PRIVACY POLICY

Last Updated: October 2025

1. Operational Scope & Overview

EcoHub operates as a commercial waste management, recycling, and secure destruction service provider registered in Albania. We are committed to safeguarding personal and corporate data collected through our digital interfaces and operational contracts. This Privacy Policy sets out the data processing principles, security measures, and legal compliance structures governing our interactions with clients, partners, and website visitors.

2. Data Collection Mechanisms

To fulfill contractual duties and provide specialized services, we systematically collect information categorised as follows:

• Identifiable Representative Information: Full name, official corporate email address, telephone contact, job title, and physical facility locations provided during service inquiry or onboarding.
• Contractual & Operational Documentation: Corporate registration codes, billing references, waste volume specifications, and logistical delivery schedules.
• Technical Analytics & Tracking: IP addresses, device browser metrics, session duration, and cookie identifiers automatically logged during website navigation for system optimization.

3. Legal Grounds & Processing Objectives

All processing activities adhere strictly to Law No. 9887 'On Protection of Personal Data' in Albania, as well as applicable international standards. Information is processed strictly for:

• Execution of commercial recycling contracts and service-level commitments.
• Issuance of compliance documentation, official recycling certificates, and audit trails.
• Ensuring institutional safety, document destruction verification, and regulatory environmental reporting.

4. Protocols for Secure Shredding & Destruction

For clients utilizing our specialized Secure Shredding services, EcoHub maintains strict Chain of Custody procedures. Physical materials and electronic storage drives entrusted to us are kept within secure containment, monitored via surveillance, and destroyed beyond reconstruction according to international DIN standards. Any data contained on physical media collected for destruction is neither read, indexed, nor retained in any intermediate server.

5. Third-Party Disclosures & Data Sharing

We do not sell, lease, or trade corporate or personal information to third-party marketers. Data disclosures are strictly restricted to authorized logistics subcontractors acting on our behalf under confidentiality agreements, or when mandated by law enforcement and environmental regulatory bodies.

6. Data Retention & Client Rights

Client administrative data is stored only for the duration required by fiscal laws and operational needs. Clients retain full rights to request formal access, correction, or deletion of personal data processed outside of statutory retention mandates. Official requests must be submitted in writing to our data handling contact.

7. Contact Information