PRIVACY POLICY

We, Ecosoft 22 BV (please find the contact details below) and associated companies, are pleased that you are visiting our website! The protection of your data and your privacy are a special concern for our company.

The use of our website is possible without the indication of personal data. In case you would like to make use of specific applications of our company the processing of personal data may be necessary. For the circumstance, that processing of personal data is necessary and a legal base therefor does not exist, we seek your consent.

The processing of personal data takes place in order with the General Data Protection Regulation (GDPR) and the respective country-​​specific data protection regulations. By means of this data protection declaration our company would like to inform the public about the type, extent and purpose concerning the personal data collected, used and processed. Further we want to inform you about your rights.

We have taken technical and organizational measures to protect your data against loss, modification or unauthorized access. We continuously improve these security measures according to technological development.

The provisions below serve to provide information as to the manner, extent and purpose for collecting, using and processing personal information by the Ecosoft 22 BV and relating sub websites, with exception of web sites that are controlled or run by third parties. Please be aware that we are not responsible and cannot take influence on the content of websites or tasks of third parties.

1. General

The data protection declaration of our company is based on the terms of the GDPR.

“personal information” is data that, when submitted, is able to determine your identity or enables your identity to be determined. “Only indirectly personally identifiably information” is data by which clients, service providers or recipients of a communication cannot determine the identity of a specific individual using means that are permitted by law. “Non-​personal information” is anonymized and cannot, under any circumstances, be attributed to specific individuals and is therefore information that is not subject to the Privacy Policy governing personal data.

“data subject” means an identifiable natural person whose personal data is processed by the controller.

“processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

“controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

“third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

“consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Personal data is only processed by our company in accordance to the data protection regulations in force. In case you correspond with our company or fill in a form with your data, you accept that the data is processed for the mentioned purpose.

Name and address concerning the controller and contact partner

The body responsible for collecting, processing and using your personal data in terms of the GDPR such as Federal data protection laws is:

Ecosoft 22 BV

Leuvensesteenweg 633

1930 Zaventem (Belgium)

Phone number: +3216607771

E-mail: belgium@ecosoft.com

Representative in charge:

• Andrey Mitchenko, CEO
• Michiel Hoctin Boes, Legal Director

The data protection officer voluntarily appointed by the responsible person can be reached under the following contact data:

E-mail: belgium@ecosoft.com

2. Web analysis tools

Google Ads is an online advertising program by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads allows us to display advertisements on the Google search engine or on third-​​party websites when the user enters certain search terms into Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on user data available at Google (e.g., location data and interests) (audience targeting). As website operators, we can quantitatively evaluate this data by analyzing which search terms led to the display of our advertisements and how many ads led to corresponding clicks. The use of Google Ads is based on Article 6 (1) (f) GDPR. The website operator has a legitimate interest in marketing his services and products as effectively as possible. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/

2.3. Google Ads Enhanced Conversions for Web: 

This website uses Google Ads Enhanced Conversions for the Web: Enhanced Conversions are a supplement to the conversion tag. In online marketing, conversion describes the process where the interested website user ultimately performs a desired action, such as making a purchase. Generally, this application is used to forward personally collected data in hashed (converted into a randomized random code) form to Google, to better capture purchases and bookings and to circumvent browser tracking restrictions. When a website visitor performs a conversion action on the website, the personally collected data are gathered. These data are then forwarded in hashed form by the website operator to Google, where they are assigned to the respective Google account. This allows tracking of which user performs which conversions on the company website, even when there are tracking restrictions by the browser. The Enhanced Conversions application is GDPR compliant, as the personal data are transmitted in hashed form and have been collected by the website operator themselves.

