Privacy Policy

The controller responsible for processing your personal data is:

Ekofluid GmbH
Mariahilfer Strasse 36, 1070 Vienna, Austria
Company register no. (Firmenbuchnummer): (to be added)
VAT ID (UID): (to be added)
Managing director: (to be added)
Email: office@ekofluid.com

We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. For any question about this policy or your personal data, contact office@ekofluid.com.

This policy applies to the website ekofluid.com and to personal data we receive through it — for example when you use our contact form or when your browser sends technical data to our server. It does not cover third-party websites we link to (such as our YouTube or Instagram profiles), which have their own privacy policies.

We process personal data only where the GDPR allows it.

Visiting the website (server logs)

• Data: IP address, date and time of the request, the page requested, referring URL, browser type and operating system.
• Purpose: to deliver the website securely and reliably, and to detect and prevent abuse.
• Legal basis: our legitimate interest in operating a secure website — Art. 6(1)(f) GDPR.
• Retention: server access logs are kept for 30 days, then deleted.

Contacting us through the contact form

• Data: the details you enter — typically your name, email address, company and the content of your message.
• Purpose: to receive, answer and follow up on your inquiry.
• Legal basis: steps taken at your request prior to a contract — Art. 6(1)(b) GDPR — and our legitimate interest in responding to inquiries — Art. 6(1)(f) GDPR.
• Retention: for as long as needed to handle your inquiry, then up to 24 months for possible follow-up, unless a longer statutory period applies.
• Providing the data: giving us these details is voluntary, but without them we cannot respond to your inquiry.

Analytics — Google Analytics 4 (consent only)

• Data: pseudonymous usage data (pages viewed, approximate location, device and browser), linked to cookies set by Google Analytics.
• Purpose: to understand how the site is used and improve it.
• Legal basis: your consent — Art. 6(1)(a) GDPR. Google Analytics is disabled by default and runs only after you click Accept in our cookie banner. You can withdraw consent at any time.

Analytics — Plausible (no cookies)

• Data: aggregated, anonymous statistics. Plausible uses no cookies and collects no data that can identify you.
• Purpose: privacy-friendly traffic measurement.
• Legal basis: our legitimate interest in basic, anonymous audience measurement — Art. 6(1)(f) GDPR.

Recording your cookie choice

• Data: a single value (granted / denied) stored in your browser.
• Purpose: to remember your cookie preference so we don't ask again.
• Legal basis: Art. 6(1)(c) and 6(1)(f) GDPR — documenting consent is both a legal obligation and a legitimate interest. It is essential and is not used for tracking.

We do not sell your personal data. We share it only with service providers who process it on our behalf under a data-processing agreement (Art. 28 GDPR), and only as far as necessary:

• Hosting — DigitalOcean, LLC, which hosts the website and stores server logs.
• Web3Forms — delivers contact-form submissions to our inbox.
• Google (Google Ireland Ltd / Google LLC) — provides Google Analytics 4, only after you consent.
• Plausible — provides anonymous, cookieless analytics.

We may also disclose data where we are legally obliged to (for example to public authorities) or to protect our legal rights.

Some providers (in particular Google, and potentially Web3Forms) may process data on servers outside the European Economic Area, including in the United States. Where that happens, the transfer is protected by appropriate safeguards — the EU–U.S. Data Privacy Framework where applicable and/or the European Commission's Standard Contractual Clauses (Art. 46 GDPR). You can request a copy of these safeguards at office@ekofluid.com.

We use a strictly necessary mechanism to remember your consent choice and — only with your consent — Google Analytics cookies. Plausible is cookieless. Embedded YouTube videos set cookies only after you click to play them. Full details, including a cookie table and how to change your choice, are in our Cookie Policy.

Some pages embed videos from YouTube (operated by Google). To protect your privacy these load in click-to-load mode: nothing is requested from YouTube and no YouTube cookies are set until you actively click to play a video. Once you do, Google may set cookies and process data under Google's privacy policy.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects (Art. 22 GDPR).

Our website is aimed at a business and professional audience and is not directed at children. We do not knowingly collect personal data from children.

You have the right to:

• Access the personal data we hold about you (Art. 15);
• Rectify inaccurate or incomplete data (Art. 16);
• Erase your data — the right to be forgotten (Art. 17);
• Restrict processing in certain cases (Art. 18);
• Data portability — receive your data in a structured, machine-readable format (Art. 20);
• Object to processing based on legitimate interest (Art. 21);
• Withdraw consent at any time, without affecting processing already carried out (Art. 7(3)).

To exercise any of these rights, contact office@ekofluid.com. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

If you believe we have processed your personal data unlawfully, you may lodge a complaint with the Austrian supervisory authority:

Österreichische Datenschutzbehörde (DSB)
Barichgasse 40–42, 1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Web: www.dsb.gv.at

You may also contact the supervisory authority in your EU country of residence.

We protect your data with appropriate technical and organisational measures, including encrypted transport (HTTPS/TLS) across the whole site and restricted access to the systems that handle personal data. No method of transmission over the internet is completely secure, but we continuously work to keep your data safe.

We may update this policy to reflect changes in our practices or in the law. The current version, with its effective date, is always available on this page. Material changes will be made clearly visible.