ECARIS is committed to protecting your personal data and ensuring your privacy. This policy outlines how we process and protect personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

1. Use of Cookies

This website does not use cookies or any other tracking technologies to collect or store information about visitors. ECARIS does not attempt to retain any personal data or browsing information from individuals who visit the website, unless such information is voluntarily provided by the user through forms or direct communication. Visitors can browse the website without any data being collected or stored by ECARIS.

2. Personal Data and Purpose of Processing

Personal data refers to any information that can identify you as an individual, such as your name, address, date of birth, email address, profession, and bank details, as well as sensitive information such as income or medical data. ECARIS collects and processes personal data only for specific, explicit, and legitimate purposes, such as providing services, fulfilling legal obligations, or based on your consent.

3. Legal Basis for Data Processing

ECARIS processes your personal data based on one of the following legal grounds as defined in Article 6 of the GDPR:

• Your consent (Art. 6(1)(a)),
• The necessity of processing for the performance of a contract to which you are a party (Art. 6(1)(b)),
• Compliance with a legal obligation (Art. 6(1)(c)),
• Processing for legitimate interests pursued by ECARIS, provided these do not override your rights (Art. 6(1)(f)).

4. Data Protection Measures

We take appropriate technical and organizational measures to ensure the security of your personal data, including protecting it from unauthorized access, loss, or alteration. Your data is stored on secure systems and is only processed by authorized personnel for the purposes for which it was collected.

5. Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law. Once the data is no longer needed for its original purpose or any legal requirement, it will be securely deleted or anonymized.

6. Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: You can request access to the personal data ECARIS holds about you and obtain a copy of this data.
• Right to rectification: You can ask us to correct any inaccurate or incomplete personal data.