GDPR Disclosure

Effective Date: 20.10.2026

This disclosure supplements the Privacy Policy and applies to users located in the European Union, the European Economic Area and the United Kingdom. It explains how GeekProxy processes personal data under the General Data Protection Regulation (GDPR) and the UK GDPR, and which rights you have.

1. Data Controller

GeekProxy, Dubai, United Arab Emirates, is the controller of your personal data. Contact for all data protection matters: [email protected].

2. Personal Data We Process

Business contact information: name and email address.
IP address used for authentication and Service access.
Payment data, processed exclusively by PCI-DSS compliant payment providers. We do not store card numbers.
Infrastructure logs: connection timestamps, Service IP utilization, bandwidth metrics.
Identity documents, only when KYC verification is required for Enterprise clients or high-volume transactions.

3. Legal Bases

Performance of a contract (Art. 6(1)(b) GDPR): account registration, order processing, Service delivery and support.
Legal obligation (Art. 6(1)(c) GDPR): KYC/AML checks, accounting and tax records, responses to valid legal requests.
Legitimate interests (Art. 6(1)(f) GDPR): network security, abuse and fraud prevention, Service stability.
Consent (Art. 6(1)(a) GDPR): non-essential cookies and marketing emails. Consent can be withdrawn at any time.

4. Retention

Infrastructure logs are retained for a maximum of 3 months and are then deleted or irreversibly anonymized. Account and transaction records are kept for as long as the account is active and afterwards for the period required by applicable accounting and anti-money-laundering law.

5. Recipients and International Transfers

Personal data is disclosed only to certified payment processors and infrastructure providers, strictly to the extent necessary for Service delivery, and to government authorities upon a valid legal mandate. GeekProxy is established in the United Arab Emirates, outside the EEA. Where data is transferred from the EEA or the UK, we rely on the necessity of the transfer for the performance of your contract (Art. 49(1)(b) GDPR) and, with our processors, on standard contractual clauses approved by the European Commission.

6. Your Rights

Access to your personal data and a copy of it.
Rectification of inaccurate or incomplete data.
Erasure ("right to be forgotten"), subject to legal retention obligations.
Restriction of processing.
Data portability in a structured, machine-readable format.
Objection to processing based on legitimate interests.
Withdrawal of consent, without affecting the lawfulness of processing before withdrawal.
Lodging a complaint with the supervisory authority of your EU member state or with the UK Information Commissioner's Office.

7. How to Exercise Your Rights

Send a request to [email protected] from the email address linked to your account, with "GDPR request" in the subject line. We verify the request by that email address and respond within one month. For complex requests this period may be extended by a further two months, in which case we will inform you.

8. Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.

9. Updates

We may update this disclosure. Significant changes are announced by email or on our website.