Echomotion - AI & Data Solutions for Business

Controller (Art. 4 No. 7 GDPR)

Echomotion GmbH

Nymphenburger Str. 148

80634 Munich

Germany

Commercial Register: Amtsgericht München, HRB 219355

Managing Director: Benjamin Rolf Lange

Phone: +49 (0) 89 2155 602 00

Fax: +49 (0) 89 2155 602 01

Email: contact@echomotion.de

Data Protection Officer

According to our current legal assessment, we are not required to appoint a Data Protection Officer. If you have questions regarding data protection, please contact us using the details above.

Introduction

We, Echomotion GmbH ("we," "us," "our"), take the protection of your personal data very seriously. This Privacy Policy explains, in accordance with the General Data Protection Regulation (GDPR), how we collect, process, and use personal data when you use our website, app, and other digital offerings ("digital assets"). We comply with all applicable data protection laws, in particular the GDPR.

If you do not agree with the described procedures, please do not use our digital assets and services. We will announce any changes to this Privacy Policy on our website. Your continued use of our services after any updates are published will be considered acceptance of these changes.

1. Types of Data Processed (Art. 13(1)(c) GDPR)

We primarily process the following categories of personal data:

Contact details (e.g., name, email address, postal address, phone number)
Usage data (e.g., IP address, date/time of access, visited pages, device information)
Communication content (e.g., messages, comments, feedback, inquiries via contact or download forms)

Non-personal data (e.g., aggregated, anonymized usage statistics) is processed separately. We only combine non-personal and personal data when necessary.

2. Sources of Data (Art. 13(1)(d) GDPR)

Direct Collection: Via contact forms, download forms (email address, first and last name, optional phone number), email correspondence, or registrations.
Automatic Collection: Through your use of our digital assets (e.g., technical usage data).
Third Parties: From external providers (e.g., social logins) if you have given consent.

3. Purposes and Legal Bases of Processing (Art. 6 GDPR)

Performance of Contract (Art. 6(1)(b) GDPR): To provide our services and offer customer support.
Consent (Art. 6(1)(a) GDPR): For sending newsletters, promotional materials, or processing data from contact and download forms. You may revoke your consent at any time with future effect (e.g., by emailing contact@echomotion.de or using an unsubscribe link in newsletters).
Legitimate Interests (Art. 6(1)(f) GDPR): Improving and developing our services, ensuring IT security, preventing fraud, analyzing user behavior, and responding to inquiries, provided these interests do not override your fundamental rights and freedoms.
Legal Obligations (Art. 6(1)(c) GDPR): Compliance with statutory requirements or official orders.

4. Recipients or Categories of Recipients (Art. 13(1)(e) GDPR)

Service Providers: Hosting providers, IT service providers, payment providers, and support service providers, with whom we conclude data processing agreements.
Authorities and Public Bodies: In cases of legal obligations or official requests.
Third Parties in Corporate Transactions: In the event of mergers, acquisitions, or sale of assets.

We may disclose non-personal data to third parties at our discretion.

5. Transfers to Third Countries (Art. 13(1)(f) GDPR)

We only transfer personal data to countries outside the European Economic Area (EEA) if appropriate safeguards (e.g., EU Standard Contractual Clauses) are in place. More information is available upon request.

6. Retention Periods (Art. 13(2)(a) GDPR)

We retain personal data only as long as necessary for the respective purpose or as required by statutory retention periods. For example, data from contact inquiries is deleted once the communication is complete, provided no further legal obligations require retention. Newsletter data is retained until you withdraw consent. Usage data is typically anonymized or deleted after evaluation.

7. Your Rights as a Data Subject (Art. 15 ff. GDPR)

You have the following rights:

Access (Art. 15 GDPR): Obtain information about the personal data we hold about you.
Rectification (Art. 16 GDPR): Correct inaccurate or incomplete data.
Erasure (Art. 17 GDPR): Request deletion of your data unless retention is required by law.
Restriction of Processing (Art. 18 GDPR): Under certain conditions.
Objection (Art. 21 GDPR): Object to processing based on legitimate interests.
Data Portability (Art. 20 GDPR): Receive the data you provided in a commonly used, machine-readable format.
Withdrawal of Consent (Art. 7(3) GDPR): Revoke any given consent at any time with future effect.
Right to Lodge a Complaint (Art. 77 GDPR): With a supervisory authority.

The competent supervisory authority for us is typically:

Bayerisches Landesamt für Datenschutzaufsicht

Promenade 27 (Schloss), 91522 Ansbach, Germany

Website: https://www.lda.bayern.de

Please direct any inquiries regarding your rights to contact@echomotion.de.

8. Obligation to Provide Data (Art. 13(2)(e) GDPR)

Providing certain personal data may be necessary to use our services. Without this data, certain features or services may not be available.

9. Automated Decision-Making (Art. 22 GDPR)

We do not engage in exclusively automated decision-making or profiling (Art. 4 No. 4 GDPR) that produces legal or similarly significant effects for you.

10. Cookies and Tracking Technologies

We use cookies and similar technologies only based on your consent (Art. 6(1)(a) GDPR), unless they are technically necessary. For details, please see our separate Cookie Policy. You may withdraw your consent at any time via our cookie settings.

11. Use of Google Services

We only activate the following Google services after you give us your consent (Art. 6(1)(a) GDPR). This means that Google Analytics, Google Ads, and Google Tag Manager will only be loaded if you provide consent via our cookie banner.

Google Analytics: A web analytics service used to evaluate your use of our site. Your IP address is anonymized. Data is generally transferred to and stored on servers in the USA.
Google Ads: A service to display relevant advertisements. We use conversion tracking to measure the effectiveness of our ads.
Google Tag Manager: A tool for managing scripts (tags). It does not set cookies itself but triggers other tools like Google Analytics.

For more information, see: https://policies.google.com/privacy. You can withdraw your consent at any time by adjusting the settings in our cookie banner or in your browser.

12. Processing of Personal Data via Contact and Download Forms

When you use our contact or download forms, we collect the following data based on your consent (Art. 6(1)(a) GDPR):

Email address
First and last name
Optional: Phone number

These data are used exclusively for the stated purpose (e.g., responding to inquiries, providing requested downloads) and are stored in our own solution based on Google Cloud, hosted in the EU. We ensure an appropriate level of data protection in accordance with the GDPR.

You may withdraw your consent at any time. In that case, we will delete your data unless statutory retention requirements apply.

13. Security (Art. 32 GDPR)

We implement appropriate technical and organizational measures to protect your data. However, no absolute protection can be guaranteed. Please use secure passwords and do not transmit confidential information via unencrypted channels.

If payments are processed, these occur via PCI-DSS compliant providers.

14. Handling of Minors

Our services are not directed at individuals who have not reached the age of majority. If we become aware that we have collected personal data from minors, we will delete them promptly.

15. Rights Under California Law (CCPA)

California residents may have additional rights, such as accessing or deleting their data. We do not sell personal data. Minors under 18 in California can request removal of their posted content ("California Removal Request").

16. Additional Policies and Documents

This Privacy Policy may be supplemented by additional policies (e.g., Cookie Policy) that detail specific aspects of our data processing. Please note any relevant information provided on our website.

17. Changes to this Privacy Policy (Art. 13(3) GDPR)

We may update this Privacy Policy as needed to reflect changes in law or our services. The current version is always available on our website. We will announce significant changes there. Your continued use of our services after notification constitutes acceptance of the updated terms.

Contact