1. Who we are

This policy explains how GrowEurope collects and uses personal data when you visit www.groweurope.eu, book a call, register for a webinar or work with us. We process data under the EU General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).

The data controller is:

• GrowEurope d.o.o.
• Markovičeva ulica 6, 2000 Maribor, Slovenia
• Registration number: 7440863000
• VAT ID: SI10223096
• Email: info@groweurope.eu
• Phone: +386 41 924 323

We have not appointed a Data Protection Officer because the law does not require one for our activities. Send any privacy question to info@groweurope.eu.

2. What data we collect

We collect only the data you give us and a limited amount of technical data from your browser.

Where	Data	Source
"Book a free 30-minute call" and contact forms	Name, work email, your role (e.g. company or partner), your message	You
Webinar and workshop registration	Name, email, company, job title, country, questions you submit	You
Live webinars and workshops	Name or display name, chat messages, Q&A, and your image or voice if you turn on your camera or microphone	You
Free guide "How to grow across Europe"	Name, email, company	You
Aggregator partner applications	Name, company, country, services offered, contact details	You
Email, phone and LinkedIn contact	Whatever you send us, plus your contact details	You
Client and partner work	Business contact details, contract and billing data, project information	You or your employer
Website use	IP address, browser and device type, pages visited, referring site, date and time	Your browser, via our hosting provider's server logs

We do not ask for sensitive data (such as health or political opinions). Please do not include it in messages.

3. Why we use your data and our legal basis

Purpose	Legal basis (GDPR Art. 6)
Replying to your enquiry and scheduling a call	Steps at your request before a contract (6(1)(b)) or our legitimate interest in answering business enquiries (6(1)(f))
Registering you for and running webinars and workshops, sending joining links and reminders	Performance of the registration you requested (6(1)(b))
Recording webinars and publishing them (e.g. on YouTube)	Legitimate interest in sharing educational content (6(1)(f)); we tell you before recording starts, and you can keep your camera and microphone off
Sharing your registration with a co-host partner of a specific event	Your consent, given at registration (6(1)(a))
Sending you the free guide	Your request (6(1)(b))
Newsletters and event invitations	Your consent (6(1)(a)); for existing contacts, similar-services emails under the Slovenian Electronic Communications Act (ZEKom-2), with an opt-out in every email
Delivering services to clients and managing partners	Performance of a contract (6(1)(b))
Invoicing, accounting and tax	Legal obligation (6(1)(c))
Website security and improvement	Legitimate interest (6(1)(f)); any non-essential cookies only with your consent (6(1)(a))
Defending legal claims	Legitimate interest (6(1)(f))

You can withdraw consent at any time by emailing info@groweurope.eu or using the unsubscribe link. Withdrawal does not affect processing done before it. We do not make decisions about you based solely on automated processing.

4. Cookies

We use only strictly necessary cookies and browser storage that make the website work, such as showing it in your language. Under ZEKom-2 these need no consent.

Cookie / storage	Provider	Purpose	Duration
ge-country (cookie)	GrowEurope	Set only for visitors from Slovenia, so the website opens in Slovenian	30 days
ge-lang (browser storage)	GrowEurope	Remembers your language (English or Slovenian)	Until you clear it in your browser

We currently do not use analytics, advertising or tracking cookies, and we do not embed third-party videos. If we add any of these, we will ask for your consent first through a cookie banner and update this policy.

When you click a link to YouTube, LinkedIn, IFA Berlin or other external sites, their own privacy policies apply.

5. Who we share data with

We never sell your personal data. We share it only in these cases:

• Service providers (processors) that work on our behalf under a data processing agreement: website hosting (Vercel Inc., USA), email (GoDaddy), delivery of website form messages to our inbox (Web3Forms), and the tools we use for webinars, our contact database and newsletters, calendar booking and accounting.
• Event co-hosts, such as chambers of commerce, startup associations and other partners named on the registration page (for example GZS, the Chamber of Commerce and Industry of Slovenia), only if you agree when registering.
• Aggregator partners: when you become a client, we share the business contact and project details a vetted local partner needs to deliver work in their market. Each partner is bound by confidentiality and data protection terms.
• Authorities, courts or advisers when the law requires it or to protect our legal rights.

Transfers outside the EEA. Some providers (for example US-based software companies) may process data outside the European Economic Area. We then rely on an EU adequacy decision, such as the EU-US Data Privacy Framework, or on the European Commission's Standard Contractual Clauses. You can ask us for a copy of the safeguards.

6. How long we keep data

Data	Kept for
Enquiries and call bookings that do not lead to a contract	24 months after our last contact
Webinar registrations and attendance	24 months after the event
Webinar recordings	As long as the recording is published, or until you ask us to remove you
Newsletter subscribers	Until you unsubscribe
Client and partner contract data	Contract duration plus 5 years (limitation period for claims)
Invoices and accounting records	10 years after the end of the year they relate to, as required by Slovenian tax law
Website server logs	For the short period set by our hosting provider; we do not keep copies

After these periods we delete or anonymise the data.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and get a copy;
• correct inaccurate or incomplete data;
• have your data deleted;
• restrict how we process it;
• receive your data in a portable format;
• object to processing based on our legitimate interests, and to direct marketing at any time;
• withdraw consent at any time.

To use any right, email info@groweurope.eu. We reply within one month and may ask you to confirm your identity.

If you think we have handled your data unlawfully, you can complain to the Slovenian supervisory authority, the Information Commissioner (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, www.ip-rs.si, or to the authority in the EU country where you live or work. We would appreciate the chance to resolve your concern first.

8. Security, children and changes

Security. We use access controls, encrypted connections (HTTPS) and reputable providers to protect your data. No system is fully secure; if a breach puts your rights at risk, we will notify you and the authority as the law requires.

Children. Our services are for businesses and professionals. We do not knowingly collect data from anyone under 16.

Changes. We may update this policy when our services or the law change. The "Last updated" date at the top shows the current version, and we will tell you by email about significant changes affecting registered contacts.

Language. This policy is published in Slovenian and English. If the versions differ, the Slovenian version prevails.

Contact. GrowEurope d.o.o., Markovičeva ulica 6, 2000 Maribor, Slovenia · info@groweurope.eu