)(b) GDPR) |
| Issuing invoices, keeping accounting records, proving the customer's country for VAT (including the EU One-Stop-Shop) | Legal obligation (Art. 6(1)(c) GDPR) |
| Preventing fraud and abuse, securing accounts, handling abuse reports about your servers | Legitimate interest (Art. 6(1)(f) GDPR) |
| Service emails (invoices, reminders, server notifications, news about maintenance) | Performance of the contract / legitimate interest |
We do not use your data for advertising, do not sell it and do not make automated decisions with legal effect. Orders may be flagged for a manual check by our staff (for example when the card country and address differ).
3. Who receives it
- Payment providers: Stripe, PayPal, NOWPayments — to process your payments.
- Data center and network providers: only the data needed to deliver and operate your server and to handle abuse reports.
- The European Commission VIES service: your VAT number, to check it.
- Our email provider, hosting provider, accountants and legal advisers, bound by confidentiality.
- Public authorities, when the law requires it.
Some of these providers are outside the European Economic Area (for example in the United States). Such transfers rely on an adequacy decision (such as the EU–US Data Privacy Framework) or on the European Commission's standard contractual clauses.
4. How long we keep it
- Account data: while your account is open. When you delete your account, we anonymise it.
- Invoices, payments and the tax evidence linked to them (billing address, IP address and country at the time of the order): 10 years, as required by Bulgarian accounting and VAT law.
- Sign-in history: 12 months.
- Support tickets: while your account is open; they are deleted when you delete your account.
- IP addresses assigned to your servers and abuse reports about them: up to 3 years after the server ends, to handle abuse complaints.
5. Your rights
You have the right to access, correct and delete your data, to restrict or object to its processing and to receive it in a portable format. You can:
- download your data in the client portal: Profile → Your data → Download my data;
- delete your account in the client portal: Profile → Your data → Delete account (once there are no active servers, unpaid invoices or credit left);
- write to us at billing@geekydigital.net.
We reply within one month. You may also complain to the Bulgarian Commission for Personal Data Protection (www.cpdp.bg) or the supervisory authority in your country.
6. Security
Passwords are hashed, server and payment credentials are encrypted, staff accounts use two-factor authentication and the admin area is restricted. Only staff who need the data for their work can access it.
7. Changes
We will post changes to this policy on this page and tell you by email about material changes.