1. Introduction
Welcome to https://elchs.com/ (the “Website”).
This Privacy Policy explains how the operator of the Website collects, uses, stores, and protects personal data when you visit the Website or contact us.
We aim to process personal data transparently and in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.
2. Data Controller
The controller responsible for processing personal data through this Website is:
- Legal name: elchs.com
- Email: [email protected]
- Website: https://elchs.com/
The data controller determines the purposes and means of processing personal data.
3. Personal Data We Process
Depending on how you interact with the Website, we may process the following information.
3.1 Information you provide
When you contact us by email or through a contact form, we may process:
- Your name, if provided.
- Your email address.
- Your telephone number, if provided.
- The subject and contents of your enquiry.
- Any additional information you voluntarily include in your message.
- Information necessary to manage and respond to your enquiry.
Please avoid sending sensitive personal information unless it is necessary for your enquiry.
3.2 Technical information and server logs
When you access the Website, technical information may be processed automatically by the hosting provider or server. Depending on the configuration, this may include:
- IP address.
- Date and time of access.
- Requested pages and URLs.
- Referring URL, where available.
- Browser type and version.
- Operating system and device information.
- Technical error and security logs.
This information may be processed to deliver the Website, maintain its security, diagnose technical issues, and investigate misuse.
3.3 Website analytics
We use analytics service, such as Google Analytics 4, Matomo to understand how visitors use the Website and to improve its performance.
Depending on the service and its configuration, the information processed may include:
- Pages visited and interactions with Website content.
- Visit timestamps and session information.
- Browser, device, and approximate location information.
- Referring sources.
- Online identifiers and cookie information.
- Technical information such as IP address, where processed by the service.
The exact data collected depends on the analytics configuration and the provider's processing activities.
4. Purposes and Legal Bases
We process personal data only where an applicable legal basis exists.
4.1 Responding to enquiries
We use information submitted through email or a contact form to respond to requests, provide information, and manage related communications.
The legal basis is Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a contract, or Article 6(1)(f) GDPR where processing is necessary for our legitimate interests in managing general enquiries and communications.
4.2 Operating and securing the Website
Technical information and server logs may be processed to provide the Website, maintain functionality, prevent abuse, investigate technical errors, and protect the Website against security incidents.
The legal basis may be Article 6(1)(f) GDPR, based on our legitimate interests in operating and securing the Website, subject to an assessment of your rights and interests.
4.3 Measuring Website usage
We use analytics to understand Website traffic and visitor interactions and to improve the Website.
Where required, analytics processing will be based on your consent under Article 6(1)(a) GDPR. Where consent is relied upon, you may withdraw it at any time.
We will not rely on legitimate interests alone to bypass a consent requirement that applies to the storage of or access to information on your device.
4.4 Legal obligations
We may process personal data where necessary to comply with applicable legal obligations.
The legal basis is Article 6(1)(c) GDPR.
5. Cookies and Similar Technologies
The Website may use cookies or similar technologies to provide functionality, remember preferences, or measure Website usage.
Technically necessary technologies may be used where permitted by applicable law. Analytics and other non-essential technologies will only be activated after obtaining consent where required by law.
Where consent is required, you should be able to accept or reject non-essential technologies and subsequently change or withdraw your consent.
For technologies subject to German law, we also take into account Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG), where applicable.
[Insert details of the actual cookies and similar technologies used, their purposes, providers, and retention periods. Include a link to the cookie settings if available.]
6. Hosting and Service Providers
The Website may rely on third-party providers for hosting, email, contact form functionality, analytics, security, and other technical services.
These providers may process personal data on our behalf or act as separate controllers, depending on the service and the circumstances.
Analytics provider: Google Analytics 4
Where a provider processes personal data on our behalf, we will put appropriate data processing arrangements in place where required by law.
We disclose only the data necessary for the relevant service and purpose.
7. International Data Transfers
Some of our service providers may process personal data outside the European Economic Area (EEA).
Some providers transfer or access personal data outside the EEA.
Where personal data is transferred to a country without an applicable adequacy decision, we will use an appropriate transfer mechanism under Chapter V GDPR, where required, and implement any necessary additional safeguards.
Further information about relevant safeguards may be requested using the contact details in Section 2, subject to applicable law.
8. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.
When personal data is no longer needed, it will be deleted or anonymised, subject to applicable legal retention requirements.
9. Disclosure of Personal Data
Depending on the Website's actual operation, personal data may be disclosed to:
- Hosting and infrastructure providers.
- Email and contact form service providers.
- Analytics providers.
- Security and maintenance providers.
- Professional advisers, where necessary.
- Courts, regulators, or public authorities where disclosure is legally required.
We do not sell personal data as part of the activities described in this Privacy Policy.
[Confirm that this statement reflects the Website's actual practices.]
12. Data Security
We take appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction.
The measures used depend on the nature of the data and the risks associated with its processing.
No method of electronic transmission or storage can be guaranteed to be completely secure.
13. External Links
The Website may contain links to external websites or third-party services. Those websites operate under their own privacy policies and practices.
We encourage you to review their privacy information before providing personal data. We are not responsible for the privacy practices of independent third-party websites.
14. Changes to This Policy
We may update this Privacy Policy when our data processing activities, Website functionality, service providers, or legal requirements change.
The latest version will be published on this page, with its updated revision date.
15. Contact
For questions about this Privacy Policy or to exercise your data protection rights, please contact:
elchs.com
Email: [email protected]
Website: https://elchs.com/