2.4. Google Enhanced Conversions for Leads: 

This website uses Google Enhanced Conversions for Leads: In the application of Enhanced Conversions for Leads, personally collected data are transmitted in hashed (converted into a randomized random code) form to Google. The website visitor arrives at the website (lead) via an advertisement, whereupon the undertaking of a conversion, his personal data are collected by the website operator. Once this conversion by a lead is performed, the data are transmitted in hashed form to Google. After matching by Google, the data are then included in the conversion tracking. The Enhanced Conversion for Leads application runs GDPR compliant, as the personal data are collected by the website operator and only transmitted in hashed form to Google.

2.5. Microsoft Clarity: 

This is an analytics tool that provides statistics on website usage, session recordings, and heatmaps.

Processing Company: Microsoft Ireland Operations Limited
One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Ireland

Purpose of Data Processing

This list outlines the purposes of data collection and processing.

• Customer behavior analysis

Technologies Used

• Tracking code

Collected Data

This list includes all (personal) data collected by or through the use of this service.

• Browser information
• Country
• Clicked links
• Mouse movements
• Information about the operating system
• Referrer URL
• User behavior
• Clicks

Legal Basis

The following legal basis is required for data processing:

• Article 6(1)(a) GDPR

Place of Processing

• United States of America

Retention Period

The retention period is the time span during which the collected data is stored for processing. The data must be deleted as soon as they are no longer required for the specified processing purposes.

• The data will be deleted as soon as they are no longer needed for processing.

Data Recipients

• Microsoft Corporation

Data Protection Officer of the Processing Company

Below you will find the email address of the data protection officer of the processing company:

https://www.microsoft.com/en-GB/concern/privacy

Click here to read the data processor’s privacy policy:
https://docs.microsoft.com/en-us/clarity/faq#privacy

3. Processing personal data

We process personal data for in this data protection declaration mentioned purpose. Your personal data is not transmitted to a third party, with exception for the cases mentioned in this data protection declaration or binding national law.

In case of particular offers on our web site – such as user account, newsletter, contact – it may be necessary to sign up before, which leads to a needed procession of your personal data. Your data is only used, if you transmitted our company your personal data and agreed beforehand. Therefore we kindly ask you to give us your consent. Further we provide information via a hyperlink.

3.1. Online shop and user-​registration

You can order in our online shop without registration or user account. The user account can be deleted at any time. Data, which was announced to our company in accordance with your order in the online shop are necessary for the transaction of the contract such as for the reason of a future customer service. These data is processed and used by our company for that reason only.

By sending the order form without a registration or creating a user account your personal data (title, name, country of origin, e-​mail address) are processed.

If you give your consent to this processing, Art. 6 Para. 1 lit. a) GDPR is the legal basis for this processing. If the opening of the user account is also intended to lead to the initiation of a contractual relationship with us or to fulfil an existing contract with us, the legal basis for this processing is also Art. 6 Para. 1 lit. b) GDPR. You may revoke your prior consent to the processing of your personal data at any time under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent.

Stripe services of the company Stripe Technology Europe Limited, C/O A&L Goodbody, Ifsc, North Wall Quay, Dublin, Dublin 1, Republic Of Ireland, is used to process purchase transactions in the online shop. A data processing agreement has been entered into with Stripe. The data disclosed in the order placement is provided to parties involved in the online shopping (online retailer, which has been purchased from, and payment system operators, where the payment was carried out) in the required extent. The payment settlement is carried out by payment system operators (banks and credit card organizations) who are authorized to carry out the respective payment procedure and have appropriately secured systems. Data transfer is necessary to carry out payments remotely and to enable the use of Stripe.

Stripe does not pass on data to third parties unless Stripe is legally or by judicial assignments obliged to do so or a transfer of the data is necessary in order to take legal action against fraudulent access.

Logistic services of different companys like Viva Express, DPD, GLS, DHL, FedEx and Kühne & Nagel are used to process the orders in the online shop. The data disclosed in the shipment process is provided to companys like Viva Express, DPD, GLS, DHL, FedEx and Kühne & Nagel to parties involved in the online shopping in the required extent. The Shippingpartners does not pass on data to third parties unless is legally or by judicial assignments obliged to do so.

