Privacy Policy

Personal data — any information relating to a directly or indirectly identified or identifiable natural person (the data subject).

Processing of personal data — any action or set of actions performed with personal data, with or without automated means, including collection, recording, systematisation, accumulation, storage, updating, modification, retrieval, use, transfer (distribution, provision, access), depersonalisation, blocking, deletion and destruction.

Operator — a legal or natural person who organises and carries out the processing of personal data and determines the purposes of processing, the scope of the data and the operations performed on it.

Site — the pages published at https://geekchain.io, including all its sections.

Site visitor — a natural person accessing the Site, whether or not they have sent an enquiry through the contact form.

Cookies — small amounts of data stored by the Site in the visitor's browser; the browser's local storage is used alongside them. Some of this data contains an identifier that distinguishes one visitor from another.

This Policy on the processing of personal data (the Policy) sets out the principles, procedure and conditions under which GeekChain LLC processes personal data, and is issued in accordance with Federal Law No. 152-FZ of 27 July 2006 "On Personal Data". It is published under Article 18.1(2) of that law: it is reachable from every page of the Site.

Operator details. GeekChain LLC, OGRN 1217800183809, INN 7814801179, registered at 32A Fermskoye shosse, apt. 320, Saint Petersburg, 197341, Russian Federation. Email for personal data enquiries: hello@geekchain.io.

The Operator processes personal data of the following categories of data subjects:

• Counterparties and their representatives — information needed to perform contractual obligations and to comply with the legislation of the Russian Federation.
• Site visitors — natural persons using the Site and/or sending enquiries through the contact form.

For site visitors the Operator processes:

• data the visitor provides themselves through the contact form: name, phone number, email address, subject of the enquiry, the text of the enquiry and any details the visitor chooses to include in it;
• data collected automatically while the Site is used: IP address, browser and device information, referral source, pages viewed, date and time of access, cookie identifiers, and the on-page action recordings produced by the web analytics system.

The Site does not collect special categories of personal data or biometric data. The Operator does not take decisions producing legal effects concerning the data subject solely on the basis of automated processing.

• carrying out the activities set out in the Operator's charter;
• concluding and performing civil-law contracts with natural persons;
• complying with laws and other regulations binding on the Operator;
• registering and reviewing enquiries received through the contact form and replying to them;
• keeping the Site operational and secure;
• collecting de-identified traffic statistics and analysing how the Site is used in order to improve it.

Processing for purposes incompatible with those listed above is not carried out. Marketing and newsletter mailings are not covered by this Policy and are performed only with separate consent from the data subject.

• the Operator's charter and the contracts it concludes with data subjects;
• consent of the data subject (Art. 6(1)(1) of Federal Law 152-FZ) — in particular the consent given when sending an enquiry through the contact form, and consent to the use of cookies;
• necessity to perform a contract to which the data subject is a party, or to take steps at the subject's request prior to entering into one (Art. 6(1)(5));
• necessity to comply with obligations imposed on the Operator by law (Art. 6(1)(2)).

Processing is based on the principles of lawfulness and fairness; of purposes defined and declared in advance; of data and methods being adequate to those purposes; of accuracy and sufficiency of the data; of not combining databases created for incompatible purposes; of keeping data in an identifiable form no longer than the purposes require; and of destroying the data once the purposes are achieved or the need for them is lost.

The Site and the infrastructure that runs it are located in the Russian Federation.

Personal data is processed with and without automated means, and includes collection, recording, systematisation, accumulation, storage, updating, modification, retrieval, use, transfer (provision, access), depersonalisation, blocking, deletion and destruction.

The Site uses cookies and the browser's local storage. Strictly necessary data that keeps the Site working and stores the visitor's cookie choice is saved regardless of consent and does not identify the visitor.

Yandex.Metrica, including its Session Replay tool, is used to collect traffic statistics and analyse visitor behaviour. The Yandex.Metrica counter is not loaded and sets no identifiers until the visitor consents. If consent is declined the counter never starts and any identifiers set earlier are deleted. The contents of the contact form fields are excluded from Session Replay recordings by technical means.

The list of cookies used, with their purpose, retention period and the party that sets them, together with the procedure for withdrawing consent, is set out in the Cookie Policy.

The Operator does not sell personal data and does not distribute it to an indefinite range of persons. Personal data is transferred to third parties only where required by the legislation of the Russian Federation (including requests from tax, law enforcement and other competent authorities), or on the basis of the Operator's instruction under Article 6(3) of Federal Law 152-FZ.

Processing on the Operator's instruction is governed by a contract specifying the operations, the purposes and the duty to observe confidentiality and the security requirements of Article 19 of Federal Law 152-FZ. The Operator remains liable to the data subject for the acts of such a processor.

Yandex LLC (Yandex.Metrica) is engaged to process site visitors' data on the Operator's instruction. It receives the visit data listed in section 2 above under data collected automatically. See the Yandex Privacy Policy.

Retention periods are determined by the term of the contract with the data subject and by the requirements of the legislation of the Russian Federation. Data received through the contact form is processed until the purposes in section 3 are achieved or until the subject withdraws consent, whichever comes first. Cookie retention periods are set out in the Cookie Policy.

Once the purposes are achieved, or the need for them is lost, personal data is destroyed or depersonalised, except where a retention obligation is imposed by law.

The data subject has the right to:

Requests concerning the processing of personal data, including withdrawal of consent and demands to clarify, block or destroy data, may be sent:

• by email to hello@geekchain.io;
• by post to: 32A Fermskoye shosse, apt. 320, Saint Petersburg, 197341, Russian Federation.

The request must contain information identifying the data subject and information confirming that the Operator processes their data, or a reference to that fact.

The Operator reviews the request and replies within ten working days of receiving it. That period may be extended by no more than five working days, with notice to the subject stating the reason.

On withdrawal of consent the Operator stops processing and destroys the personal data within thirty days, except in the cases set out in Article 6(1)(2–11), Article 10(2) and Article 11(2) of Federal Law 152-FZ.

The Operator takes the legal, organisational and technical measures required to protect personal data against unlawful or accidental access, destruction, modification, blocking, copying, provision, distribution and other unlawful acts. Among the measures under Article 18.1(1) and Article 19 of Federal Law 152-FZ, the Operator has:

• appointed a person responsible for organising the processing of personal data;
• appointed a person responsible for the security of personal data;
• issued documents defining its policy on the processing of personal data and internal acts on processing and protection;
• familiarised the employees who process personal data with the legislation and those documents;
• applied organisational and technical security measures in its information systems, including access control and transmission over secure channels;
• established internal control of compliance with the legislation.

The person responsible for organising the processing of personal data can be reached at hello@geekchain.io.

This Policy is amended and supplemented as legislation and regulations on the processing and protection of personal data change. The current version is always published on this page. Related documents: Personal Data Consent, Cookie Policy.

Version of 12 September 2026.