Data Processing Officer:

Edin Cerimagic
Seitenstettengasse 5/37
1010 Vienna
Austria
Email: info@igrow.at

​

We're delighted that you're interested in our website. Protecting your privacy is very important to us. Below, we provide detailed information about the handling of your data. Your data is processed based on the GDPR and according to § 165 Abs. 3 TKG.

​

1. Access Data and Hosting

1.1 Access Data

You can visit our website without providing any personal information. Each time a website is accessed, the web server automatically saves a so-called server log file, which includes the name of the accessed file, your IP address, date and time of access, transferred data volume, and the requesting provider, thereby documenting the access. This access data is evaluated solely for the purpose of ensuring smooth operation of the site and improving our offerings. This serves to protect our overriding legitimate interests in a correct presentation of our offerings according to Art. 6 Abs. 1 S. 1 lit. f GDPR. All access data is deleted no later than seven days after your site visit ends.

​

1.2 Hosting

The services for hosting and displaying the website are provided by our service provider, World4You Internet Services GmbH. All data collected in the context of using this website is processed on the servers of this service provider. This takes place as part of a processing agreement pursuant to Art. 28 GDPR.

​

2. Cookies and Other Technologies

   
   

2.1 General Information

To make visiting our website attractive and to enable the use of certain functions, we use technologies, including cookies, on various pages. Cookies are small text files that are automatically stored on your device. Some cookies are deleted after the browser session ends (session cookies). Others remain on your device, allowing us to recognize your browser upon your next visit (persistent cookies). The storage of cookies occurs based on your consent pursuant to Art. 6 Abs. 1 S. 1 lit. a GDPR. You can revoke your consent at any time by adjusting your browser settings. The use of analytics and marketing cookies occurs solely after explicit consent via the cookie banner according to Art. 6 Abs. 1 lit. a GDPR. You can revoke this consent at any time or adjust it in the cookie settings.

2.2 Cookie Management

Each browser differs in how it manages cookie settings. This is described in the help menu of your browser, which explains how you can change your cookie settings. The cookie settings for the most common browsers can be found at the following links:

• Microsoft Edge

• Safari

• Chrome

• Firefox

• Opera

3. Data Processing for Contact and Customer Communication

   
   

3.1 Personal Data upon Contact

We collect personal data when you voluntarily provide it to us during contact (e.g., via a contact form or email). Mandatory fields are marked as such because we require the data to process your contact request. The processing of this data is based on Art. 6 Abs. 1 S. 1 lit. b GDPR.

3.2 Storage and Deletion

Upon complete processing of your request, your data will be restricted for further processing and deleted after the expiration of legal retention periods, unless you explicitly agree to the further use of your data according to Art. 6 Abs. 1 S. 1 lit. a GDPR.

4. Use of Framer and Embedded Forms

   
   

4.1 Website Management and Hosting with Framer Our website is created and hosted using the website tool Framer. This is a service from Framer B.V., Piet Heinkade 27, 1019 BR Amsterdam, Netherlands.

When you visit our website, Framer automatically processes personal data to provide the website and ensure its security. This includes your IP address, information about your browser and device, and the pages you visit.

When you fill out and submit forms on our website, Framer also processes the data you provide. This includes your contact information such as name and email address and any other information you provide in the forms.

4.2 Data Processing by Framer Processing of the data you enter into forms (e.g., name, email address) is done to process your inquiries and to communicate with you further. The legal basis for this is your consent according to Art. 6 Abs. 1 lit. a GDPR.

The processing of technical data (e.g., IP address) to provide the website is based on our legitimate interest in maintaining a secure and functional presentation of our offerings according to Art. 6 Abs. 1 lit. f GDPR.

As a Dutch company, Framer B.V. is subject to the GDPR. For global provision of services (e.g., via a content delivery network, CDN), Framer engages subcontractors (e.g., Amazon Web Services) that may process data in third countries like the USA. In these cases, Framer ensures that an adequate data protection level is maintained according to EU standards by concluding EU Standard Contractual Clauses.

4.3 Storage Duration The data is only stored as long as necessary to achieve the purpose (e.g., processing your inquiry, providing the website), unless legal regulations (e.g., tax or commercial retention periods) require longer storage.

5. Use of Google Services & Other Services

   
   

5.1 Google Analytics

For the purpose of website analysis, data (IP address, time of visit, device and browser information, and information about your use of our website) is automatically collected and stored by Google Analytics, from which pseudonymous usage profiles are created. This data is used to analyze the usage of our website and to improve our offerings. The processing is based on Art. 6 Abs. 1 S. 1 lit. f GDPR. IP anonymization from Google Analytics is activated on this website. Your IP address is shortened by Google within the EU before being transferred to the USA. Data transfer to third countries is carried out in accordance with Art. 46 GDPR based on the so-called Standard Contractual Clauses (SCCs).

5.1a Microsoft Clarity

We use Microsoft Clarity, a web analysis service from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Clarity allows us to understand user interactions with our website better through so-called “session replays” and heatmaps, capturing particularly mouse movements, clicks, scroll behavior, as well as technical information such as device, browser, and resolution.

