Privacy Policy
Last Updated: February 16, 2026
1. Data Controller
EcoOffice AS
Org.nr: [Your Organization Number]
Email: privacy@ecooffice.net
Address: [Your Business Address]
2. Data We Collect
- Contact Information: Name, email, phone number when you contact us
- Website Usage: IP address, browser type, pages visited (via anonymized analytics)
- Service Data: Information you provide when using our CSRD tools and services
3. Purpose of Processing
- To provide CSRD compliance services and tools
- To respond to inquiries and support requests
- To improve our website and services
- To comply with legal obligations (CSRD, GDPR, etc.)
4. Legal Basis
- Contract: Processing necessary for service delivery
- Consent: For marketing communications (opt-in required)
- Legal Obligation: Compliance with CSRD and sustainability reporting requirements
- Legitimate Interest: Website security and improvement
5. Data Retention
- Contact inquiries: 3 years
- Service data: 7 years (statutory retention for business records)
- Website analytics: 26 months (anonymized)
6. Your Rights (GDPR)
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Restriction: Limit how we use your data
- Portability: Receive your data in machine-readable format
- Objection: Object to certain processing activities
7. Data Processors
- Web Hosting: Hetzner Cloud (Germany)
- Email Service: Zoho EU (Netherlands)
- Analytics: Self-hosted Matomo or anonymized Google Analytics
8. International Transfers
All data processed within EU/EEA. No transfers to third countries without adequate safeguards.
9. Cookies
We use essential cookies for website functionality. Optional analytics cookies require consent.
10. Contact & Complaints
For privacy inquiries: privacy@ecooffice.net
For complaints: Contact your local Data Protection Authority
11. Changes to This Policy
We may update this policy. Significant changes will be notified via email or website notice.