Privacy Policy

1. General Information

This Privacy Policy explains how Echonut collects, uses, stores, and shares personal information when you visit www.echonut.com, create an account, place an order, contact us, subscribe to our newsletter, or otherwise interact with our website and services.

For the purposes of this Privacy Policy, "Echonut", "we", "us", and "our" refer to Echonut, while "you" and "your" refer to customers, website visitors, account holders, newsletter subscribers, or other individuals whose personal information we process.

The controller responsible for processing your personal data is Echonut, a limited liability company organized and operating under the laws of the Republic of Kosovo, registered with the Kosovo Business Registration Agency (KBRA/ARBK) under unique identification number 812308676, with its registered address at "ish Depoja e Uratës, Hekurudhuat", p.n., 10000 Prishtina, Republic of Kosovo.

We process personal data in accordance with Law No. 06/L-082 on the Protection of Personal Data of the Republic of Kosovo and, where it applies to customers in the European Union, the General Data Protection Regulation (GDPR).

2. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business activities, website functionality, services, technologies, or legal requirements.

The updated version will be published on this page and the "Last updated" date at the top will be revised. Where required by law, we will also notify you of significant changes.

3. Personal Information We Collect

The personal information we collect depends on how you interact with Echonut and which services you use.

We collect information directly from you, automatically through the website, or from service providers that help us operate our business.

4. Information You Provide Directly to Us

When you use our website, place an order, create an account, or contact us, you may provide us with:

your first and last name;
email address;
telephone number;
billing and shipping address;
account login information;
order details and products purchased;
shopping cart and wishlist information;
communication preferences;
information submitted through contact forms;
customer service communications;
return, refund, warranty, or complaint information; and
any other information you choose to provide when communicating with us.

Where certain information is necessary to provide a service, we may not be able to complete your order or provide that service without it.

5. Order and Transaction Information

When you purchase a product, we process the information needed to complete and manage your order, including your name, billing and delivery address, email address, telephone number, products ordered, order value, payment confirmation, shipping information, order status, returns and refunds, and communication relating to the order.

We use this information to fulfil our contract with you, deliver your products, process payments, handle returns, and provide customer support.

6. Payment Information

Payments are processed by third-party payment providers, such as PayPal and our card payment provider.

Depending on the payment method you choose, these providers may collect your payment card details, billing information, or other payment-related information.

Echonut does not receive or store your complete payment card information. We only receive the payment confirmation, transaction reference, payment status, and the information needed to match the payment to your order.

Payment providers process personal information according to their own privacy policies and legal obligations.

7. Customer Account Information

If you create a customer account, we process your name, email address, login credentials, saved addresses, previous orders, wishlist, and account preferences.

We use this information to create and maintain your account, show your previous purchases, manage your addresses and preferences, and make future purchases easier.

You are responsible for keeping your login credentials confidential. If you suspect unauthorized access to your account, please contact us as soon as possible.

8. Information About Your Use of Our Website

When you use our website, certain technical and usage information is collected automatically, including:

IP address;
browser type, device type, and operating system;
language settings;
approximate location derived from technical information;
pages visited, products viewed, and links clicked;
time and duration of visits;
shopping cart interactions; and
referral source.

This information is collected through cookies, server logs, and similar technologies. We use it to operate the website, fix technical problems, improve performance and security, and, where you have consented, analyze how the website is used.

9. Cookies and Similar Technologies

Cookies are small files stored on your device when you visit a website.

Some cookies are necessary for the website to work, for example to keep your shopping cart, keep you logged in, process the checkout, maintain security, and remember your privacy choices.

Other cookies are used only with your consent, for purposes such as:

analytics and website performance;
personalization and remembering preferences; and
marketing or advertising.

You can accept or reject non-essential cookies through the cookie banner and change your choice at any time on our Privacy Settings page. You can also block or delete cookies in your browser, but this may affect how the website works.

10. How We Use Your Personal Information

Providing products and services: to process orders, accept payments, arrange shipping, manage returns and refunds, maintain customer accounts, and provide customer service.

Customer communication: to contact you about your orders, payments, delivery, returns, warranty requests, account, or inquiries.

Website operation and improvement: to maintain, secure, analyze, and improve our website and services.

Security and fraud prevention: to detect and prevent fraud, unauthorized transactions, security incidents, and misuse of our website.

Legal compliance: to meet our legal, tax, and accounting obligations and respond to lawful requests from authorities.

Marketing: to send you information about Echonut products, collections, offers, and news, only where you have consented or where otherwise permitted by law.

