Privacy Policy

This English version is provided for convenience only.
The legally binding version of this Privacy Policy is the original German text.

​

Introduction

We (“we”, “us”, “our”) take the protection of the data of users (“user” or “you”) of our website and/or mobile app (the “Website” or the “Mobile App”) very seriously and are committed to protecting the information that users provide to us in connection with their use of our website and/or mobile app (collectively: the “digital assets”). We are further committed to protecting and using your data in accordance with applicable law.

This Privacy Policy explains our practices regarding the collection, use, and disclosure of your data when you access our digital assets and services (the “Services”) from your devices.

Please read this Privacy Policy carefully and ensure you fully understand our practices regarding your data before using our Services. If you have read and fully understood this policy but do not agree with our practices, you must discontinue using our digital assets and Services. By using our Services, you acknowledge the practices described in this Privacy Policy. Continued use of the Services constitutes your consent to this Privacy Policy and any updates to it.

This Privacy Policy explains:

• How we collect data

• What data we collect

• Why we collect this data

• To whom we disclose the data

• Where the data is stored

• How long the data is retained

• How we protect the data

• How we handle data regarding minors

• Updates or changes to this policy

​​

​

What data do we collect?

Always Applicable​

Below is an overview of the data we may collect:

​

Non-personal data

Non-identifiable or unidentifiable information that you provide during the registration process or that is collected through your use of our Services (“non-personal data”). Non-personal data does not allow us to identify the individual from whom it was collected. Such data primarily include technical and aggregated usage information.

​

Personal data

Individually identifiable information, meaning data that identifies you or may reasonably be used to identify you (“personal data”). Personal data collected via our Services may include information such as names, email addresses, addresses, phone numbers, IP addresses, and more. When we combine personal and non-personal data, the combined data will be treated as personal data.

​

How do we collect data?

Always Applicable​

We use the following main methods to collect data:

• We collect data when you use our Services. When you visit our digital assets or use our Services, we may collect, record, and store usage data, session information, and related details.

• We collect data that you provide directly when you contact us via communication channels (e.g., email with comments or feedback).

• We may collect data from third-party sources as described below.

• We collect data when you register or sign in through a third-party service such as Facebook or Google.

 

Why do we collect this data?

Always Applicable​

We may use your data for the following purposes:

• To provide and operate our Services

• To develop, customize, and improve our Services

• To respond to your feedback, inquiries, and requests and to provide support

• To analyze usage and demand patterns

• For internal, statistical, or research purposes

• To enhance our data security and fraud-prevention capabilities

• To investigate violations and enforce our terms and policies and comply with applicable law

• To send updates, news, promotional materials, and information related to our Services
  (You may unsubscribe from promotional emails at any time by clicking the “unsubscribe” link.)

 

To whom do we disclose this data?

Always Applicable​

We may share your data with our service providers who assist us in operating our Services (e.g., data hosting providers, technical support).

We may also disclose your data in the following circumstances:
(i) to investigate, detect, prevent, or respond to illegal activities or misconduct;
(ii) to establish or exercise our legal rights;
(iii) to protect our rights, property, or personal safety, as well as the safety of users or the public;
(iv) in the event of a change of control (through merger, acquisition, or sale of all or substantially all assets);
(v) to authorized third-party providers to store, retain, and/or manage data on our behalf (e.g., cloud storage) as reasonably required;
(vi) to cooperate with third-party partners to improve user experience.

We may freely use, transfer, or disclose non-personal data at our discretion.

​

If your site allows blogs or forums

(If not applicable, you may omit this section.)

Our Services may allow public interactions (e.g., posting content or comments). Any information you share in these public areas may be seen and used by others. We encourage you not to post information you prefer to keep private. Content uploaded to our digital assets is at your own risk.

​

Cookies and similar technologies

When you access or use our Services, we authorize third parties to use cookies, web beacons, pixel tags, scripts, and similar technologies (“tracking technologies”). These technologies enable third parties to automatically collect your data to enhance navigation, improve performance, provide a personalized experience, and support security and fraud prevention.

See our Cookie Policy for more information.

​

If you do NOT use advertising services

We will not share your email address or personal data with advertising networks without your consent.

 

If you DO use advertising networks (Facebook Ads, etc.)

(Include only if applicable.)

​

Where do we store the data?

Non-personal data​

Non-personal data may be stored and processed worldwide by us and our trusted partners.

 

Personal data

Personal data may be stored in the United States, Ireland, South Korea, Taiwan, Israel, and other jurisdictions as required to provide our Services or comply with legal obligations.

​

How long do we retain data?

We retain collected data as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce agreements.

We may correct, update, or delete inaccurate or incomplete data at our discretion.

​

How do we protect the data?

Our hosting provider supplies the platform through which we offer our Services. Your data may be stored on their secure servers behind a firewall. Most areas of their Services are accessible only via secure HTTPS.

 

If you accept online payments

All payment processing complies with PCI-DSS standards to ensure secure handling of credit card data.

 

General security notice

Despite our efforts, no method of digital transmission or storage is 100% secure. Please use strong passwords and avoid sharing sensitive information via email or instant messaging, as these channels are not fully secure.

 

How do we handle minors' data?

If you do NOT collect data from minors

Our Services are not intended for users who have not reached the age of majority. We do not knowingly collect data from minors. If we learn that a minor has provided data, we may block their access and delete the data.

 

Your rights (EU residents)

If you are an EU resident, you may:

• Request confirmation of whether we process your personal data

• Request access to your stored personal data

• Request data portability

• Request correction of inaccurate data

• Request deletion of your personal data

• Object to processing

• Request restriction of processing

• File a complaint with a supervisory authority

Data may be transferred outside the EU only where adequate safeguards exist.

​

California Consumer Privacy Act (CCPA)

If you are a California resident, you may request access to and deletion of your data.

We do not sell users’ personal data for CCPA purposes.

​

Updates to this Privacy Policy

We may update this Privacy Policy from time to time. The version posted on the website is always current (see date at the top). Significant changes will be announced on the website. Continued use of the Services after such updates constitutes your acceptance of the revised policy.

​

Contact​

If you have questions about our Services or your data, contact us at:

Responsible Party:

Nadine Spajic | Echo Ona
Address: Falkenstraße 15,

76829 Landau in der Pfalz, Germany
Email: nadine.s@echoona.com

​

​

​