EC Rep

1. Data Controller

This website is operated by E C Rep GmbH, with registered address at Max-Högger-Strasse 6, 8048 Zürich, acting as data controller for the purposes of the General Data Protection Regulation (EU) 2016/679 (“GDPR”). The company can be contacted at info@ch-rep.info for any matters related to the processing of personal data.

2. Scope and Applicable Law

This Privacy Policy sets out the conditions under which personal data is collected and processed through this website. All processing activities are carried out in accordance with the GDPR and any applicable national data protection legislation. By accessing and using this website, users acknowledge the terms described herein.

3. Categories of Personal Data

The controller may process personal data including identification and contact details, professional information, and any information voluntarily provided by users through contact forms or direct communication. In addition, certain technical and usage data may be collected automatically when accessing the website, including IP address, browser type, device information, and navigation behaviour. No special categories of personal data are intentionally collected.

4. Purposes and Legal Basis of Processing

Personal data is processed for the purposes of responding to enquiries, managing professional relationships, ensuring the proper functioning and security of the website, improving services, and complying with legal and regulatory obligations. Processing is based on one or more of the legal grounds set out in Article 6 of the GDPR, namely the data subject’s consent, the necessity for the performance of a contract or pre-contractual measures, compliance with a legal obligation, or the legitimate interests pursued by the controller, provided that such interests are not overridden by the rights and freedoms of the data subject.

5. Recipients of Personal Data

Personal data may be disclosed to third parties where necessary for the purposes described above. Such recipients may include IT service providers, hosting providers, and professional advisers. Personal data may also be disclosed to public authorities where required by law. All recipients are subject to appropriate confidentiality and data protection obligations.

6. International Data Transfers

Where personal data is transferred outside the European Economic Area, such transfers are carried out in accordance with the provisions of Chapter V of the GDPR. Appropriate safeguards are implemented, including the use of Standard Contractual Clauses approved by the European Commission or transfers to jurisdictions subject to an adequacy decision.

7. Data Retention

Personal data is retained only for the period necessary to fulfil the purposes for which it was collected, or to comply with applicable legal obligations. Retention periods are determined taking into account the nature of the data, the purpose of processing, and any statutory requirements.

8. Data Subject Rights

In accordance with the GDPR, data subjects have the right to request access to their personal data, as well as rectification or erasure of such data. They also have the right to request restriction of processing, to object to processing, and to request data portability where applicable. Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal. Requests to exercise these rights may be submitted using the contact details provided above.

9. Cookies and Similar Technologies

This website uses cookies and similar technologies to ensure proper operation, enhance user experience, and analyse website usage. Further information on the use of cookies is available in the Cookie Policy.

10. Data Security

The controller implements appropriate technical and organisational measures to ensure a level of security appropriate to the risks associated with processing, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage.

11. Right to Lodge a Complaint

Data subjects have the right to lodge a complaint with a supervisory authority if they consider that the processing of their personal data infringes applicable data protection law. In Portugal, the competent supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).

12. Amendments

This Privacy Policy may be updated from time to time to reflect changes in legal requirements or processing activities. The current version will always be made available on this website.