Privacy Policy
Last updated: September 24, 2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
EchtSquad
Email: service@echtsquad.com
WhatsApp/Phone: +1 863 369 2868
2. General information
We take the protection of your personal data seriously and treat it confidentially and in accordance with the GDPR and this privacy policy. This policy explains which data is collected when you visit our website and contact us, what we use it for and what rights you have. This website addresses businesses in the United Kingdom and Europe; we apply the GDPR and the UK GDPR to all processing via this website.
3. Hosting
This website is hosted by GoDaddy Operating Company, LLC, 2155 E GoDaddy Way, Tempe, AZ 85284, USA (web hosting). When you access the website, the hosting provider processes the connection data transmitted by your browser (in particular the IP address) to deliver the pages and protect the website against attacks. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure, fast and stable delivery). A data processing agreement pursuant to Art. 28 GDPR is in place with GoDaddy; where data is transferred to the USA, this is based on the EU Standard Contractual Clauses. More information: godaddy.com/legal/agreements/privacy-policy.
4. Server log files
When you access the website, information is automatically recorded in server log files: browser type and version, operating system, referrer URL, IP address and the date and time of the request. This data is not combined with other data sources and serves solely technical delivery and security. The legal basis is Art. 6 (1) (f) GDPR. The hosting provider deletes the log files automatically after a short period.
5. Contact by email or phone
If you contact us by email or phone – for example via the “Request a quote”, “Book a call” or “Request talent” buttons, which prepare an email to service@echtsquad.com – we process the data you provide (name, email address, phone number, company and the content of your message) in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR (initiation or performance of a contract) or Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). The data remains with us until you ask us to delete it, the purpose of storage no longer applies or statutory retention periods expire. Please note that unencrypted emails may be read in transit.
5b. Contact via WhatsApp
You can also reach us via WhatsApp (buttons and chat icon on this website). WhatsApp is operated by WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a company of the Meta group. When you message us on WhatsApp, WhatsApp processes your phone number, profile name, the time and metadata of the communication in accordance with the WhatsApp privacy policy; message content is end-to-end encrypted. Metadata may be transferred to Meta servers in the USA; Meta is certified under the EU-US Data Privacy Framework. We process the content of your message to handle your enquiry on the basis of Art. 6 (1) (b) or (f) GDPR. Using WhatsApp is voluntary – you can always reach us by email or phone instead. More information: whatsapp.com/legal/privacy-policy-eea.
5c. Client reviews (review form)
Clients we have completed a project with receive a personal link to a review form. There we process your name, company, optionally your role and photo/logo, the star rating, the review text, the time of submission and your consent to publication. To prevent abuse, your IP address is stored briefly as a hash (to limit the number of submissions) and deleted after 24 hours at the latest. The data is stored in a database on our GoDaddy web space; we are notified of new reviews by email. A review is published only after we have checked it and only with your consent – on the relevant project page and on our home page, showing name, company, role, photo/logo, stars and text. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw your consent at any time by emailing service@echtsquad.com; we will then remove the review promptly. Reviews that are not published or are rejected are deleted after twelve months at the latest.
6. Processing when you engage us
If you engage us for a service (for example a website, software, automation, marketing or remote staff), we process your contact and company data as well as the content and access required for the service in order to perform the contract (Art. 6 (1) (b) GDPR). Where we process personal data of your customers or employees on your behalf, we conclude a data processing agreement with you pursuant to Art. 28 GDPR. Invoice data is retained in accordance with statutory retention periods.
7. Cookies and local storage
This website uses no tracking, analytics or advertising cookies. Only strictly necessary values are stored – in your browser’s local storage and, on the review form only, a session cookie:
| Key | Purpose | Duration |
|---|---|---|
es-theme | Selected colour scheme (light/dark) | until you delete it |
es-consent | Your cookie/consent choice | until you delete it |
ES_SESSION (cookie) | Session cookie on the review form only (protection against forged requests) | until you close the browser |
This storage is strictly necessary to provide the settings you have chosen (§ 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR); no consent is required. External third-party content is loaded only if you consent to the “External content” category. You can change your choice at any time via “Cookie settings” in the footer.
8. Fonts
The fonts used are served locally from our hosting. No connection to servers of Google or other font providers is established when you visit the website.
9. Transfers to third countries
Some of the service providers named above (GoDaddy, WhatsApp/Meta) also process data outside the EU/EEA and the UK, in particular in the USA. We base such transfers on the EU Standard Contractual Clauses (with the UK Addendum) or the EU-US Data Privacy Framework and the UK Extension, and additionally protect your data through technical and organisational measures (encrypted transmission, access restrictions, confidentiality obligations).
10. Your rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent with effect for the future (Art. 7 (3) GDPR)
To exercise your rights, an email to service@echtsquad.com is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence.
11. Right to object
Where we process data on the basis of Art. 6 (1) (f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
12. Data security
This website uses TLS/SSL encryption (https), recognisable by the lock symbol in the browser bar. We also use technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons.
13. No automated decision-making
No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.
14. Changes
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. The new version applies to your next visit.
This English version is provided for convenience. The German version is legally binding.