Website privacy notice
To be confirmed before publication: the date this notice was last updated
Contents
- Who is responsible
- What this notice covers
- Information you provide
- Technical information
- Why we use your information
- Applicable data protection law
- Who receives information
- Processing in other countries
- How long information is kept
- Cookies and external links
- Your rights
- Security and changes
Who is responsible
ecoo AG is responsible for the processing described in this notice.
ecoo AG
Blegistrasse 23
6340 Baar, Switzerland
Email: hey@ecoo.ch
Telephone: +41 41 562 02 91
To be confirmed before publication: whether an EEA representative and/or a data protection officer are required, and if so their contact details
What this notice covers
This notice covers visits to our corporate website and business inquiries made through it or sent to its contact address. It explains the processing for which ecoo AG is responsible in that context.
It does not replace the privacy information for an Ecoo app, digital wallet, customer program or platform account. Those services can involve different data, purposes and responsible organizations. Please use the privacy information provided in the relevant service. The existing privacy information for those services, in English continues to apply within its own scope.
Information you provide
When you contact us, we receive the information you submit: your name, work email address, organization, country or intended market, message, and any optional program area or referral information. We also process the correspondence needed to answer your inquiry.
Fields marked as required are needed to handle the inquiry. You can leave optional fields empty. Providing information is voluntary, but we may be unable to respond or assess your request without sufficient contact and project details. This website is intended for business inquiries, not for submitting identity documents, payment details, medical information or customer databases. Please do not include those details in your message.
Technical information
When you access the website, the infrastructure serving it processes connection and request information. Depending on the confirmed services listed below, this includes your IP address, request time, requested page or file, browser and device information, and technical error or security information.
We use the necessary technical information to deliver the website, identify faults and protect it against misuse. The service register below explains who processes this information, where it is processed and how long it is retained. Ordinary technical logging is distinct from optional visitor analytics.
Why we use your information
We use inquiry details to respond, understand the proposed project and follow up on the conversation you started. We use necessary technical information to operate, secure and troubleshoot the website. We also handle privacy requests and retain information where necessary to meet legal obligations or establish, exercise or defend legal claims.
Submitting a contact form does not subscribe you to a newsletter or authorize unrelated promotional messages. This website does not use advertising tracking, session replay or optional visitor analytics under its initial configuration. Our handling of website inquiries does not involve decisions made solely by automated processing that have legal or similarly significant effects on you.
Applicable data protection law
We handle personal data in accordance with the Swiss Federal Act on Data Protection and other applicable law.
Where the EU General Data Protection Regulation applies, the following grounds apply to the processing described here:
- Our legitimate interests in answering business inquiries, maintaining business relationships and operating a secure website, under Article 6(1)(f). These interests are assessed against your rights and interests.
- Steps at your request before entering a contract, or performance of a contract, under Article 6(1)(b), when you are personally the prospective or actual contracting party. An employee contacting us for a company is not automatically a party to that company's contract.
- Compliance with an applicable legal obligation, under Article 6(1)(c), where such an obligation requires the processing.
- Consent, under Article 6(1)(a), for any optional processing introduced with a separate valid consent request. Consent is not a condition for submitting an ordinary business inquiry.
Who receives information
Access within Ecoo is limited to people who need the information for the purposes described above. External providers support the website, security, delivery of inquiries and business correspondence. Providers processing information on our behalf act under appropriate instructions and contractual safeguards. Where a provider acts independently, its role is identified in the service register.
We disclose information to professional advisers or competent authorities when needed for legal advice, legal claims or a legal obligation. We do not publish your inquiry or sell the information submitted through the contact form.
The following register identifies the services actually used on this website, their roles, the information involved, processing locations and retention:
To be confirmed before publication: the completed website service register
Processing in other countries
Service providers can process information outside Switzerland, including through storage, support or remote access. The countries and applicable safeguards for this website are listed below. A provider's headquarters alone does not identify every processing location.
To be confirmed before publication: the international transfer details (countries and safeguards)
Where legally required, transfers rely on a recognized adequacy decision or appropriate safeguards, such as applicable standard contractual clauses with adaptations and supplementary measures where needed. Ask us at hey@ecoo.ch for information about the safeguards relevant to your data or a copy where available, with confidential information redacted where necessary.
How long information is kept
We keep information for the purpose for which it was collected, then delete or anonymize it unless a justified legal obligation or claim requires retention. If an inquiry leads to a customer relationship, relevant correspondence becomes part of that relationship's records. The specific periods or criteria for inquiry records, server and security logs, form delivery records, consent records where used, and backups are:
To be confirmed before publication: the retention schedule for each record type
Your rights
Depending on the applicable law and circumstances, you can request access to your personal data, correction, deletion, restriction of processing or a portable copy. You can object to processing based on legitimate interests on grounds relating to your situation. Where data is processed for direct marketing, you can object at any time. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.
Contact hey@ecoo.ch to make a request. We may ask for information reasonably needed to verify your identity. Rights are subject to legal conditions and exceptions; we will explain any limitation that applies.
You can contact the Swiss Federal Data Protection and Information Commissioner. Where the GDPR applies, you can also lodge a complaint with a competent supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement. In Sweden, this is Integritetsskyddsmyndigheten (IMY).
Security and changes
We use technical and organizational measures appropriate to the processing risks. No internet transmission or storage system is completely secure.
We update this notice when the website's processing changes. The date above identifies the published version. We provide additional notice where required. A revised privacy notice does not itself provide consent for a new processing activity.