Privacy Policy

DRAFT, last updated 21 October 2026.

This policy explains how Krist Ventures OÜ, registry code 14382258, address Katleri 21-30, 13915 Tallinn, Harju County, Estonia ("Geocitely", "we"), handles personal data on geocitely.com. We are the data controller. Contact: hello@geocitely.com.

1. What we collect and why - **Newsletter.** If you subscribe, we process your email address and basic engagement data (for example opens and clicks) to send the newsletter. Legal basis: your consent (GDPR Art. 6(1)(a)). You can unsubscribe at any time with the link in every email. - **Emails you send us.** If you write to hello@geocitely.com, we use your message and contact details to reply. Legal basis: our legitimate interest in answering you (Art. 6(1)(f)). - **Sponsors.** If you buy a sponsorship, we process your business contact, billing and VAT details to deliver the service, invoice you and meet accounting duties. Legal bases: contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)). Card payments are handled by Stripe; we never see your full card number. - **Website visits.** The site is hosted on Vercel, which processes technical data such as IP address, browser and requested pages in server logs for security and delivery. We use Vercel Web Analytics to count visits and a few clicks (for example on sponsored links and booking buttons) in aggregate. It sets no cookies, does not build cross-site profiles, and reports only aggregated statistics; visitors are counted using a hash of the request that Vercel discards after 24 hours. We remove query parameters from tracked URLs and send no names, emails or other personal details with events. Legal basis: legitimate interest in running and improving the site (Art. 6(1)(f)).

We do not use advertising cookies or trackers.

2. Service providers - **beehiiv** (newsletter delivery and subscriber management) - **Vercel** (hosting and analytics) - **Stripe** (payments and invoices, for sponsors only) - **Zone Media OÜ** (our email hosting)

These providers process data only on our behalf. Some are based in the United States. Transfers are covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

3. We do not sell your data We never sell, rent or trade personal data, and we do not share it with advertisers. Sponsors do not receive subscriber lists.

4. How long we keep it - Newsletter data: until you unsubscribe, then deleted or anonymised within a reasonable time. - Emails: as long as needed to handle your request, normally no longer than 2 years. - Sponsor billing records: 7 years, as required by Estonian accounting law. - Server logs: according to Vercel's standard short retention.

5. Your rights Under the GDPR you can request access to your data, correction, deletion, restriction of processing and data portability. You can object to processing based on legitimate interest and withdraw consent at any time. Email hello@geocitely.com and we will reply within one month. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or the authority in your own country.

6. Changes We will post any changes on this page and update the date at the top.

7. Contact Krist Ventures OÜ, Katleri 21-30, 13915 Tallinn, Harju County, Estonia. Email: hello@geocitely.com