Data protection and data security are important to the Grownate AG («Grownate»; «we»). We process your personal data responsibly, in accordance with applicable laws, and as described in our privacy notice.

​

1.1.1Content of this Privacy Notice

In this Privacy Notice («Privacy Notice), we explain how we collect and process personal data (data that directly or indirectly identifies you) when you visit https://www.Grownate.co («Website»), use our social media company pages, contact us, attend our events or use our services.

 

Controller of the data processing

Grownate is the controller of the data processing described in this Privacy Notice. If you have any questions or would like to exercise your statutory data protection rights, please contact us at:

info@Grownate.co or write to:

 

Grownate AG

Dufourstrasse 43

8008 Zurich

Switzerland.

 

Personal data we process in order to respond to your inquiries and to inform about our services

We collect the information you provide to us in the following instances:

When you contact us and communicate with us, when you apply for a job with us, when you use our services, when you register and use our online platform, or when you register for an event.

This includes general personal data, such as name and contact details, and details of your position or role with the organisation on whose behalf you are contacting us.

We also process personal data that we receive from third parties. This regularly includes personal data that we receive in correspondence or in meetings with customers or business partners e.g. your name and details of your status within a company.

To the extent necessary to achieve the purposes described in this Privacy Notice, we also collect general personal data from publicly accessible registers, Websites or platforms (e.g. to verify your authorization to sign) or by obtaining information from third parties (e.g. for reference purposes in the application process if you consent to this).

​

1.1.2 Making available and using our Website and Grownate App

Usage for information

You can visit the Website and find out about our services without telling us who you are. As with any connection to a web server, the server on which we provide the Website automatically logs and stores certain technical data. This includes the IP address, the date and time of access and other information that your browser sends when you access a website (e.g. browser name and version, operating system, preferred language).

Use of our platform through our Web App or native mobile App

We operate Grownate App ("Online Platform"). When you register as a user on the Online Platform, we collect the information you provide to us. This includes general personal data such as name and email address as well as personal information in connection to donations that you or other third parties, upload, generate, store and process when using the Online Platform.

If you use grownate’s donation function or order paid services, we also ask for your financial data, e.g. your credit card number, preferred payment method and billing address.

We also process personal data that we receive from third parties. If you signed up for grownate’s donation function and linked your credit card, we will receive information on the amount of your purchases that you have made at participating partners locations (e.g., branch) or web stores. We will receive this information through our payment partner.

 

[Web analysis

We use Google Analytics, an analysis service provided by Google LLC ("Google"), to evaluate the use of our Website and to obtain information for its optimization. Google Analytics collects and stores user data using cookies. Prior to their transmission to a server in the USA, Google truncates the requesting IP addresses. Thus, in the context of our use of Google Analytics, no personal data is transmitted to the USA.

Social-Plugins

The social plug-ins (share buttons) used on the Website enable you to recommend and share our content on social networks. You can recognize the social plug-ins on the Website by the logos of the respective social network. When you interact with the social plugin, data is sent to the respective provider of the social network. This is done using cookies. Please refer to the data protection information of the respective provider.

[Use of cookies

We use cookies and similar technologies on the Website to provide you with the best possible user experience, to help us improve our services, and to promote our services. Cookies are text files that are downloaded to your computer or mobile device when you visit a website or use an app.

Some of the cookies used are necessary in order to make available certain features of the Website (e.g. the contact form, the integration of YouTube videos and features that facilitate the sharing of our content on social media). We also use cookies to analyze the use of the Website, to optimize our services and to enable the use of advertising technologies.

For further information, please refer to our transparency statement on the integration of third-party services

Choices regarding cookies

You can set your browser not to accept cookies or to ask each time before storing a cookie. You can also delete cookies on your device by using the corresponding function of your browser. In addition, you have the option to inform us of your preferences regarding the acceptance of cookies via the cookie preferences tool provided on the Website.]

Use of our social media company pages

On the company pages on social media platforms, you will find posts on current developments at our association and our range of services. The social media platform collects and analyses usage data such as the number of visitors and demographic information about the visitors of our company page.

