Privacy Policy.

What data we collect

• Contact form: your name, company (optional), email address and message.
• Email, phone or WhatsApp: whatever you include in your message and the contact details you write from.
• Visit statistics, only with your consent: pages visited, device and browser type, approximate city and traffic source, collected by Google Analytics through cookies.
• Server logs: IP address, date and time, requested page and browser, used for security and to keep the site running.

Why we use it and on what legal basis

• To answer your request, carry out the free audit and send you a quote: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• To keep a record of our correspondence and defend our rights in case of a dispute: our legitimate interest (Art. 6(1)(f) GDPR).
• Visit statistics: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Server security: our legitimate interest in protecting the site from abuse (Art. 6(1)(f) GDPR).

Who we share data with

We use a few providers that process data on our behalf, strictly for the purposes above:

• Web3Forms, the service that receives the form message and delivers it to our inbox.
• Google Ireland Limited (Google Analytics), only if you accepted statistics cookies.
• Our email provider, where we receive and keep correspondence.
• Meta (WhatsApp), only if you choose to message us on WhatsApp, under that platform's own terms.

Transfers outside the European Union

Some of these providers may process data outside the European Economic Area, for example in the US. In those cases the transfer relies on a European Commission adequacy decision (such as the EU-U.S. Data Privacy Framework) or on the Commission's standard contractual clauses.

How long we keep data

• Messages received through the form, email or phone: 2 years from our last exchange. If you become a client, we keep the data for as long as we work together and then for as long as the law requires (for example, accounting records).
• Google Analytics statistics: at most 14 months. Google Analytics cookies expire after at most 2 years or when you withdraw consent.
• Server logs: at most 30 days.

Cookies and local storage

The site uses no advertising cookies. Google Analytics cookies (_ga and _ga_*) are set only after you click “Accept”. If you decline, Google Analytics doesn't load at all.

In your browser we only store (in localStorage) your cookie choice and your light or dark theme. This information is never sent to us.

You can change your decision at any time with the button below or the “Cookie settings” link in the page footer.

Your rights

You have the right to access your data, have it corrected or erased, restrict its processing, receive it in a portable format and object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting processing done before.

For any of these requests, write to contact@echotech.ro. We reply within one month at most.

If you believe your data isn't being handled correctly, you can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

Security

The site is served only over an encrypted connection (HTTPS), and access to the messages we receive is limited to the people handling your request.

Changes

If we change how we process data, we update this page and the date above.