Privacy Policy

1) Introduction and Contact Information of the Data Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data includes all data that can be used to personally identify you.
1.2 The data controller for the processing of personal data on this website, within the meaning of the General Data Protection Regulation (GDPR), is Salude GbR, Berlinerstraße 54, 55268 Nieder-Olm, Germany, Tel.: 015771432292, Email: info@ecowiseagency.com. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
 
2) Data Collection When Visiting Our Website
2.1 When you visit our website purely for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the server (known as “server log files”). When you access our website, we collect the following data, which is technically necessary to display the website:

• The specific page(s) visited on our website

• Date and time of access

• Amount of data transferred (in bytes)

• Source/referral from which you arrived at the page

• Browser used

• Operating system used

• IP address (if applicable, in anonymized form)

The processing is based on our legitimate interest in improving the stability and functionality of our website, as outlined in Article 6(1)(f) of the GDPR. There is no sharing or further use of the data. However, we reserve the right to review the server log files at a later time should specific indications point to illegal use.
2.2 This website uses SSL or TLS encryption for security purposes and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.
 
3) Hosting & Content Delivery Network
To host our website and present content, we use a provider that provides services solely on servers within the European Union, either independently or through selected subcontractors.
All data collected on our website is processed on these servers.
We have signed a data processing agreement with the provider, ensuring the security of visitor data and prohibiting unauthorized sharing with third parties.

4) Cookies
To make visiting our website attractive and enable the use of certain functions, we use cookies—small text files stored on your device. Some cookies are automatically deleted after you close the browser (“session cookies”), while others remain on your device to save site settings (“persistent cookies”). In this latter case, you can find the storage duration in your browser’s cookie settings.
If any cookies process personal data, this is done according to Article 6(1)(b) GDPR for contract performance, Article 6(1)(a) GDPR with your consent, or Article 6(1)(f) GDPR based on our legitimate interest in the optimal functionality and a user-friendly design of the website.
You can configure your browser to notify you about the setting of cookies, to decide individually about accepting them, or to exclude cookies for specific cases or in general.
Please note that refusing cookies may limit our website’s functionality.

5) Contacting Us
5.1 Calendly
For online appointment scheduling, we use the services of: Calendly, LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA.
To arrange appointments, we collect your first and last name, email address, and phone number if a phone appointment is desired, based on Article 6(1)(b) GDPR for contract purposes or Article 6(1)(f) GDPR, based on our legitimate interest in effective customer management and appointment scheduling.
After the appointment or agreed period, your data is deleted by the provider.
We have signed a data processing agreement with Calendly, ensuring the security of visitor data and prohibiting unauthorized sharing with third parties. For data transfers to the USA, Calendly complies with the EU-US Data Privacy Framework, which ensures adherence to European data protection standards.
5.2 Contact Form or Email
When contacting us via contact form or email, we collect personal data as indicated in the form. This data is solely used to respond to your inquiry and handle the technical administration.
The legal basis for processing this data is our legitimate interest in addressing your inquiry, Article 6(1)(f) GDPR. If the contact is related to a contract, Article 6(1)(b) GDPR provides the additional legal basis. Your data will be deleted once the inquiry has been fully resolved unless retention is legally required.

6) Using Customer Data for Direct Advertising
6.1 Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send information about our offerings. The only mandatory information for receiving the newsletter is your email address. Additional details are optional and help us address you personally.
We use a double opt-in method to confirm your subscription, which requires your explicit confirmation of consent to receive newsletters. After subscription, you will receive a confirmation email with a link to verify your email address.
By activating the confirmation link, you consent to the use of your data, Article 6(1)(a) GDPR. We store your IP address and registration time to track potential misuse of your email address. You may unsubscribe at any time through a link in each newsletter or by contacting the data controller.
After unsubscribing, your email address is deleted unless you expressly consent to continued data use or we reserve legally permissible further use, which is explained in this policy.
6.2 Brevo (formerly Sendinblue)
We send newsletters via: Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany.
Based on our legitimate interest in effective newsletter marketing (Article 6(1)(f) GDPR), we share your data with Brevo, which sends newsletters on our behalf. With your express consent (Article 6(1)(a) GDPR), Brevo may analyze newsletter statistics using web beacons or tracking pixels to measure open and interaction rates.
You can revoke consent to newsletter tracking at any time. We have signed a data processing agreement with Brevo to ensure data protection and prohibit unauthorized sharing.
6.3 Klaviyo
We send newsletters via: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA.
Similarly, based on our legitimate interest in effective newsletter marketing (Article 6(1)(f) GDPR), we share your data with Klaviyo, which sends newsletters on our behalf. With your express consent (Article 6(1)(a) GDPR), Klaviyo analyzes newsletter campaigns using web beacons or tracking pixels to measure engagement.
You can revoke consent to newsletter tracking at any time. We have signed a data processing agreement with Klaviyo to ensure data protection and prohibit unauthorized sharing. For data transfers to the USA, Klaviyo complies with the EU-US Data Privacy Framework, which ensures adherence to European data protection standards.

