Privacy policy

1. Principles

We collect personal data where required to provide our services, where a legal basis applies or where you have given consent.

2. Visiting this website

Technical data such as your IP address, browser, operating system, referrer and page requests are processed in server logs to maintain secure operation. These logs are deleted after 14 days. The legal basis is Article 6(1)(f) GDPR.

3. Contact enquiries

When you contact us by email or using the form, we process your details to answer your enquiry. This includes your name, company and email address, and any optional contact details, message and selected use cases. The legal basis is Article 6(1)(b) or (f) GDPR.

4. Using the iDMP

Platform use involves registration and company data, usage and connection data, and billing data, based on Article 6(1)(b), (c) and (f) GDPR. Where we process personal data on behalf of customers, we act as a processor under Article 28 GDPR. A data processing agreement is available on request.

5. Recipients and international transfers

We use providers for hosting and infrastructure, payments, email communications, analytics and monitoring. Data is disclosed where necessary to perform a contract, meet a legal obligation or with consent. Providers are contractually bound to data protection requirements. Transfers outside the EU/EEA rely on an adequacy decision or appropriate safeguards, such as EU Standard Contractual Clauses.

6. Security and retention

Technical and organisational measures protect data against unauthorised access, loss and misuse. We retain personal data for the processing purpose or statutory retention obligations, then delete or anonymise it.

7. Your rights

Within the applicable legal limits, you have rights of access, rectification, erasure, restriction, portability and objection. You may withdraw consent with effect for the future. Contact hello@geqo.io to exercise these rights.

You may lodge a complaint with a supervisory authority. The competent authority in Bavaria is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

8. Cookies and local settings

The website itself does not set advertising cookies. Section 10 describes reCAPTCHA cookies when you choose to activate spam protection. Your language preference is stored in the functional session cookie NEXT_LOCALE. Your choice of light or dark mode is saved locally in your browser (localStorage, key geqo-theme). Your privacy choice is stored locally under geqo-consent with its version, decision time and expiry for 180 days. These settings provide your chosen language and appearance and respect your privacy choice (section 25(2)(2) TDDDG). The appearance preference remains until changed or browser data is cleared. Fonts and images are served by this website. LinkedIn is opened only when you follow the external link.

9. Website analytics with consent

With your prior consent, we use Plausible at analytics.geqo.io to measure website use and effectiveness. This includes page addresses with visited anchors and possible URL parameters, referral pages, language, page views, clicks, scroll depth, engagement time and form events. Connecting to the service involves processing your IP address and browser information. Contact-form contents are not sent to Plausible. To attribute enquiries to contact buttons, we keep the last button position, destination and click time in sessionStorage under geqo-contact-attribution. Attribution is used for up to 30 minutes; the entry remains at most for the browser session and is deleted when consent is withdrawn. The legal bases are section 25(1) TDDDG and Article 6(1)(a) GDPR. Analytics remains disabled without consent. You can withdraw consent at any time through Cookie settings in the footer, with effect for the future. This reloads the page to stop active analytics functionality. Withdrawal does not affect the lawfulness of earlier processing.

10. Spam protection with Google reCAPTCHA

We use Google reCAPTCHA v2 to protect the contact form from automated advertising submissions. The service loads only after you explicitly agree in the form. Google processes your IP address, browser and device information and interactions, and sets the _GRECAPTCHA cookie for risk analysis. Processing by Google in the United States is possible. The check loads through recaptcha.net. Our server sends only the verification token and our secret key for verification, no contact-form contents or additional IP address.

Loading the service and the associated processing rely on your consent under section 25(1) TDDDG and Article 6(1)(a) GDPR. We do not persist this choice. The withdrawal button reloads the page and reCAPTCHA stays disabled until you agree again. Withdrawal does not affect processing that has already occurred. Without consent, with technical problems or without JavaScript, you can contact hello@geqo.io. The form links to Google's Privacy Policy and Terms of Service for further information.

11. Changes

We update this policy when our services or legal requirements change. The current version is available on this page.