Privacy Policy

Introduction

EchoSummoner SARL ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you visit our website echosummoner.world or use our services.

We are the data controller for the personal data we collect and process. Our registered office is located at Boulevard de la Pétrusse 58, 1970 Luxembourg City, Luxembourg. For any privacy-related enquiries, you can contact us at privacy@echosummoner.world.

Data Collection

The data we collect includes personal information that you provide to us directly and information that we collect automatically when you use our website and services.

Information You Provide

• Contact details (name, email address, phone number)
• Company information and professional details
• Messages and enquiries sent through our contact forms
• Communication preferences and consent records
• Any other information you choose to share with us

Information Collected Automatically

• IP address and location data
• Browser type and version
• Device information and operating system
• Website usage patterns and analytics data
• Referral sources and marketing campaign data

How We Use Your Information

How we use your information depends on the services you use and your relationship with us. We process your personal data for the following purposes:

• Service Delivery: To provide our EdTech consulting services and respond to your enquiries
• Communication: To contact you about our services, send updates, and respond to your questions
• Business Operations: To manage our client relationships and improve our services
• Legal Compliance: To comply with applicable laws and regulations
• Marketing: To send relevant marketing communications (with your consent)
• Analytics: To understand how our website is used and improve user experience

The legal basis for processing your data includes your consent, our legitimate business interests, contractual necessity, and legal obligations under GDPR and other applicable regulations.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Third Parties

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party companies that help us operate our business (hosting, analytics, email services)
• Legal Authorities: When required by law or to protect our rights and safety
• Business Partners: With your explicit consent for specific purposes
• Google Services: We use Google Analytics and Google Ads, which may collect data according to their privacy policies

All third parties are required to maintain appropriate security measures and use your data only for the specified purposes.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law.

• Client Data: Retained for the duration of our business relationship plus 7 years for legal compliance
• Marketing Data: Retained until you withdraw consent or for 3 years of inactivity
• Website Analytics: Typically retained for 26 months (Google Analytics default)
• Communication Records: Retained for 3 years for customer service purposes

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data in certain circumstances
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise any of these rights, please contact us at privacy@echosummoner.world or +352 27643379.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure hosting and backup procedures

International Data Transfers

We primarily process data within the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved mechanisms.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the "last updated" date.

Contact Information

If you have questions about this Privacy Policy or how we handle your personal data, please contact us:

You also have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD) if you believe we have not handled your personal data in accordance with applicable laws.