We process personal data only to the extent necessary to provide a functional website, respond to enquiries and protect the security and stability of the service. Personal data includes information relating to an identified or identifiable person, such as a name, email address, IP address or communication content.
03
Hosting via ChatGPT Sites
This website is provided using ChatGPT Sites, a hosting service offered by OpenAI. When the site is accessed, technical information required to deliver and secure the website may be processed, including IP address, browser and device information, requested pages, date and time of access and technical log data.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and efficient provision of this website. More information is available in the OpenAI European Privacy Policy ↗.
04
Technical infrastructure
Cloudflare infrastructure may be used to deliver, protect and improve the reliability of this website. In this context, technically necessary connection and log data may be processed. Further information can be found in the Cloudflare Privacy Policy ↗.
05
Server log files
Technical systems may temporarily process IP address, date and time of access, requested pages or files, transferred data volume, browser type and version, operating system and referrer URL. Processing is necessary to deliver the site and ensure stability and security. The legal basis is Article 6(1)(f) GDPR.
06
Contacting Ecolation
When you submit the contact form, the provided name, email address, optional company information, selected area of interest, subject and message are transmitted to Ecolation and stored in the website’s protected contact database. If the enquiry originates from the Project Value Calculator, the submitted scenario link and its source are also stored. The time at which you acknowledged this Privacy Policy and the applicable policy version are stored with the enquiry. Ecolation does not add the visitor’s IP address to the enquiry record.
The data is used solely to review and respond to the enquiry and, where relevant, to continue a resulting business, research or investment conversation. Processing is based on Article 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual measures and otherwise on Article 6(1)(f) GDPR based on our legitimate interest in responding effectively to enquiries.
To protect the form against automated abuse, short-lived counters derived from a cryptographic hash of the connection address and email address are used for rate limiting. The raw connection address is not retained in the enquiry record.
07
Cookies and similar technologies
Ecolation currently does not use optional analytics or marketing cookies on this website. The selected US or EU measurement system may be stored locally in the visitor’s browser so the preference remains consistent between the wall comparison and calculator. This preference is not transmitted to Ecolation. The hosting platform may use strictly necessary technologies required for security and operation.
08
Recipients and transfers
Personal data is transferred only where legally permitted, required to provide the website, necessary to respond to an enquiry, or processed by contracted technical service providers. Contact enquiries are stored using Cloudflare D1 infrastructure within the website hosting environment. The information required to deliver a contact notification is transmitted to Resend, our transactional-email provider.
Ecolation remains responsible for selecting and instructing these processors. We use data-processing agreements in accordance with Article 28 GDPR and, where processing outside the European Economic Area cannot be avoided, ensure that a recognised transfer mechanism—such as an adequacy decision or the European Commission’s Standard Contractual Clauses—and appropriate supplementary safeguards apply. Resend provides further information in its Data Processing Addendum ↗ and subprocessor list ↗.
09
Storage period
Website enquiries that have not become an active business conversation are scheduled for automatic removal from the website database after 180 days. Short-lived rate-limit records expire after 24 hours and are removed during regular maintenance. If an enquiry develops into an active business, research, investment or contractual relationship, relevant correspondence may be retained for the duration of that relationship and afterwards for applicable statutory limitation and retention periods. Technical logs are retained only for the operational and security periods applied by the respective hosting provider and for as long as legally necessary.
10
Your rights
Access pursuant to Article 15 GDPR
Rectification pursuant to Article 16 GDPR
Erasure pursuant to Article 17 GDPR
Restriction of processing pursuant to Article 18 GDPR