11. Legal Bases for Processing

We process your personal information on the following legal bases:

Performance of a contract: to process and deliver your order or provide a service you requested.
Legal obligation: to comply with applicable laws, including tax and accounting requirements.
Consent: for example, for newsletters and optional cookies. You can withdraw your consent at any time.
Legitimate interests: for example, to improve our website, prevent fraud, maintain security, and respond to customers, provided your rights and interests do not override those interests.

12. Marketing and Newsletter Communications

If you subscribe to our newsletter, we may send you information about new products and collections, promotions, Echonut projects, acoustic design, sustainable interior solutions, and company news.

You can unsubscribe at any time using the link in any marketing email or by contacting us.

Unsubscribing does not stop service messages that are necessary for an order, payment, delivery, customer account, or return.

13. How We Share Personal Information

We only share personal information where this is necessary to run our business and provide our services. Recipients may include:

payment providers;
shipping companies;
hosting and IT service providers;
email and communication providers;
analytics providers;
accounting and professional advisers; and
authorities, where required by law.

These recipients only receive the information they need to perform their services. Where required, we use contracts and technical safeguards to protect your information.

We do not sell your personal information.

14. Shipping Providers

To deliver your order, we share your name, delivery address, telephone number, email address, and shipment reference with the shipping company handling your delivery, such as DPD or DHL.

Shipping companies process this information according to their own legal obligations and privacy policies.

15. Analytics and Website Services

We may use analytics and technical service providers to understand website performance and visitor behavior. These services may process device and browser information, IP addresses, page visits, and website interactions.

Analytics that require consent are only activated if you accept them through the cookie banner or our Privacy Settings page.

16. Third-Party Websites and Services

Our website may contain links to third-party websites or services. These are operated independently and process personal information under their own privacy policies.

Echonut is not responsible for the privacy practices or content of third-party websites or services.

17. Product Reviews and User-Generated Content

If you submit product reviews, comments, photographs, or other content to public areas of our website, this content may be visible to anyone.

Please do not include personal or sensitive information in public content.

18. Security of Personal Information

Echonut uses appropriate technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

However, no internet transmission or storage system can be guaranteed to be completely secure. Please help protect your account by keeping your password confidential.

19. Retention of Personal Information

We keep personal information only as long as necessary for the purposes for which it was collected. The retention period depends on:

whether you have an active customer account;
whether we need the information to complete an order;
warranty and return periods;
tax and accounting obligations;
legal limitation periods; and
the resolution of disputes and the protection of legal rights.

When personal information is no longer needed, it is deleted or anonymized, unless we are legally required to keep it.

20. Your Data Protection Rights

Under applicable law, you have the following rights regarding your personal information:

Access: to know whether we process your data and to receive a copy of it.
Correction: to have inaccurate or incomplete data corrected.
Deletion: to have your data deleted where the legal requirements are met.
Restriction: to request that we temporarily restrict certain processing.
Objection: to object to processing based on legitimate interests.
Data portability: to receive your data in a structured, commonly used format or have it transferred to another controller.
Withdrawal of consent: to withdraw your consent at any time. This does not affect processing carried out before the withdrawal.
Marketing preferences: to unsubscribe from marketing communications at any time.

To exercise any of these rights, please contact us using the details in section 27.

21. Verification of Requests

Before responding to a privacy request, we may need to verify your identity to protect your information from unauthorized access, alteration, or deletion.

If you make a request through an authorized representative, we may ask for proof that they are authorized to act on your behalf.

22. Children's Privacy

Our website and products are not directed at children, and we do not knowingly collect personal information from children.

If a parent or legal guardian believes that a child has provided us with personal information, they can contact us and we will delete it where appropriate.

23. International Data Transfers

Some of our service providers may process or store personal information outside the Republic of Kosovo or outside the country in which you live.

Where personal information is transferred internationally, we use appropriate safeguards required by applicable law, such as contractual protections.

24. Complaints

If you have a concern about how we process your personal information, please contact us first so we can review it.

You also have the right to lodge a complaint with the Information and Privacy Agency of the Republic of Kosovo or, if you live in the European Union, with the data protection authority in your country.

25. Automated Decision-Making

Echonut does not make decisions with legal or similarly significant effects based solely on automated processing.

26. Changes in Business Ownership

If Echonut undergoes a restructuring, merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction where legally permitted. It will remain subject to applicable data protection requirements.

27. Contact Information

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Echonut
"ish Depoja e Uratës, Hekurudhuat", p.n.
10000 Prishtina
Republic of Kosovo
Unique Identification Number: 812308676
Email: info@echonut.com