Privacy policy

EcoFuture Solutions (project in its development and pre-launch phase)

[responsible person and business address will be added before public launch]

Email: info@ecofuturesolutions.de

This website is built and technically provided via the Lovable platform. When the site is accessed, technically necessary data may be processed, in particular IP address, date and time, requested URL, referrer, browser, operating system or device and status codes.

Purposes: technical provision, security, error analysis and abuse prevention.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable operation of the website).

Further information on processing by the platform provider: https://lovable.dev/privacy

The access data described above may be stored in server log files in order to ensure technical operation and to detect faults or misuse.

Legal basis: Art. 6 (1) (f) GDPR.

Data are deleted or their processing restricted as soon as the purpose no longer applies and no statutory retention obligations conflict.

Contact is currently possible by email to info@ecofuturesolutions.de only. The data you provide are processed solely in order to handle your enquiry.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in handling incoming enquiries), or Art. 6 (1) (b) GDPR for pre-contractual enquiries.

Data are deleted once the enquiry has been finally dealt with and no statutory retention obligations conflict.

Via the contact form of this website („project enquiry“) we process the details you provide: name, email address, property type and project description (mandatory) as well as, optionally, company, phone number, location/postcode, project stage and area of interest.

The details are stored in order to handle your enquiry, forwarded to us internally by email and acknowledged by an automatic receipt sent to your email address.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in handling incoming enquiries).

To protect against automated submissions we use an invisible additional field (honeypot), a simple timing check and a server-side submission rate limit based on a hashed IP address. The IP address itself is not stored in clear text. No service such as Google reCAPTCHA is used.

Data are deleted once the enquiry has been finally dealt with and no statutory retention obligations conflict.

The language (German / English) is selected via the requested address. In addition, the most recently chosen language may be stored locally in the browser (localStorage) as a technically necessary convenience. This information is not transmitted to us.

This first-party reach measurement takes place within our own infrastructure and is activated with the “Statistics” category; the data it collects are not shared with advertising networks. For the use of Google Tag Manager see section 7a.

Purpose: to understand which content is found and used, how visitors navigate the site and where enquiries originate, in order to improve the content, structure and technical quality of the website.

Pseudonymous identifiers: after your consent, a randomly generated visitor identifier and a session identifier are stored locally in your browser (localStorage) as random UUIDs — no fingerprinting, no cookies. A session ends after 30 minutes of inactivity. These identifiers contain no personal details and are not combined with your name.

Data processed: page paths and page titles (without query strings), time on page, scroll depth, clicks on interface elements, language code, time zone, screen and window size, device category as well as browser and operating system family with major version. Form content is never sent to the analytics system.

Origin and UTM parameters: we store the referrer domain (not the full URL) and — if present in the requested address — only the campaign parameters utm_source, utm_medium, utm_campaign, utm_term and utm_content. All other query parameters, in particular click identifiers such as gclid, fbclid or msclkid, are removed before storage.

Approximate location: a coarse location at country, region and city level is derived from technical information provided by the upstream network. This information is approximate and serves regional classification only. The IP address itself is not stored for reach measurement.

Link to enquiries: if an enquiry is submitted via the website, it may — only where consent has been given — be linked to the pseudonymous session in order to understand how the contact came about.

Legal basis: Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG (consent for storing the identifiers on your device). Without consent no reach measurement takes place; a “Global Privacy Control” signal sent by your browser is treated as a refusal.

Withdrawal: you can withdraw your consent at any time with effect for the future via “Privacy settings” in the footer. The locally stored identifiers are deleted in the process.

Retention: analytics data are deleted automatically after 90 days.

We use Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to manage optional analytics and marketing technologies. Google Tag Manager is only loaded after you have consented to the “Statistics” and/or “Marketing” category via the “Privacy settings” dialog. Without consent, no connection to Google Tag Manager is established.

When Google Tag Manager is loaded, your IP address is technically transmitted to Google. Processing in third countries, in particular the USA, cannot be ruled out.

We use Google Consent Mode. By default all signals (analytics_storage, ad_storage, ad_user_data, ad_personalization) are denied and are only granted according to your actual choice: “Statistics” grants analytics_storage, “Marketing” grants ad_storage, ad_user_data and ad_personalization.

Only technical events without personal details are sent to Google via the website, such as clicks on contact buttons or the successful submission of an enquiry. Form content, names, email addresses or phone numbers are not transmitted.

Google Analytics and Google Ads conversion tracking are technically prepared but currently not set up. This policy will be updated before they are activated.

Legal basis: Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG (consent).

Your choice is stored locally in your browser (localStorage); no user identifier is created. You can change or withdraw your decision at any time via “Privacy settings” in the footer.

Further information: https://policies.google.com/privacy

The fonts used are served locally from this server. No connection to Google Fonts or comparable external font services is established when the site is accessed.

Personal data are only transmitted to technical service providers or processors where this is necessary for hosting, operation, security or communication, or where there is a legal basis.

With the technical service providers used, processing outside the EU or EEA cannot be entirely excluded. In such cases the requirements of Art. 44 et seq. GDPR are observed.

Personal data are stored only for as long as required for the respective purpose or by statutory retention obligations.

Access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), objection (Art. 21 GDPR) and withdrawal of consent (Art. 7 (3) GDPR) – where applicable in each case.

Berlin Commissioner for Data Protection and Freedom of Information

Alt-Moabit 59–61, 10555 Berlin

Email: mailbox@datenschutz-berlin.de

Website: www.datenschutz-berlin.de

Appropriate technical and organisational measures are used to protect personal data against loss, misuse and unauthorised access. Transmission is encrypted (TLS).

This privacy policy may be adapted if technical functions, the services used or legal requirements change.

Last updated: August 2026

Applications are handled exclusively by email to info@ecofuturesolutions.de. There is no applicant database and no upload portal.

We process the data you send us, in particular your name, contact details and the content and attachments of your application (e.g. CV, work samples).

Purpose: reviewing and handling your application and communicating with you during the process.

Legal basis: Sec. 26 (1) BDSG resp. Art. 6 (1) (b) GDPR (steps prior to an employment relationship); for unsolicited applications Art. 6 (1) (f) GDPR.

Storage period: application documents are deleted once the process has been concluded, unless you have consented to longer storage or statutory retention obligations apply.

Recipients: only the persons involved in handling the application and the email service provider as part of the technical provision.