7) Web Analytics Services
7.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), allowing us to analyze your use of our website.
Cookies are set by Google Analytics on your device. They collect specific information, including your IP address, which Google shortens to anonymize it.
The information is transferred to Google’s servers and processed there, including transfers to Google LLC in the USA.
Google uses the data on our behalf to evaluate your website usage, compile reports, and provide additional analytics services. Google does not combine your IP address with other data. The data is stored for two months and then deleted.
These processes only occur with your explicit consent (Article 6(1)(a) GDPR). You can revoke consent at any time via the “Cookie Consent Tool” on our website.
We have signed a data processing agreement with Google to ensure data protection and prohibit unauthorized sharing.
Further legal details on Google (Universal) Analytics can be found here and here.
Demographic Features
Google (Universal) Analytics provides statistics on user age, gender, and interests. This data is anonymized and deleted after two months.
Google Signals
As an extension to Google Analytics, Google Signals may be used to create cross-device reports with your consent (Article 6(1)(a) GDPR). For personalized advertising, Google may analyze your usage across linked devices. You can disable “personalized advertising” in your Google account if you wish to stop cross-device analysis. More information on Google Signals is available here.
User IDs
This website may use “User IDs” as an extension of Google (Universal) Analytics, allowing us to analyze your interactions across devices. Google adheres to the EU-US Data Privacy Framework, ensuring adherence to European data protection standards.
7.2 Google Analytics 4
This website uses Google Analytics 4, a web analytics service by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), allowing us to analyze your use of our website.
Cookies are set by Google Analytics 4 on your device. They collect specific information, including your IP address, which Google shortens to anonymize it.
The information is transferred to Google’s servers and processed there, including transfers to Google LLC in the USA.
Google uses the data on our behalf to evaluate your website usage, compile reports, and provide additional analytics services. Google does not combine your IP address with other data. The data is stored for two months and then deleted.
These processes only occur with your explicit consent (Article 6(1)(a) GDPR). You can revoke consent at any time via the “Cookie Consent Tool” on our website.
We have signed a data processing agreement with Google to ensure data protection and prohibit unauthorized sharing.
Further legal details on Google Analytics 4 can be found here and here.

 
8) Retargeting/Remarketing and Conversion Tracking
8.1 Meta Pixel with Advanced Matching
We use Meta Pixel with advanced matching, provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").
When a user clicks on an ad placed by us on Facebook or Instagram, the URL of our linked page is expanded by a parameter using Meta Pixel. This URL parameter is then recorded via a cookie, storing it in the user’s browser. Additionally, this cookie records specific customer data like email addresses, gathered during actions such as purchases, account registrations, or logins (advanced matching). This data allows us to assess the effectiveness of our advertising campaigns.
This collected data is stored by Meta and may enable Meta to match this data with an individual user profile. Meta’s data policy, which includes information on personalized ads and the use of data for advertising purposes, can be found here.
This processing only occurs if you have given us your explicit consent, in line with Article 6(1)(a) GDPR. You can revoke your consent anytime by disabling this service in the "Cookie Consent Tool" provided on the website.
8.2 Google Ads Remarketing
This website uses Google Ads Remarketing by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Google Ads Remarketing places a cookie in your browser to show interest-based ads based on previously visited pages. If you have consented to your internet and app browser history being linked to your Google account and used for personalized ads, Google uses your data across devices and platforms to define audiences for cross-device remarketing.
Details on Google’s data processing can be found here. Google’s privacy policy can be accessed here.
This processing only occurs with your explicit consent (Article 6(1)(a) GDPR), which you may revoke at any time. If you no longer want Google Ads Remarketing, you can also download and install a browser plugin here.
8.3 Google Ads Conversion Tracking
We use Google Ads Conversion Tracking, provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, to measure the success of ads we display on Google’s network.
The conversion tracking cookie is set when a user clicks on our ad. These cookies lose validity after 30 days. If the user visits a specific page on our website within this period, we can identify that they arrived via the ad.
Data collected through this method allows Google to provide us with statistics on ad effectiveness. However, we receive no information that personally identifies users.
All described processes only occur with your explicit consent (Article 6(1)(a) GDPR), which you may revoke at any time through the "Cookie Consent Tool" provided on the website.

