As of December 2025
The person responsible within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:
EchoValley Technology (HK) Limited
Unit A53M186，29/F., Legend Tower, 7 Shing Yip Street, Kwun Tong, Kowloon HK
contact@noteswipe.com
https://www.noteswipe.com
The controller's data protection officer is:
EchoValley Technology (HK) Limited
Unit A53M186，29/F., Legend Tower, 7 Shing Yip Street, Kwun Tong, Kowloon HK
If your personal data is processed, you are a data subject within the meaning of the GDPR. GDPR and you have the following rights vis-à-vis the person responsible:
When processing your personal data, you as the data subject have the following rights vis-à-vis the controllers:
On our website and through our app, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.
The data will be used exclusively for the processing of the conversation.
In the case of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data.
The legal basis for the processing of the data is Article 6 (1) (a) GDPR if the user has given his consent.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) (f) GDPR. Our legitimate interest is to provide the best possible answer to your enquiry, which you send by e-mail.
If the aim of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data sent by e-mail, this is the case when the respective agreement with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
The user has the option to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
As a matter of principle, we do not process personal data of our users to the extent necessary to provide a functional website as well as our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is required by law.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) (a) GDPR serves as the legal basis.
In the processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. In addition, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected:
This data is stored in the log files of our system. This data is not stored together with other personal data of the user.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. In this case, the user's IP address must be stored for the duration of the session.
The data is stored in log files in order to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
For these purposes, we also have a legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR.
The legal basis for the temporary storage of data and log files is Art. 6 (1) (f) GDPR.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. It is possible that the data will be stored for a longer period of time. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. The user can object to this. Whether the objection is successful must be determined in the context of a balancing of interests.