Data protection and data security are important to the Grownate AG («Grownate»; «we»). We process your personal data responsibly, in accordance with applicable laws, and as described in our privacy notice.
1.1.1Content of this Privacy Notice
In this Privacy Notice («Privacy Notice), we explain how we collect and process personal data (data that directly or indirectly identifies you) when you visit https://www.Grownate.co («Website»), use our social media company pages, contact us, attend our events or use our services.
Controller of the data processing
Grownate is the controller of the data processing described in this Privacy Notice. If you have any questions or would like to exercise your statutory data protection rights, please contact us at:
info@Grownate.co or write to:
Personal data we process in order to respond to your inquiries and to inform about our services
We collect the information you provide to us in the following instances:
When you contact us and communicate with us, when you apply for a job with us, when you use our services, when you register and use our online platform, or when you register for an event.
This includes general personal data, such as name and contact details, and details of your position or role with the organisation on whose behalf you are contacting us.
We also process personal data that we receive from third parties. This regularly includes personal data that we receive in correspondence or in meetings with customers or business partners e.g. your name and details of your status within a company.
To the extent necessary to achieve the purposes described in this Privacy Notice, we also collect general personal data from publicly accessible registers, Websites or platforms (e.g. to verify your authorization to sign) or by obtaining information from third parties (e.g. for reference purposes in the application process if you consent to this).
1.1.2 Making available and using our Website and Grownate App
Usage for information
You can visit the Website and find out about our services without telling us who you are. As with any connection to a web server, the server on which we provide the Website automatically logs and stores certain technical data. This includes the IP address, the date and time of access and other information that your browser sends when you access a website (e.g. browser name and version, operating system, preferred language).
Use of our platform through our Web App or native mobile App
We operate Grownate App ("Online Platform"). When you register as a user on the Online Platform, we collect the information you provide to us. This includes general personal data such as name and email address as well as personal information in connection to donations that you or other third parties, upload, generate, store and process when using the Online Platform.
If you use grownate’s donation function or order paid services, we also ask for your financial data, e.g. your credit card number, preferred payment method and billing address.
We also process personal data that we receive from third parties. If you signed up for grownate’s donation function and linked your credit card, we will receive information on the amount of your purchases that you have made at participating partners locations (e.g., branch) or web stores. We will receive this information through our payment partner.
We use Google Analytics, an analysis service provided by Google LLC ("Google"), to evaluate the use of our Website and to obtain information for its optimization. Google Analytics collects and stores user data using cookies. Prior to their transmission to a server in the USA, Google truncates the requesting IP addresses. Thus, in the context of our use of Google Analytics, no personal data is transmitted to the USA.
The social plug-ins (share buttons) used on the Website enable you to recommend and share our content on social networks. You can recognize the social plug-ins on the Website by the logos of the respective social network. When you interact with the social plugin, data is sent to the respective provider of the social network. This is done using cookies. Please refer to the data protection information of the respective provider.
For further information, please refer to our transparency statement on the integration of third-party services
Choices regarding cookies
You can set your browser not to accept cookies or to ask each time before storing a cookie. You can also delete cookies on your device by using the corresponding function of your browser. In addition, you have the option to inform us of your preferences regarding the acceptance of cookies via the cookie preferences tool provided on the Website.]
Use of our social media company pages
On the company pages on social media platforms, you will find posts on current developments at our association and our range of services. The social media platform collects and analyses usage data such as the number of visitors and demographic information about the visitors of our company page.
We receive reports based on this data. The reports only contain aggregated or otherwise sufficiently anonymized data. Only the providers of the respective social network can identify you on the basis of the usage data collected.
1.1.3 Use and optimization of our newsletter
If you are interested in our newsletter, we collect the information you provide to us. This includes general personal data such as first name, last name and email address.
If you click on the opt-out link at the end of the news alert, we will no longer measure and analyze your use of the news alerts in the future. You can also let us know at any time that you would like to discontinue receiving our news alerts in the future. To do so, please activate the unsubscribe link at the end of the newsletters.
1.1.4 For what purposes we process your personal data and on which basis
We process your personal data primarily in order to inform you about our services and to provide, document and invoice our services in accordance with our contractual and legal obligations. But, mainly we process your personal information to keep track of your purchases at our company partners, so that you can allocate your donation.
We also process your personal data for the following additional purposes:
Processing your registration and provision of Grownate’s Online Platform
answering your inquiries and communicating with you
tracking user conent
processing registrations for events
marketing and advertising
processing job applications
making available the website, Web App and native Apps
analysis and optimization of the use of the website, Web App and native Apps
providing and optimizing our posts on our social media company pages
informing you about new services and developments at Grownate (whereby you may at any time notify us that you do not wish to receive such information in the future)
complying with legal obligations and enforcing legal claims
We or third parties have a legitimate interest in the data processing described here that corresponds to the mentioned purposes. Some processing is also necessary for us to comply with contractual obligations to you or with our legal obligations (e.g. data retention obligations). On this basis, we process your personal data if and to the extent that the applicable data protection law requires a legal basis or justification for the lawfulness of the data processing in general or for specific processing activities.
We also analyze and create reports based on aggregated user data. The reports only contain aggregated or otherwise sufficiently anonymized data.
1.1.5 How we store and protect your personal data
We store your personal data only to the extent and for as long as necessary to fulfill the purposes described in this Privacy Notice or to comply with legal obligations.
In the interest of the integrity and confidentiality of personal data, we take appropriate technical and organizational measures. In particular, we implement physical and logical access controls and procedures for the regular review, assessment and evaluation of the effectiveness of the measures in accordance with our risk assessment.
With whom we share your personal data
In order to achieve the purposes described in this Privacy Notice, it may be necessary for us to disclose your personal data to other business or organizations that decide themselves how to use the data. The categories of recipients are as follows:
external service providers (in particular Worldline)
authorities and courts, if necessary
Place of processing
We process your personal data primarily within Switzerland and the EU. At the moment we use a data center in Germany for the storage of our data. In order to achieve some of the purposes described above, it may also be necessary for us to process your personal data in countries outside Switzerland and the EU or to transfer it to such countries.
We process your personal data in or transfer the data to countries without adequate data protection on the basis of standard data protection clauses or legal exceptions (necessity for performance of a contract).
1.1.6 Your rights in relation to your personal data
You have the following rights with regard to personal data relating to you:
the right to obtain information about what personal data we hold about you and how we process it
the right to obtain a copy of your personal data in a commonly used format, or to have such copy transferred to another organization
the right to have your personal data rectified
the right to have your personal data deleted
the right to object to the processing of your personal data
Please note that you are entitled to these rights to different extents depending on the applicable data protection law, and that exceptions apply. To the extent permitted by applicable law, we may therefore refuse your request to exercise these rights. However, you have the right to lodge a complaint with a competent supervisory authority. In Grownate’s case the primary supervisory authority is the Federal Data Protection and Information Commissioner of Switzerland.
Last updated: 12.01.2023