9) Site Functionalities
9.1 Facebook Plugins
Our website uses plugins from the social network Facebook, provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
These plugins enable direct interaction with content on Facebook. To enhance data protection, plugins are initially deactivated using a “two-click” or “Shariff” solution. This means no connection to Facebook servers is made until you activate the plugin by clicking it, thus consenting to data processing per Article 6(1)(a) GDPR.
Information transferred to Facebook can include your IP address, browser type, and browsing history. This data can also be transferred to Meta Platforms Inc., USA. Meta complies with the EU-US Data Privacy Framework, ensuring adherence to European data protection standards.
9.2 Instagram Plugins
Our website also integrates plugins from Instagram, provided by Meta Platforms Ireland Ltd.
As with Facebook plugins, Instagram plugins are initially disabled to protect your data. Once activated by clicking, your IP address and browsing history are transmitted to Instagram servers. Meta complies with the EU-US Data Privacy Framework for data transfers to the USA, ensuring data protection standards are met.
9.3 LinkedIn Plugins
We use LinkedIn plugins, provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
Plugins allow for direct interaction with LinkedIn content. When enabled, data such as IP address and browsing history may be transmitted to LinkedIn servers. LinkedIn complies with European Commission standard contractual clauses, ensuring adherence to European data protection standards for data transfers to the USA.
9.4 Vimeo
Our website uses Vimeo plugins, provided by Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA.
When viewing embedded videos, cookies may be set to gather information about user behavior. If logged into your Vimeo account, data such as IP address and browsing history are associated with your profile. Vimeo complies with the EU-US Data Privacy Framework for data transfers, ensuring compliance with European standards.
9.5 YouTube
Our website uses plugins from YouTube, a Google service, to display video content.
When activated, the plugin establishes a connection with YouTube’s servers. Data such as IP address and browsing history are transmitted to Google LLC servers in the USA. Google adheres to the EU-US Data Privacy Framework for data protection.
9.6 Google Web Fonts
Our site uses Google Web Fonts, provided by Google Ireland Limited, to ensure consistent fonts.
Your browser downloads the required fonts, connecting directly to Google’s servers and transmitting data such as your IP address. Google adheres to the EU-US Data Privacy Framework.
9.7 Google reCAPTCHA
To prevent automated misuse, we use Google reCAPTCHA, provided by Google Ireland Limited.
This service verifies user activity by analyzing data such as IP address and browser type. Google adheres to the EU-US Data Privacy Framework, ensuring adherence to European data protection standards.

10) Tools and Other Services
Cookie Consent Tool
Our website uses a cookie consent tool to manage user consent for cookies. This tool only enables cookies if the user consents, ensuring compliance with Article 6(1)(f) GDPR for legitimate interest in a lawful website structure.
If the tool processes data such as IP address, this is based on Article 6(1)(f) GDPR and, where required, Article 6(1)(c) GDPR.

11) Rights of the Data Subject
11.1 GDPR grants you specific rights regarding the processing of your personal data:

• Right to access (Article 15 GDPR)

• Right to rectification (Article 16 GDPR)

• Right to erasure (Article 17 GDPR)

• Right to restrict processing (Article 18 GDPR)

• Right to data portability (Article 20 GDPR)

• Right to revoke consent (Article 7(3) GDPR)

• Right to file a complaint (Article 77 GDPR)

11.2 Right to Object
If we process your data based on legitimate interests (Article 6(1)(f) GDPR), you have the right to object for reasons related to your situation. If exercised, we will halt processing unless we demonstrate compelling legitimate grounds or the processing is necessary for legal claims.
If data is processed for direct marketing purposes, you have the right to object at any time, which will result in the termination of processing for such purposes.

12) Duration of Personal Data Storage
The storage duration depends on the legal basis, processing purpose, and, if relevant, statutory retention periods.
Personal data is stored as long as consent is not revoked (Article 6(1)(a) GDPR) or the purpose for processing no longer exists. Personal data processed for contract fulfillment is retained as long as necessary for contract purposes or if we have a legitimate interest in continued retention. Direct marketing data is retained until an objection is filed (Article 21(2) GDPR).
If specific information in this policy does not otherwise indicate, data will be deleted when no longer necessary for the purposes collected.