Privacy Policy

The controller responsible for processing your personal data is:

If you have any questions regarding this Privacy Policy or wish to exercise your rights under the GDPR, please contact us using the details above.

This Privacy Policy applies whenever you:

• visit our website;
• submit a contact or enquiry form;
• apply to become a GrowEurope Alliance partner;
• communicate with us by email or telephone;
• interact with GrowEurope through professional communication channels.

The personal data we collect depends on how you interact with GrowEurope.

Information You Provide

When you contact us or submit one of our forms, we may collect:

• first name;
• last name;
• email address;
• telephone number, where provided;
• company or organisation;
• market or country of interest;
• subject of your enquiry;
• the content of your message;
• any additional information you voluntarily choose to provide.

You are not required to provide more information than is reasonably necessary for us to respond to your enquiry.

Information Collected Automatically

When you access our website, certain technical information may be collected automatically. This may include:

• IP address;
• browser type and version;
• operating system;
• device type;
• pages visited;
• referring website;
• date and time of your visit;
• general website usage statistics.

This information helps us maintain the security, reliability and performance of our website.

GrowEurope processes personal data only where a valid legal basis exists under Article 6 of the GDPR.

Depending on your interaction with us, we process your personal data for the following purposes.

GrowEurope uses Vercel Analytics to better understand website performance and visitor behaviour in an aggregated manner.

We do not use advertising pixels, behavioural profiling technologies or personalised advertising tools.

Should additional analytics or marketing technologies be introduced in the future, this Privacy Policy will be updated accordingly.

At this time, our website does not use advertising cookies or similar technologies for behavioural profiling or marketing purposes. If our use of cookies or similar technologies changes in the future, this Privacy Policy will be updated accordingly.

We treat your personal data as confidential and do not sell, rent or trade it.

Where necessary to operate our business, we may share personal data with carefully selected service providers acting on our behalf. These may include providers of:

• website hosting;
• website analytics;
• email services;
• secure cloud infrastructure; and
• internal business tools.

These providers process personal data only under our instructions and only where appropriate contractual and organisational safeguards are in place, as required by the GDPR.

We may also disclose personal data where required to comply with applicable law, respond to lawful requests from public authorities, or establish, exercise or defend legal claims.

Some technology providers supporting our business may process personal data outside the European Economic Area (EEA).

Where such transfers occur, GrowEurope ensures that appropriate safeguards are implemented in accordance with Chapter V of the GDPR, including, where applicable, the European Commission's Standard Contractual Clauses or other lawful transfer mechanisms.

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy.

Unless a longer retention period is required by law:

• enquiries that do not result in a business relationship are retained for up to 36 months;
• personal data relating to clients and partners is retained throughout the duration of the business relationship and thereafter for any period required by applicable law;
• personal data may be retained for longer where necessary to establish, exercise or defend legal claims.

Once personal data is no longer required, it is securely deleted or anonymised.

GrowEurope implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, as required by Article 32 of the GDPR.

These measures include, where appropriate:

• encrypted HTTPS connections;
• secure hosting infrastructure;
• restricted access to personal data;
• authenticated access to internal business systems; and
• organisational measures designed to ensure that only authorised persons have access to personal data where necessary for their work.

Access to enquiry information is currently limited to GrowEurope's founders and may be granted to authorised employees or contractors where necessary for legitimate business purposes.

While no system can guarantee absolute security, we continuously seek to maintain an appropriate level of protection for the personal data entrusted to us.

The GDPR grants you a number of rights regarding your personal data.

Subject to applicable legal requirements, you have the right to:

• request access to your personal data (Article 15 GDPR);
• request correction of inaccurate or incomplete personal data (Article 16 GDPR);
• request deletion of your personal data where applicable (Article 17 GDPR);
• request restriction of processing (Article 18 GDPR);
• receive your personal data in a structured, commonly used and machine-readable format where applicable (Article 20 GDPR);
• object to processing based on our legitimate interests (Article 21 GDPR); and
• withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details provided below.

If you believe that GrowEurope has processed your personal data unlawfully, you also have the right to lodge a complaint with the competent supervisory authority.

In Slovenia, the competent supervisory authority is the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec).

Our website may contain links to external websites operated by third parties.

GrowEurope is not responsible for the privacy practices, content or security of those websites. We encourage you to review the privacy policies of any external websites you choose to visit before providing personal data.

We may update this Privacy Policy from time to time to reflect changes in our business operations, legal requirements, website functionality or data processing practices.

The latest version will always be available on this page together with the date of its most recent update.

Where required by applicable law, we will notify users of material changes through appropriate means.

If you have any questions regarding this Privacy Policy or wish to exercise your rights under the GDPR, please contact us.