1. Scope and current website status
This notice applies to the public ECNETNews website and to direct correspondence sent to info@ecnetnews.com. The website does not provide user accounts, subscriptions, purchases, public comments, personalised advertising, or an online contact form.
The site provides information about the ECNETNews brand, selected historical milestones, and its regional focus. If additional features process further personal data, an updated or feature-specific notice will be provided before or when the relevant processing begins.
The present site is intentionally privacy-light: it contains no third-party advertising scripts, social-media pixels, embedded video players, or behavioural analytics.
2. Controller and privacy contact
For personal data processed through this website and the contact address stated below, the data controller is identified as ECNETNews.
Privacy questions, objections, and data-rights requests may be sent to info@ecnetnews.com. No separate data-protection-officer contact is published.
3. Categories of personal data we may process
Depending on how you interact with the website, the following limited categories of information may be processed:
- Technical access data: IP address, date and time, requested address, referring address where supplied, browser and device information, response code, transferred-data volume, and diagnostic information recorded by web-server, hosting, network, or security systems.
- Email and correspondence data: your email address, name or display name, organisation if you provide it, message content, attachments, metadata, and subsequent correspondence.
- Rights and verification data: information reasonably needed to understand and process a privacy, copyright, trademark, correction, security, or other legal request and, where necessary, to verify that a request is genuine and authorised.
- Security and abuse data: technical indicators, suspicious request patterns, reports, and investigation records used to protect the website, users, and infrastructure.
Please do not send special-category data, highly sensitive information, confidential source material, identity documents, or information about another person unless it is necessary, lawful, and proportionate for the specific request.
4. Purposes and legal bases
Where applicable data-protection law requires a legal basis, personal data may be processed for the following purposes and bases:
- Delivering the website: to respond to browser requests, transmit pages, and maintain basic functionality. The basis is the legitimate interest in making the website available and, where relevant, taking steps requested by a visitor.
- Security and reliability: to detect attacks, prevent abuse, troubleshoot faults, protect infrastructure, maintain backups, and investigate incidents. The basis is the legitimate interest in secure and reliable operation and, where applicable, compliance with legal obligations.
- Responding to messages: to review and answer enquiries, permissions requests, proposals, rights notices, and security reports. The basis may be legitimate interests, steps requested before a possible agreement, compliance with legal obligations, or consent where specifically requested.
- Records and legal claims: to document important communications, demonstrate compliance, enforce rights, and establish, exercise, or defend legal claims. The basis is legitimate interests and, where applicable, legal obligations.
- Website improvement: to understand technical performance and improve the website using aggregate or non-identifying operational information. The basis is the legitimate interest in improving the service without behavioural tracking.
When legitimate interests are relied upon, the interests are assessed against the nature of the data, the context of processing, reasonable expectations, and potential effects on individuals.
5. Server, hosting, and security logs
Like most websites, the production hosting environment may automatically create access and error logs when a page is requested. These records are used to deliver content, identify technical faults, investigate abuse, and protect the website. They are not intended to create behavioural profiles.
Ordinary access logs should normally be configured for deletion or anonymisation within approximately 30 days. A specific record may be retained for longer where it is connected to a security event, abuse investigation, legal obligation, or legal claim. Production hosting settings should be maintained consistently with this notice.
6. Email correspondence
When you email ECNETNews, the information in your message is processed to understand, route, document, and respond to the enquiry. Email delivery necessarily involves mail servers and network providers, and message metadata may be processed for spam filtering, malware scanning, delivery, and security.
Ordinary email is not guaranteed to be confidential or end-to-end encrypted. Do not use the published email address as a confidential source-submission channel or send information that is not needed for the enquiry.
8. Recipients and service providers
Personal data may be processed by providers supporting website hosting, domain and DNS services, email delivery, security, backups, and technical maintenance. Those providers may process information only as needed to perform their services, protect systems, comply with law, or follow valid instructions.
Information may also be disclosed to professional advisers, courts, regulators, law-enforcement authorities, or other recipients where reasonably necessary to comply with law, respond to valid legal process, protect rights and safety, investigate abuse, or establish, exercise, or defend legal claims.
Personal data is not sold through the website and is not shared for behavioural advertising.
9. International data transfers
Internet, hosting, security, and email services may involve processing in more than one country. Where personal data is transferred from the European Economic Area, the United Kingdom, or another jurisdiction that regulates international transfers, the relevant provider or recipient should rely on an applicable adequacy decision, approved contractual safeguards, or another lawful transfer mechanism.
The safeguards that apply in practice depend on the production providers and locations used at the time of processing.
10. Retention periods
Information is retained only for as long as reasonably needed for the purpose for which it was collected, subject to security needs, legal obligations, backup cycles, and the protection of rights.
- Ordinary server logs: normally up to approximately 30 days, unless a record is needed for a security investigation or legal matter.
- Routine enquiries: normally for the duration of the enquiry and up to 24 months after the last substantive correspondence, unless earlier deletion is appropriate.
- Rights, security, and legal records: for the time reasonably necessary to investigate, respond, demonstrate compliance, and protect legal rights, including applicable limitation periods.
- Backups: removed through the normal backup-rotation cycle after deletion from active systems.
Data may be anonymised instead of deleted where the resulting information can no longer reasonably identify an individual.
11. Your data-protection rights
Depending on the law that applies, you may have rights to request access to personal data, correction of inaccurate information, deletion, restriction, portability, or objection to certain processing. Where processing is based on consent, you may withdraw consent for future processing without affecting processing that was lawful before withdrawal.
You may object at any time to processing based on legitimate interests where your particular situation provides grounds for doing so. A request may be limited or refused where an applicable law provides an exception, where another person's rights would be affected, or where information must be retained for legal reasons.
To exercise a right, email info@ecnetnews.com and describe the request. Reasonable information may be requested to verify identity, authority, and the scope of the request. ECNETNews will not request more verification data than reasonably necessary.
12. Complaints to a supervisory authority
Where the GDPR or comparable law applies, you may have the right to complain to a competent data-protection supervisory authority, including an authority in the country of your habitual residence, place of work, or the place of an alleged infringement. You may contact ECNETNews first, but doing so does not remove a statutory right to approach an authority directly.
13. Information security
Reasonable technical and organisational measures are used to support the confidentiality, integrity, and availability of the website and correspondence. Measures may include access controls, software updates, secure transport, backups, logging, and restrictions on unnecessary third-party code.
No internet or email system can be guaranteed to be completely secure. You should minimise the information you send and use an appropriate secure channel where the sensitivity of the information requires one.
14. Children
The website is intended for a general audience and is not directed specifically to children. ECNETNews does not knowingly seek personal data from children through the site. A parent or guardian who believes a child has sent personal data may contact us to request review and appropriate action.
15. External websites and email applications
Links to third-party websites and the email application you choose to use are governed by the privacy practices of those third parties. This notice does not control information collected after you leave the ECNETNews website or by your own email provider.
16. Changes to this notice
This notice may be updated when the website, production providers, data practices, or legal requirements change. The current version will be posted on this page with a revised date. Material new processing will not be described only retroactively.
17. Contact
Privacy questions, requests, and objections may be sent to info@ecnetnews.com. Please use a clear subject line and do not include sensitive information that is not needed for the request.