Privacy policy

1Who is responsible for your data

The controller of your personal data is Geeknauts sp. z o.o. (in the register: GEEKNAUTS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ):

Registered office

ul. Ulubiona 34, 32-085 Modlnica, Poland

Registry court

District Court for Kraków-Śródmieście in Kraków, 12th Commercial Division of the National Court Register

KRS

0000362389

NIP

5130210402

REGON

121307472

Share capital

PLN 20,000.00

Office

ul. Złoty Róg 13/3, 30-095 Kraków, Poland (where the team works and meets clients)

For anything about your personal data, write to privacy@geeknauts.com or by post to our registered office. For everything else: contact@geeknauts.com, +48 662 576 765.

2What we collect, why, and on what legal basis

The mission brief

When you send the mission brief on our home page, we receive:

• your email address;
• your answers (where your project is, how much you code, the first mission and, if you give them, timing, the way of working and budget) with the summary shown to you;
• details of the sending: the page address, how long the brief took (it helps tell people from bots) and the campaign parameters of the link that brought you here (utm_source, utm_medium, utm_campaign, utm_term, utm_content), if there were any.

To protect the form from spam, our server also uses your IP address for a short time to limit how many briefs one connection can send.

The brief goes to Formspark (Trampoline Software SRL, Belgium), which stores it for us in the European Union and sends it to our team’s email. To keep the form free of spam, Formspark checks each brief automatically and records the IP address and browser of the sending.

We use this data:

• to reply to your brief and prepare a proposal: these are steps you ask for before a contract (art. 6(1)(b) GDPR);
• to follow up on our reply: our legitimate interest in answering enquiries and finding clients (art. 6(1)(f) GDPR);
• to keep the form and the site free of spam and abuse: our legitimate interest (art. 6(1)(f) GDPR).

Giving your email address is voluntary, but without it we cannot answer you by email. You can also book a call or write to us directly.

The follow-up is about your brief only: we do not add you to a newsletter or send you other marketing emails unless you agree to it separately.

Booking a call

The “Book a call” buttons open the booking calendar of Cal.com, Inc. Its code loads only when you click; until then nothing from cal.com runs on our pages. If you book, you give your name, email address and whatever else the booking form asks for directly in that calendar, and we receive the booking. We use it to arrange and hold the call you asked for (art. 6(1)(b) GDPR) and to follow up on it (art. 6(1)(f) GDPR).

When you write or call

If you email or call us, we use your contact details and what you tell us to answer you: art. 6(1)(b) GDPR when it is about a possible project, otherwise our legitimate interest in answering (art. 6(1)(f) GDPR).

Statistics and marketing

At the moment this site uses no analytics tools: no statistics, no advertising tags and no cookies of ours.

Server logs

Like any website, our servers record technical data about requests: the time, the address requested, the response, the referring page and the browser type, which can include your IP address. We use the logs only to run the site, keep it secure and find faults (art. 6(1)(f) GDPR).

3Who else receives your data

We do not sell personal data. It reaches only those who help us run the site and answer you:

• Hosting: the site lives on servers in the European Union.
• Trampoline Software SRL (Formspark, Belgium): receives and stores your brief for us in the European Union and sends it to our team’s email.
• Cal.com, Inc. (USA): the booking calendar, when you book a call.
• Google Ireland Limited (Google Workspace): our team’s email, where your brief and our correspondence with you arrive.
• Google Ireland Limited: Google Analytics, only with your consent.
• Our advisers (legal, tax, accounting) when needed, and public authorities when the law requires it.

Providers that process data for us may do so only on our instructions, under data processing agreements (art. 28 GDPR).

4Transfers outside the European Economic Area

Some of the providers above are based in the United States or may process data there: Cal.com, Inc. and Google LLC (Google Workspace, Google Analytics), and two providers Formspark uses for error monitoring and maps (Sentry and Mapbox). Such transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework (art. 45 GDPR) where the recipient is certified under it, and otherwise on the European Commission’s standard contractual clauses (art. 46(2)(c) GDPR). You can ask us for a copy at privacy@geeknauts.com.

5How long we keep it

6Your rights

You have the right to:

• access your data and get a copy of it (art. 15 GDPR);
• have it corrected (art. 16) or erased (art. 17);
• restrict its processing (art. 18);
• receive it in a portable format (art. 20);
• object at any time to processing based on our legitimate interest, including the follow-up on your brief (art. 21);
• withdraw your consent at any time, without affecting what was done before (art. 7(3)): use Cookie settings at the bottom of any page.

Write to privacy@geeknauts.com. We answer within one month. We do not make decisions about you based solely on automated processing.

7Complaints

If you think we process your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl (opens in a new tab), or with the supervisory authority of the country where you live or work.

8Cookies and your browser’s storage

Our pages work without cookies. We keep one small item in your browser’s session storage, which is cleared when you close the tab: whether mission control’s greeting has already been typed for you (so it is not repeated). The campaign parameters (utm_…) of the link you came from stay only in the page’s memory and go with your brief if you send it from that page; if you agree to statistics or marketing in the cookie banner, we also keep them in session storage until you close the tab, so they are not lost when you move between our pages.

We use no statistics or advertising cookies.

When you open the booking calendar, cal.com’s code runs in a window on this page and may use its own cookies or storage for the booking; Cal.com’s privacy policy describes them.

9How we protect your data

Our servers are in the European Union, every connection to this site is encrypted (HTTPS), and only the people who need your brief to answer you can access it.

10Changes to this policy

We update this policy when the site, the tools we use or the law change. The current version is always at geeknauts.com/privacy-policy, with the date of the last update at the top.

Last updated: 28 October 2026 · Geeknauts sp. z o.o.