Privacy Policy

Zieblandstr. 43
80798 Munich, Germany
Email: [email protected]

1. Introduction
We take your privacy seriously. This policy explains what personal data we collect when you visit our website, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR) and the German TTDSG.

2. Data controller
growwerk GmbH is responsible for processing your personal data. Contact: [email protected]

Data protection contact
growwerk GmbH has not appointed a Data Protection Officer under Art. 37 GDPR, as the legal requirements do not apply. For all privacy-related enquiries, please contact [email protected]

3. What data we collect
We collect and process the following data when you visit our website:

• Server log data: browser type, operating system, shortened IP address, referrer URL, and time of access.
  Purpose: to ensure the stability, security, and proper display of our website.
  Legal basis: Art. 6 (1)(f) GDPR (legitimate interest).
• Contact form or email enquiries: name, email address, and your message.
  Purpose: to respond to your enquiry and provide the information or service requested.
  Legal basis: Art. 6 (1)(b) GDPR (pre-contractual communication).
• Privacy-first analytics: we use Fathom Analytics to understand general website usage without tracking or profiling individual visitors.
  Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in analysing website performance).

4. Cookies and consent
Our website does not use tracking or marketing cookies.
We use only essential technical cookies required for security and basic website functionality.
Because our analytics provider (Fathom) is cookie-free and does not store personal data, no consent banner is required.
You can still manage or delete cookies through your browser settings.

5. Use of Fathom Analytics (for SEO)
This website uses Fathom Analytics, a privacy-focused web analytics service operated by Conva Ventures Inc.
Fathom is fully compliant with the GDPR, Schrems II, and the TTDSG.
Fathom does not use cookies and does not store personally identifiable information.
All data from visitors within the EU is processed exclusively on EU-located infrastructure (EU Isolation).

Fathom records only non-identifiable information such as the page visited, referrer, browser, device type, and approximate location (country).

IP addresses are briefly processed for security and aggregation purposes and then anonymised.
No personal data is stored, and no cross-site tracking takes place.

Further details are available at: https://usefathom.com/data

6. How long we keep data
We store personal data only as long as necessary for the stated purpose or as required by law. After that, data is deleted or anonymised.

7. Who receives your data
We do not sell or rent your personal data.
Service providers (such as our website host or analytics provider) may process data on our behalf under GDPR-compliant data processing agreements.

8. Your rights
Under GDPR, you have the right to:

• Access your personal data (Art. 15)
• Request correction or deletion (Arts. 16–17)
• Restrict or object to processing (Arts. 18–21)
• Data portability (Art. 20)
• Withdraw consent at any time (Art. 7 (3))
• Lodge a complaint with a supervisory authority, such as:
• Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Germany.

9. International data transfers
Where data is transferred outside the EEA (for example, through Fathom’s non-EU servers for non-EU visitors), this is done under approved safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses.

10. Updates to this policy
We may update this Privacy Policy from time to time to reflect legal or technical changes. The most recent version will always be available on this page.

Last updated: November 2025