Privacy Policy

This Privacy Policy explains what personal data we collect when you visit geekdivers.com, contact us, try Geek Divers or become a customer, why we collect it, and what rights you have. Personal data means any information relating to an identified or identifiable person, such as your name, email address or IP address.

1. Who is responsible

Geek Techware UG (haftungsbeschränkt)
Berner Str. 6, 27809 Lemwerder, Germany
Managing directors: Francesca Rossin, Joerg Wiesmann
Email: info@geekdivers.com

("Geek Divers", "we", "us"). For any question about your data, write to the address above.

2. What this policy covers

This policy covers the data we process for our own purposes: our website, enquiries, demo and trial accounts, and our relationship with dive centres as customers.

The data a dive centre enters into Geek Divers about its divers, guests, staff and partners belongs to that dive centre. We process it only on the dive centre's behalf, as its processor, under our Data Processing Agreement. If you are a diver or guest of a dive centre, the dive centre is responsible for that data and for answering your requests about it.

3. Visiting our website

Server log files

When you open geekdivers.com, the server that delivers the pages automatically records technical information your browser sends: IP address, date and time, the page requested, the referring page, browser and operating system. We need this to deliver the website and to keep it secure, for example to detect attacks. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). The logs are deleted after a short period unless they are needed to investigate a specific security incident.

Website statistics (Plausible Analytics)

We count visits to our website with Plausible Analytics, provided by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia, on servers in the EU. Plausible sets no cookies and stores no personal data. It does not follow you across websites or devices. Your IP address is only used, together with your browser information, to recognise unique visitors within one day and is not stored. We see aggregated figures only, such as page views, referring websites and countries. The legal basis is our legitimate interest in understanding how our website is used (Art. 6(1)(f) GDPR).

Fonts and icons

The fonts and icons on our website are served from our own server. Your browser does not contact any font or icon service of a third party.

Cookies

Our website sets no cookies and uses no tracking or advertising tools. The intro video is hosted on our own server. Links to WhatsApp and YouTube only take you to those services when you click them.

4. Contacting us, demo access and trial accounts

Forms on our website

When you use the contact, demo or free trial forms, we receive the data you enter: name, email address and, where you provide them, your dive centre's name or website, your WhatsApp number, your message, and for a trial account the currency, time zone and country. For spam protection we also record the IP address the request came from. The data is stored on our server in Germany, and we receive a notification email.

When you request demo access, we create a personal login for you in our shared demo dive centre and email you the login details with a temporary password. When you request a trial, we review the request and set up an account for your dive centre.

The legal basis is the handling of your request and steps prior to entering into a contract (Art. 6(1)(b) GDPR), and our legitimate interest in protecting the forms against abuse (Art. 6(1)(f) GDPR). We keep enquiries for as long as needed to deal with them and any business relationship that follows. You can ask us at any time to delete your demo login and your enquiry.

Please do not enter personal data of real people into the demo dive centre. Other demo users can see it.

Email, phone and WhatsApp

If you write to us by email, call us or message us on WhatsApp, we process your contact details and the content of the conversation to answer you (Art. 6(1)(b) or (f) GDPR). Our mailbox is provided by Google (Google Workspace, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). If you use WhatsApp, WhatsApp Ireland Limited also processes your data under its own terms.

5. Signing in to Geek Divers

Everyone who signs in to Geek Divers, including demo and trial users, does so through Firebase Authentication, a Google service. It processes your email address, a hash of your password, your IP address and browser information to sign you in securely. Firebase Authentication is operated from data centres in the USA. Google is certified under the EU-U.S. Data Privacy Framework and the transfer is additionally covered by Standard Contractual Clauses. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR).

The application stores sign-in information in your browser's local storage so that you stay signed in. This is strictly necessary to provide the service you asked for. Address fields in the application can suggest addresses through the Google Maps Platform; the text you type and your IP address are then sent to Google.

6. Customers of Geek Divers

For dive centres that use Geek Divers we process the company details, the names and contact details of the people we deal with, the subscription and invoices, and payment records, to provide the service and bill for it (Art. 6(1)(b) GDPR) and to meet our tax and accounting obligations (Art. 6(1)(c) GDPR).

Payments are handled by the payment provider you choose: Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin 2, Ireland) for card payments, or PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). They receive the data needed to process the payment, such as your company name, email address and the amount due. We do not see or store full card numbers.

We keep invoices and accounting records for the periods required by German tax and commercial law (§ 147 AO, § 257 HGB): currently 8 years for accounting vouchers such as invoices, 10 years for books and annual financial statements, and 6 years for business correspondence.

7. Who receives your data

We do not sell your data and do not pass it on for advertising. Besides the providers named above, our servers and database are hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, in Germany, and uploaded files are stored in Google Cloud Storage in the EU. We disclose data to authorities only where the law requires it.

Where a provider processes data outside the European Economic Area, we rely on an adequacy decision such as the EU-U.S. Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

8. Your rights

You have the right to access the personal data we hold about you (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or its processing restricted (Art. 18), and to receive it in a portable format (Art. 20). Where we process data on the basis of our legitimate interests, you may object at any time for reasons arising from your particular situation (Art. 21). Where you gave consent, you may withdraw it at any time with effect for the future.

To exercise these rights, email info@geekdivers.com. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

9. Security and data breaches

All connections to our website and application are encrypted with TLS. Each dive centre's data is kept in its own database, and administrative access to our servers is limited to one person. In case of a data breach, we will assess the extent of the damage and promptly inform you if any of your data has been compromised, and we will notify the competent authority where the law requires it.

10. Changes to this policy

We update this policy when our services or the law change. The current version is always available on this page.

Last amended: October 2026