Privacy Policy
1. Introduction
We take the protection of your personal data seriously. This Privacy Policy explains how we collect, process, store and protect personal data when you visit or use our website. We process personal data in accordance with the applicable data protection laws, in particular the Swiss Federal Act on Data Protection (FADP/DSG) and, where applicable, the EU General Data Protection Regulation (GDPR).
2. Data Controller
The entity responsible for processing personal data in connection with this website is: GrassGroup Ltd., Switzerland | privacy@grassgroup.net | grassgroup.net
3. Personal Data We Collect
Depending on how you interact with our website, we may collect and process the following categories of personal data: • Contact information, such as your name, email address and telephone number. • Information you voluntarily provide when contacting us. • Technical information, such as your IP address, browser type, operating system and device information. • Website usage data, such as pages visited, access times and referring websites. • Any other information you voluntarily provide to us.
4. Purpose of Data Processing
We process personal data for the following purposes: • To operate, maintain and improve our website. • To respond to enquiries and communication requests. • To provide our products and services. • To manage business relationships. • To ensure website security and prevent misuse. • To comply with applicable legal obligations. • To analyse website traffic and improve user experience, where applicable.
5. Legal Basis for Processing
Where the GDPR applies, we process personal data on the basis of one or more of the following legal grounds: • Your consent. • The performance of a contract or pre-contractual measures. • Compliance with legal obligations. • Our legitimate interests, provided these do not override your fundamental rights and freedoms. Under Swiss data protection law, we process personal data in accordance with the applicable principles and requirements of the FADP.
6. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to improve functionality, analyse website usage and enhance the user experience. Cookies are small text files stored on your device. You can configure your browser to reject cookies or notify you when cookies are being used. Please note that disabling certain cookies may affect the functionality of our website. Where required by applicable law, we will request your consent before using non-essential cookies or tracking technologies.
7. Disclosure of Personal Data to Third Parties
We may share personal data with selected third parties where necessary for the operation of our website and business activities. These may include: • Website hosting and IT service providers. • Technical support providers. • Analytics and marketing service providers. • Professional advisers and business partners. • Public authorities where required by law. Third parties are required to handle personal data in accordance with applicable data protection requirements. We do not sell your personal data to third parties.
8. International Data Transfers
Personal data may be processed or stored outside Switzerland, depending on the services and providers we use. Where personal data is transferred to countries that do not provide an adequate level of data protection, we ensure that appropriate safeguards are implemented in accordance with applicable data protection legislation.
9. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable legal retention obligations. Once personal data is no longer required, it will be deleted or anonymised in accordance with applicable law.
10. Data Security
We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. However, please note that no method of electronic transmission or storage can guarantee absolute security.
11. Your Data Protection Rights
Depending on applicable law, you may have the right to: • Request information about the personal data we process about you. • Request correction of inaccurate personal data. • Request deletion of your personal data, where legally permissible. • Request restriction of certain processing activities. • Object to certain forms of data processing. • Request the transfer of personal data, where applicable. • Withdraw your consent at any time, where processing is based on consent. To exercise your rights, please contact us using the contact details provided in this Privacy Policy. You may also have the right to lodge a complaint with the competent data protection authority. In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC). Website: https://www.edoeb.admin.ch
12. Third-Party Websites
Our website may contain links to external websites operated by third parties. We have no control over the content or privacy practices of these websites and accept no responsibility for their respective data protection policies. We recommend reviewing the privacy policies of any external websites you visit.
13. Changes to This Privacy Policy
We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our business activities, website functionality or applicable legal requirements. The latest version will always be made available on this website.
14. Contact
If you have any questions or concerns regarding this Privacy Policy or the processing of your personal data, please contact us: GrassGroup Ltd., Switzerland | privacy@grassgroup.net | grassgroup.net