3.2. User account

A user account is required for the use of the partner portal and for the registration of products. The user account can be deleted by you at any time. Data communicated in the user account are necessary for the purpose of customer service and customer care and are processed and used by us in this respect. Some of the services we provide require cooperation with partner companies. If a user makes use of one of these services, we exchange names or other contact information with these partner companies so that they can carry out their activities. However, our partner companies may not use the information provided for purposes other than those related to the service.

3.3. Newsletter

We offer you different types of newsletters via e-​mail. You can sign up for a newsletter during registration with your explicit approval or by disclosure of your e-​mail address for this reason. The personal data collected as part of a registration for the newsletter will only be used to send our newsletter. The newsletter is only transmitted to your disclosed e-​mail address. In addition we kindly ask you to confirm that you are owner of the e-​mail address such as your agreement for receiving the newsletter.

During the registration for the newsletter, we process your personal data from the contact fields (title, name, country of origin, e-​mail address). Purpose of the process is the shipping of information concerning products, services and events.

The legal basis for this is Art. 6 Para. 1 lit. a) GDPR.

You may revoke your prior consent to the processing of your personal data at any time under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent or to use the termination-​​link in each newsletter.

3.4. Lottery

Lotteries are organized on our web site at times. Participation does not require an user account. Your data is only used within the lottery, except something else was agreed in the conditions of participation.

When registering to take part in the lottery your personal data (title, name, country of origin, e-​mail address) are processed. Purpose of the process is supply of information concerning products, services and events.

The legal basis for this is Art. 6 Para. 1 lit. a) GDPR. You may revoke your prior consent to the processing of your personal data at any time under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent. 

3.5. Product registration

The registration of your product on our website for use of free maintenance and repair service reminder via e-​mail is optional.

Upon registration of the Ecosoft product, your personal data (title, name, country of origin, e-​mail address) will be processed. The purpose of data processing is to supply information about products and services.

The legal basis for this is Art. 6 Para. 1 lit. a) GDPR.

You may revoke your prior consent to the processing of your personal data at any time under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent.

You have the option to register your Ecosoft product on our website at www.ecosoft.com and you can avail yourself of our free reminder service for maintenance and service steps. The reminder is sent by email. When you register the Ecosoft product, your personal data from the contact fields will be processed (title, name, address, telephone number, email address). The purpose of the data processing is to send information on products and services. 

The legal basis for the processing is Article 6 (1) (a) GDPR. You can withdraw your consent to the processing of the data at any time with effect for the future pursuant to Article 7 (3) GDPR. All you need to do is inform us of your withdrawal of consent.

While registering the product, you also have the option of linking yourself and your device with a service partner. This means that a Ecosoft service partner (partner company) that has the code supplied with the product (e.g. executing installation company) can view the specified customer data, the product as well as the current status of the product on the Ecosoft partner portal. The sharing of this information with the service partner is for service purposes. Our partner companies are only permitted to use the transferred information for service purposes for our customers.

The legal basis for the processing is Article 6 (1) (a) GDPR. You can withdraw your consent to the processing of the data at any time with effect for the future pursuant to Article 7 (3) GDPR. All you need to do is inform us of your withdrawal of consent.

3.6. E-​mail Notifications (Drupal, Esputnik)

The dispatch of account-​​ and product-​​specific notifications (status messages, warning and error messages), as well as e-​mail confirmations from contact forms is carried out via an external service of the company Esputnik.

• Specifically, the following personal data will be passed on for processing:
• Recipient's e-​mail address
• Personal salutation

In order to better support you with problems regarding your requests, your customer account and your product notifications, the following events will be stored for a maximum of 30 days:

• E-​mail delivered to receiving server
• Email delivered to receiving server - Spam
• Email delivered to receiving server - Bounce
• E-​mail delivered to receiving server - blocked
• E-​mail opened
• Link inside the e-​mail clicked

 An data processing agreement pursuant to Art. 28 DSGVO has been concluded with this service provider.

