Datenschutz / Privacy Policy

The controller responsible for the processing of personal data on this website is:

The controller determines the purposes and means of processing personal data collected through this website.

When you contact us through the contact form, we process the information you provide, including your name, email address, selected service and message, in order to respond to your enquiry and, where relevant, discuss a potential business relationship.

Where your enquiry relates to a potential contract or service engagement, processing is based on Article 6(1)(b) GDPR (steps taken prior to entering into a contract). For other general business enquiries, processing may be based on Article 6(1)(f) GDPR, our legitimate interest in responding to business communications and managing business relationships.

We do not use information submitted through the contact form for unrelated marketing purposes without an appropriate legal basis.

This website uses Netlify Forms to process contact form submissions. When you submit the contact form, the information you provide is transmitted to and processed through Netlify's infrastructure on our behalf.

Netlify may process technical and submission-related data as necessary to provide the form service, including spam prevention and form delivery.

Netlify acts as a service provider / processor in connection with customer data processed on behalf of Netlify customers.

More information about Netlify's privacy and data processing practices is available in Netlify's Privacy Statement and Data Processing Agreement.

If you contact us by email, we process your email address and the information contained in your message in order to respond to your enquiry and manage the related business communication.

The legal basis is Article 6(1)(b) GDPR where the communication concerns a potential or existing contractual relationship, and Article 6(1)(f) GDPR for other legitimate business correspondence.

Our email service provider Microsoft 365 may process this information on our behalf as part of providing the email service.

This website is hosted by Netlify.

When you access the website, technical information may be processed automatically, such as IP address, browser type, operating system, requested URL, referring page, date and time of access and related technical information.

This processing is necessary to deliver the website, maintain technical stability, detect misuse and protect the website against security threats.

The legal basis is Article 6(1)(f) GDPR, our legitimate interest in providing a secure and technically reliable website.

We currently do not intentionally use optional advertising or marketing tracking technologies on this website. Technical usage data may nevertheless be processed by our hosting and infrastructure providers where necessary to operate, secure and maintain the website.

If additional analytics or tracking services are introduced in the future, this Privacy Policy will be updated accordingly and, where required, appropriate consent mechanisms will be implemented.

We use selected third-party service providers where necessary to operate this website and communicate with users. These may include website hosting and form-processing providers, email service providers and technical infrastructure providers.

Where such providers process personal data on our behalf, we use them only for the purposes necessary to provide the relevant service.

Details of additional third-party services will be added to this Privacy Policy if and when such services are introduced.

We process personal data only where necessary for specific purposes, including:

• responding to enquiries and preparing potential business relationships — Article 6(1)(b) GDPR;
• managing general business communications — Article 6(1)(f) GDPR;
• providing, securing and maintaining the website — Article 6(1)(f) GDPR;
• where processing is based on consent, Article 6(1)(a) GDPR.

We retain personal data only for as long as necessary for the purpose for which it was collected.

Contact enquiries are retained for as long as necessary to respond to and manage the enquiry. Where communication results in a business relationship, relevant correspondence may be retained for the duration of that relationship and for any additional period required by applicable legal retention obligations.

Where no further business relationship develops, personal data will be deleted when it is no longer necessary for the original purpose, unless applicable law requires longer retention.

Personal data is disclosed only where necessary to operate the website, respond to enquiries, manage business communications or comply with legal obligations.

Depending on the relevant processing activity, recipients may include:

• website hosting and form-processing providers;
• email and communication service providers;
• technical service providers acting on our behalf;
• professional advisers or public authorities where disclosure is required by law.

We do not sell personal data.

Some of the service providers we use may process personal data outside the European Economic Area (EEA). Where personal data is transferred to countries that do not benefit from an adequacy decision by the European Commission, appropriate safeguards are used where required, such as the European Commission’s Standard Contractual Clauses or other legally recognized transfer mechanisms.

This may apply, in particular, to infrastructure and technology providers such as Netlify and Microsoft, depending on where the relevant processing takes place.

Subject to the conditions provided by applicable data protection law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate personal data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing;
• receive personal data in a portable format where the legal requirements for data portability are met;
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, please contact:

contact@echoupmarketing.com

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI)

Wiesbaden, Germany