Privacy Policy and Cookie Policy

Sayeed Islamuddin Sadat / EcoSecureIT

Last updated: 01.10.2026

Privacy Policy

1. Controller

The controller responsible for data processing on this website under the General Data Protection Regulation (GDPR) is:

2. General Information on Data Processing

We process personal data only to the extent necessary to provide a functioning website and our services.

Processing is based on the following legal grounds:

• Art. 6(1)(a) GDPR (consent)
• Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures)
• Art. 6(1)(c) GDPR (legal obligation)
• Art. 6(1)(f) GDPR (legitimate interest)

3. Hosting

This website is operated by an external hosting provider.

Hosting provider: HOSTINGER INTERNATIONAL LIMITED

Hosting provider address: 61 Lordou Vironos Street, 6023 Larnaca, Cyprus

As part of providing the website, the hosting provider processes personal data, in particular:

• IP addresses
• Browser information
• Operating system
• Date and time of access
• Device information
• Referrer URL

4. Server Log Files

When you access our website, the following information is automatically collected:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL
• Pages visited
• Volume of data transferred

5. SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption.

You can recognise an encrypted connection by https:// and the padlock icon in your browser.

SSL/TLS: The website uses an encrypted HTTPS connection to protect data transmitted between the browser and the server.

6. Contact Form

When you contact us via the contact form, we process: name, company name (optional), phone number, email address, and the content of your message.

Legal basis: Art. 6(1)(b) and (f) GDPR.

Technical processing of the form: Processing is performed through the website application; the enquiry is transmitted by email to our business mailbox and an automatic confirmation is sent to the email address provided.

7. Contact by Email or Phone

If you contact us by email or phone, we store the details you provide (name, phone number, email address, content of the communication) to process your enquiry.

8. Contact Form and Google reCAPTCHA

Our contact form processes your name, company name (optional), email address, number of employees (optional), request type and message. The IP address and Google reCAPTCHA verification are also processed for security.

If you submit the contact form, we use your email address to send you an automatic confirmation, and your enquiry is transmitted to our business email address.

Google reCAPTCHA is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and is used to protect the contact form against automated abuse.

9. Google Analytics, Google Tag Manager, Google Ads and Microsoft Clarity

A technical review of the current website source code found no active implementations of Google Analytics 4, Google Tag Manager, Google Ads Conversion Tracking or Microsoft Clarity.

These services are therefore not used in the current technical configuration of the website.

10. Google Fonts

This website uses the Pixelify Sans font via Google Fonts.

The font is loaded from Google servers. In this process, the visitor IP address may be transmitted to Google.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

11. Google Maps

The website contains technical support for Google Maps content. However, the technical review found no active Google Maps embeds in the published page data.

Normal links to Google Maps may be used as external links. When such a link is opened, Google's privacy policy applies.

12. Social Media

The website provides links to external social media profiles, including Instagram, Facebook, LinkedIn, TikTok and Xing.

No active social media embeds or plugins from these platforms were found in the website source code. Data is therefore not transmitted to these platforms merely by visiting the website, unless corresponding external content is opened.

13. Cookie and Consent Management

The website uses its own consent system to manage the visitor's choices. Consent decisions are stored locally in the visitor's browser.

The browser storage values ecosecure-consent-v1 and announcementDismissed are used for technical storage.

The consent categories include necessary functions, analytics, marketing and external media. Optional categories are disabled by default and can be changed or withdrawn by the visitor.

14. Other Third-Party Services

A technical review of the current website source code found no active embeds of YouTube, LinkedIn, Facebook, Instagram, Microsoft Teams, AnyDesk, live chat systems or appointment-booking systems.

External links may lead to the respective providers. The privacy policies of the respective providers apply after opening external services.

15. Retention Period

Personal data is deleted once the purpose of processing no longer applies and no statutory retention obligations exist. Statutory retention periods remain unaffected.

16. Recipients of Personal Data

Recipients may include, in particular: the hosting provider, Google services used on the website, IT service providers, professional advisers, and public authorities where legally required.

17. Your Rights

You have the following rights:

• Access under Art. 15 GDPR
• Rectification under Art. 16 GDPR
• Erasure under Art. 17 GDPR
• Restriction of processing under Art. 18 GDPR
• Data portability under Art. 20 GDPR
• Objection under Art. 21 GDPR
• Withdrawal of consent under Art. 7(3) GDPR

18. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

19. Changes to This Privacy Policy

We reserve the right to update this privacy policy where required due to technical changes, new services, or legal requirements.

Cookie Policy

1. General Information

Our website uses cookies. Cookies are small text files stored on your device that make using the website easier.

2. Necessary Cookies

These cookies are required to operate the website, e.g. security settings, cookie preferences, form functionality, session management. These cookies cannot be disabled.

3. Statistics Cookies

With your consent, we use statistics cookies to analyse how our website is used, e.g. Google Analytics 4, Microsoft Clarity.

4. Marketing Cookies

With your consent, we use marketing cookies, e.g. Google Ads, conversion tracking, remarketing.

5. Functional Cookies

These cookies improve usability, e.g. language settings, appointment booking, support systems, chat functions.

6. Cookie Consent System

Consent management platform: No external consent management provider is used. Consent management is handled by the websites own internal system.

You can change or withdraw your consent at any time using the cookie icon button at the bottom-left of every page.

20. Notice for Visitors Located in India (DPDP Act, 2023)

EcoSecureIT is a sole proprietorship based in Germany with no separate establishment in India. Where visitors located in India use this website and provide personal data within the meaning of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), the following notice applies in addition to the GDPR provisions above.

20.1 Role under the DPDP Act

For the purposes of the DPDP Act, EcoSecureIT acts as a "Data Fiduciary" in relation to personal data submitted by users in India through the contact form or by email. Processing is carried out solely for the specified purpose of handling the relevant enquiry.

20.2 Consent

Personal data of users located in India is processed only on the basis of informed, specific, and freely revocable consent. Consent can be withdrawn at any time via the email address given in the contact form.

20.3 Rights of the Data Principal

Users in India have, in particular, the following rights under the DPDP Act:

• Right to access information about personal data being processed
• Right to correction and updating of inaccurate or incomplete data
• Right to erasure once the purpose of processing no longer applies
• Right to withdraw consent, with effect for the future
• Right to grievance redressal through a designated contact, and, if unresolved, to approach the Data Protection Board of India

20.4 Cross-Border Data Transfer

As EcoSecureIT is based in Germany, personal data submitted by users located in India is transferred to and processed and stored in Germany/the EU, under the protection standards of the GDPR.

20.5 Contact for DPDP Act Matters

Email: info@ecosecureit.com. Additional contact: Sayeed Islamuddin Sadat, +49 6132 9773961.