3.7. Contact via our website

Our website contains a contact form that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-​called electronic mail (e-​mail address). If a data subject contacts our company via a contact form, the personal data transmitted by the data subject are automatically stored.

In case of contact via the contact form your personal data provided in the contact fields (title, name, country of origin, e-​mail address) are processed. Purpose of the process is the handling of your request.

The legal basis for this is Art. 6 Para. 1 lit. b) GDPR.

3.8. Find an installer

You can contact a Ecosoft water professional or Ecosoft partner installer via our website. The data provided by you in the contact fields is automatically processed and transmitted to the installer you chose. A copy of the message is sent to Ecosoft.

In case of contacting us your personal data provided (title, name, country of origin, e-​mail address) is processed. Purpose of the process is the handling of pre-​contractual procedures.

The legal basis for this is Art. 6 Para. 1 lit. b) GDPR.

3.9. Partnerweb

Our Ecosoft water professionals and Ecosoft partner installers are registered in our Partnerweb (platform for installers and B2B Clients). Upon registration, the personal data (title, name, country of origin, e-​mail address) of the Ecosoft water professional/Ecosoft partner companys will be processed. 

There is no processing of customer data. Purpose of the process is the handling of pre-​contractual and contractual procedures.

The legal basis for this is Art. 6 Para. 1 lit. b) GDPR.

4. Period for which the personal data will be stored

We store your personal Data, where required, for the duration of the entire business relationship (initiation, transaction, fulfilment of a contract) and moreover pursuant to the storage and documentation obligations and for defence of legal claims. The storage period results from the storage obligations and periods of limitation. The period of limitation according to the Austrian Corporate Code and the Austrian Fiscal Code is 7 years, according to the Equal Treatment Act 6 months. In certain cases a longer storage obligation might be reasonable.

4.1. Job Applications (Career)

Scope of data processing: If you are interested in working with Ecosoft 22 BV, you can apply to us online. Under the menu item 'career' you will find open vacancies. If you apply via the application form, we collect the following personal data: salutation, title, first name, last name, email address, telephone number, number of the vacancy/open application plus the documents you attach: cover letter, CV, diplomas.

Purpose of data processing: We process personal data for the purpose of justifying a decision on an employment contract, in particular for the selection of suitable candidates and the administrative execution of the application process.

Legal basis of processing: When you apply for a job, the user's data are processed to handle the application and its processing in accordance with Art. 6 (1) (a) and (b) of the AVG.

Recipient of personal data: Your personal data can be accessed by the human resources department and the subject department responsible for the vacancy.

Duration of storage: If the application leads to employment, we process this data in order to implement employment. This data is then entered into our personnel administration system. If the application does not lead to employment, this data will be deleted 4 weeks after the completion of the application procedure, subject to the objection period of the Dutch Equal Treatment Act, unless the applicant has given his/her consent in accordance with Art. 6 (1) (a) of the AVG and Art. 7 of the AVG to store his/her personal data for a longer period of time in order to be able to be requested again in case of a new vacancy, if necessary.

Possibilities to object and delete: You may at any time on request review the information you have sent to us or have it deleted. For that purpose, please send us an email to belgium@ecosoft.com. This does not apply insofar as you have applied for a specific job opening with us in an ongoing application process. In this case, we will retain the information provided by you for this vacancy until the statutory objection period has expired.

5. Rights of the data subject

With regard to the data processing to be described in more detail below, users and data subjects have the right

to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);

to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);

to the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;

to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);

to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR). In Austria, this is the Data Protection Authority.

In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.

Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller's future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

These rights can be enforced at any time, in writing, to Ecosoft 22 BV. Please note that information can only be provided to you in case of a corresponding evidence of your identity.

In case you want to delete your customer account finally, the data stored in your customer account is going to be automatically deleted.

31.01.2025