Privacy Policy

Last updated: July 5, 2026

1. Who is responsible

Growis
Anton-Julius-Eggstein-Gasse 1
6005 Luzern, Switzerland
Represented by: Stefan Vukovic
For all privacy and legal matters: legal@growis.ch

Growis is the data controller for personal data processed through this website under the Swiss Federal Act on Data Protection (nFADP), the EU General Data Protection Regulation (GDPR), and comparable laws.

2. What we collect and why

Contact form

Name, email, company, selected service, and your message. Used solely to answer your inquiry and prepare a potential engagement. Legal basis: steps prior to entering a contract (GDPR Art. 6(1)(b)) and our legitimate interest in responding to you.

Scheduling (Calendly)

If you book a call, Calendly LLC processes your name, email, and chosen time slot under its own privacy policy. Legal basis: steps prior to entering a contract.

Analytics and marketing (only with your consent)

With your explicit opt-in via our cookie banner, we use Google Analytics 4 (with IP anonymization) to understand site usage, and the Meta Pixel to measure the performance of our campaigns. Neither loads before you accept. Legal basis: consent (GDPR Art. 6(1)(a)), which you can withdraw at any time (see section 4).

Technical logs

Our hosting provider Cloudflare processes IP addresses and request metadata to deliver the site securely and defend against attacks. Legal basis: legitimate interest in a secure, functioning website.

3. Recipients and international transfers

We share data only with the processors needed to run this website:

  • Cloudflare, Inc. (hosting, security), USA
  • Google LLC (analytics), USA, only after consent
  • Meta Platforms, Inc. (advertising measurement), USA, only after consent
  • Calendly LLC (scheduling), USA
  • Resend (transactional email for form submissions), USA

Transfers to the USA rely on the EU-US and Swiss-US Data Privacy Framework where the provider is certified, and otherwise on Standard Contractual Clauses. We do not sell personal data.

4. Cookies and how to withdraw consent

Analytics and marketing cookies load only after you click "Accept all" in our banner. "Only necessary" keeps the site cookie-free apart from your stored choice. You can change your mind at any time:

5. Retention

Inquiry emails are kept as long as needed to handle your request and for legal retention duties, then deleted. Analytics data is retained per Google Analytics settings (14 months) in aggregated form. Consent choices are stored in your browser until you reset them.

6. Your rights

Under the nFADP and GDPR you can request access, correction, deletion, restriction, portability, and object to processing based on legitimate interest. You may lodge a complaint with the Swiss FDPIC or your local supervisory authority.

California residents (CCPA/CPRA)

You have the right to know, correct, and delete personal information, and to opt out of "sharing" for cross-context behavioral advertising. We do not sell personal information. Declining our cookie banner prevents the sharing associated with the Meta Pixel. To exercise any right, email us; we do not discriminate against you for doing so.

Other jurisdictions

Where laws such as Japan's APPI, Singapore's PDPA, or comparable Asian data protection regulations apply, we honor the access, correction, and deletion rights they grant. Contact us at the address in section 1.

7. Security

The site is served exclusively over HTTPS with strict transport security, a restrictive content security policy, and no server-side data storage of our own. Form submissions travel encrypted and are delivered directly to our mailbox.

8. Changes

We update this policy when our tooling or the law changes. The date at the top tells you the current version.