 

We receive reports based on this data. The reports only contain aggregated or otherwise sufficiently anonymized data. Only the providers of the respective social network can identify you on the basis of the usage data collected.

​

1.1.3 Use and optimization of our newsletter

If you are interested in our newsletter, we collect the information you provide to us. This includes general personal data such as first name, last name and email address.

If you click on the opt-out link at the end of the news alert, we will no longer measure and analyze your use of the news alerts in the future. You can also let us know at any time that you would like to discontinue receiving our news alerts in the future. To do so, please activate the unsubscribe link at the end of the newsletters.

You can sign-up for newsletters of our company partners through the Online Platform. In that case the company partner’s Privacy Policy will apply.

​

1.1.4 For what purposes we process your personal data and on which basis

We process your personal data primarily in order to inform you about our services and to provide, document and invoice our services in accordance with our contractual and legal obligations. But, mainly we process your personal information to keep track of your purchases at our company partners, so that you can allocate your donation.  

We also process your personal data for the following additional purposes:

• Processing your registration and provision of Grownate’s Online Platform

• answering your inquiries and communicating with you

• tracking user conent

• processing registrations for events

• marketing and advertising

• processing job applications

• making available the website, Web App and native Apps

• analysis and optimization of the use of the website, Web App and native Apps

• providing and optimizing our posts on our social media company pages

• informing you about new services and developments at Grownate (whereby you may at any time notify us that you do not wish to receive such information in the future)

• complying with legal obligations and enforcing legal claims

We or third parties have a legitimate interest in the data processing described here that corresponds to the mentioned purposes. Some processing is also necessary for us to comply with contractual obligations to you or with our legal obligations (e.g. data retention obligations). On this basis, we process your personal data if and to the extent that the applicable data protection law requires a legal basis or justification for the lawfulness of the data processing in general or for specific processing activities.

We also analyze and create reports based on aggregated user data. The reports only contain aggregated or otherwise sufficiently anonymized data.

​

1.1.5 How we store and protect your personal data

We store your personal data only to the extent and for as long as necessary to fulfill the purposes described in this Privacy Notice or to comply with legal obligations.

In the interest of the integrity and confidentiality of personal data, we take appropriate technical and organizational measures. In particular, we implement physical and logical access controls and procedures for the regular review, assessment and evaluation of the effectiveness of the measures in accordance with our risk assessment.

With whom we share your personal data

In order to achieve the purposes described in this Privacy Notice, it may be necessary for us to disclose your personal data to other business or organizations that decide themselves how to use the data. The categories of recipients are as follows:

• external service providers (in particular Worldline)

• authorities and courts, if necessary

Place of processing

We process your personal data primarily within Switzerland and the EU. At the moment we use a data center in Germany for the storage of our data. In order to achieve some of the purposes described above, it may also be necessary for us to process your personal data in countries outside Switzerland and the EU or to transfer it to such countries.

We process your personal data in or transfer the data to countries without adequate data protection on the basis of standard data protection clauses or legal exceptions (necessity for performance of a contract).

​

1.1.6 Your rights in relation to your personal data

You have the following rights with regard to personal data relating to you:

• the right to obtain information about what personal data we hold about you and how we process it

• the right to obtain a copy of your personal data in a commonly used format, or to have such copy transferred to another organization

• the right to have your personal data rectified

• the right to have your personal data deleted

• the right to object to the processing of your personal data

Please note that you are entitled to these rights to different extents depending on the applicable data protection law, and that exceptions apply. To the extent permitted by applicable law, we may therefore refuse your request to exercise these rights. However, you have the right to lodge a complaint with a competent supervisory authority. In Grownate’s case the primary supervisory authority is the Federal Data Protection and Information Commissioner of Switzerland.

 

How we can change this Privacy Policy

We may change this Privacy Policy at any time, in particular if we change our data processing practices or if new legal obligations become applicable. The version published on our Website is the applicable version.

 

Last updated: 12.01.2023

​

​