Privacy notice

Website: gealara.com
Last updated: 1 October 2026

This notice explains what personal data is processed when you visit gealara.com or send an enquiry, why, and what rights you have.

1. Who operates this website

Gealara operates this website. The operator's registered legal details are not yet published on this page. Until they are, you can reach the operator through the enquiry form on our plan page.

The operator of Gealara is the controller of the personal data described below.

2. What we collect and why

2.1 When you send the enquiry form

You give us:

• your name;
• your email address;
• your WhatsApp number, if you choose to give one;
• your country;
• the device you plan to use;
• anything you write in the notes field;
• the plan you selected (plan length and number of devices at once).

Giving a WhatsApp number is optional. If you give one, we may reply to you on WhatsApp. WhatsApp is a service operated by Meta, and messages sent there are also covered by WhatsApp's own terms and privacy policy.

We use these details to reply to your enquiry and answer your questions about a plan.

2.2 Information sent with the form about how you reached it

When you submit the form, your browser also sends:

• the address of the page you sent the form from;
• the first page you opened on this website in this browser tab, and the address of the website that sent you there (the "referrer"), each shortened to 300 characters;
• campaign tags in that address (utm_source, utm_medium, utm_campaign), if present;
• the last button or link on our website you clicked before the form, and where on the page it was;
• how long the page was open and how long you spent filling in the form;
• a marker showing that JavaScript ran;
• the price shown to you for the selected plan.

We use this to understand which of our pages and buttons lead to enquiries and to recognise automated form submissions ("bots"). Our server works out the price itself and does not rely on the price your browser sends.

2.3 Automated bot check

Our server automatically marks a submission as a suspected bot if the JavaScript marker is missing or the page was open for less than 3 seconds. A suspected-bot submission is still stored, but it is not treated or forwarded as an enquiry. A person can review it. The check has no legal effect on you. If you think your genuine enquiry was marked as a bot, please let us know through the enquiry form.

A submission that fills in a hidden field meant only for bots is discarded and not stored.

2.4 Server logs

Our web server records each request in a log: your IP address, the date and time, the page requested, the referrer and your browser's user-agent string. We use these logs to keep the website running and secure.

3. Legal basis (GDPR Article 6)

Where we rely on legitimate interests, you can object at any time (see section 8).

You do not have to give us your name and email address, but without an email address we cannot reply to you.

4. Cookies, browser storage and analytics

We do not use cookies.

We do not use third-party analytics, advertising or tracking tools, and this website loads no third-party tracking scripts.

Our own script keeps the information described in section 2.2 in your browser's session storage. It stays in your browser and is deleted when you close the tab. It reaches us only if you submit the form.

5. Who receives your data

We do not sell your personal data, and we do not share it with advertisers or data brokers.

• Hosting: the website, the server logs and the enquiry database run on a Microsoft Azure virtual machine in a data centre in the EU.
• Backup: each night, enquiries are copied to a server hosted by Hostinger in France (EU), and from there backed up, encrypted, to a second server (location below). Backup copies are kept for up to six months.
• WhatsApp: if you give a WhatsApp number and we reply to you there, the messages pass through WhatsApp, a service operated by Meta, which may process them in other countries under its own terms and privacy policy.

We may also disclose data where the law requires us to.

6. Where your data is stored

The website and the enquiry database are hosted in the European Union (Sweden). Backup copies are held in France (EU) and, encrypted, in the United Kingdom, which the European Commission recognises as providing adequate protection (adequacy decision renewed in December 2025).

7. How long we keep your data

• Server logs: rotated daily and deleted after 14 rotations, so a log entry is kept for about 15 days at most.
• Session storage in your browser: until you close the tab.
• Enquiries and suspected-bot submissions: no fixed deletion period has been set yet. You can ask for your enquiry to be deleted at any time (see section 8).
• Backup copies: kept for up to six months. An enquiry deleted at your request drops out of the backups as the older backup copies expire.

8. Your rights

Under the GDPR you have the right to:

• access your data;
• have it corrected;
• have it erased;
• restrict its processing;
• receive it in a portable format;
• object to processing based on our legitimate interests.

To exercise a right, send a message through the enquiry form on our plan page and say in the notes field that it is a privacy request. We reply within one month, or explain why we need longer, as the GDPR allows.

9. Complaints

You can complain to the Data Protection Commission (An Coimisiún um Chosaint Sonraí), Ireland: www.dataprotection.ie. You can also complain to the supervisory authority in the EU/EEA country where you live or work, or where you believe an infringement took place.

10. Changes to this notice

If our processing changes, we will update this notice and its date.