Privacy Policy

1. Who We Are

EchoEV ("we", "our", "the Company") is operated by Alessandro Ferrini, VAT ID IT02486020973. You can reach our Data Protection Officer at public@alessandroferrini.com.

2. Personal Data We Collect

Category	Examples	Legal basis (GDPR)
Account data	Email, password (hash)	Contract (Art. 6‑1‑b)
Beta‑list	Email address	Consent (Art. 6‑1‑a)
Payment data	Name, billing address, last‑4 card digits (via Stripe)	Contract (Art. 6‑1‑b)
Usage data	Pages viewed, watch‑list sets, truncated IP	Legitimate interest (Art. 6‑1‑f)
Cookies	sessionid, umami analytics	See § 7

3. How We Use Your Data

• Create and manage your account.
• Display personalised EV analytics and watch‑lists.
• Send service e‑mails (password reset, EV alerts).
• Analyse the platform in aggregate to improve performance.
• Process payments and invoicing.

4. Sub‑processors

Provider	Country	Safeguard	Purpose
Render (hosting)	EU (DE)	SCC 2021	Serve the website
Upstash Redis	EU	SCC	Cache
Stripe Payments	USA / EU	SCC + BCR	Payment processing
Umami	EU	SCC	Anonymous analytics

5. International Transfers

Where data is transferred outside the EEA we rely on Standard Contractual Clauses (SCC 2021) and, where required, additional technical safeguards such as encryption at rest and in transit.

6. Retention Periods

Data	Retention
Active account	As long as the account remains active
Beta‑list	Deleted after 12 months of inactivity
Invoices	10 years (tax obligations)
Server logs	30 days, then anonymised

7. Cookies

Type	Name	Duration	Purpose
Essential	sessionid	14 days	Maintains user session
Preference	locale	1 year	Remembers language preference
Analytics (anonymous)	umami_*	13 months	Aggregated traffic analysis

You can disable non‑essential cookies via the cookie banner or your browser settings. Essential cookies cannot be disabled as they are necessary for the site to function.

8. Your Rights

Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data. We respond within 30 days. You may lodge a complaint with the Italian Data Protection Authority (Garante).

9. Security

We implement HTTPS/TLS 1.3, AES‑256 encryption at rest, daily backups, and zero‑trust access controls. No plaintext personal data is stored in logs.

10. Changes

We may update this Privacy Policy from time to time. Any changes will be posted on this page and, if material, notified to you via e‑mail.

Last updated: 22 July 2025.