The usage of Microsoft Clarity is based on your consent in accordance with Art. 6 Abs. 1 lit. a GDPR. The information collected by Clarity is processed anonymously. Data transfer to the USA takes place. Microsoft is certified under the Data Privacy Framework (DPF) and committed to maintaining an adequate level of data protection according to Art. 45 GDPR.

Further information about data processing by Microsoft Clarity can be found at:  
https://privacy.microsoft.com/en-us/privacystatement

5.1b Google Consent Mode (GCM) – Use of Google-Based Services without Consent (“Denied” Mode)

We use Google Consent Mode v2 on our website.
The Google Consent Mode allows us to operate Google services like Google Analytics, Google Ads, Google Tag Manager, or Google Floodlight in a manner where certain technical data processing can occur even when users do not consent to cookies or tracking.

Google tags can be loaded in a technically restricted way before consent.
In doing so, no cookies are set and no personal data is processed.
The processing is solely for:

• the technical operation of the website

• modeled, non-identifying success measurement

Two types of signals (“Pings”) are sent to Google:

• consent-update-pings – transmit the current consent status
• cookieless-pings – occur without cookies, without unique IDs, and without personal identifiers

In the “Denied” mode, Google solely processes:

• aggregated measurement data

• modeled conversions / reach measurements

• anonymized technical information (e.g., browser type, timestamp, referrer)

As long as consent has not been given, no personal cookies are set.

Legal Basis:

• Art. 6 Abs. 1 lit. f GDPR (legitimate interest) for purely technical and anonymized success measurement without cookies

• Art. 6 Abs. 1 lit. a GDPR (consent), when cookies for analytics or marketing purposes are actively permitted

Additional information: https://policies.google.com/privacy

5.2 Google Ads

We use Google Ads to advertise our services on external websites and to measure the effectiveness of our advertising efforts. Google Ads uses cookies to enable success measurement. The processing is based on your consent pursuant to Art. 6 Abs. 1 S. 1 lit. a GDPR.

5.3 Google Maps

To visually display geographic information, we use Google Maps. When using Google Maps, data is collected and processed about your use of the map functions, particularly the IP address and location data. The processing occurs based on Art. 6 Abs. 1 S. 1 lit. f GDPR.

5.4 Google Tag Manager

We use the Google Tag Manager to efficiently manage our website tags. The Google Tag Manager itself does not collect personal data. It only ensures the activation of other tags that may collect data. The processing is based on Art. 6 Abs. 1 S. 1 lit. f GDPR.

5.4 Technical Safeguards and Recognition

To protect our content, we use technical measures to prevent unauthorized copying, downloading, or automated reading of our website content. These include disabling right-click functionality and blocking text selection functions via JavaScript.

Additionally, we use locally stored technical recognition features (e.g., localStorage) to recognize repeat visits anonymously. This function serves exclusively internal statistical purposes, quality assurance, and optimization of our offerings. No personal data is stored or evaluated.

The legal basis for this processing is our legitimate interest in protecting our content and optimizing our website according to Art. 6 Abs. 1 lit. f GDPR.

5.5 Google Fonts

Our website uses so-called Google Fonts, provided by Google, for uniform font representation. When a page is called, your browser loads the required web fonts into the browser cache to display texts and fonts correctly.

To do this, the browser you use must connect to Google's servers. This informs Google that our website was accessed via your IP address.

The use of Google Fonts serves the interest of a uniform and appealing representation of our website. This represents a legitimate interest in the sense of Art. 6 Abs. 1 lit. f GDPR. If appropriate consent is requested, the processing solely occurs based on Art. 6 Abs. 1 lit. a GDPR; consent can be revoked at any time.

Further information about Google Fonts can be found at:
https://developers.google.com/fonts/faq
and in Google's privacy policy:
https://policies.google.com/privacy

5.6 B2B Visitor Recognition with Leadinfo:

We use the lead generation service from Leadinfo B.V., Rotterdam, Netherlands. This recognizes company visits to our website based on IP addresses and shows us publicly available information, such as company names or addresses. Additionally, Leadinfo sets two first-party cookies to evaluate user behavior on our website and processes domains from form inputs (e.g., "leadinfo.com") to correlate IP addresses with companies and improve services. More information can be found at www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out You have an opt-out option. In the case of opting out, your data will no longer be collected by Leadinfo.

5.7 YouTube

Videos from the platform YouTube are embedded on our website, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

As soon as you open a page with an embedded YouTube video, a connection can be established to YouTube's servers. The YouTube server is informed of which of our pages you have visited. If the service is active, cookies may be set, and personal data (e.g., IP address) may be transmitted to Google, including servers in the USA.

The embedding is based on your consent according to Art. 6 Abs. 1 lit. a GDPR. You can revoke your consent at any time via the cookie settings.

Further information can be found in Google's privacy policy: https://policies.google.com/privacy?hl=en

5.8 Spotify

Audio content from Spotify can be embedded on our website, a service of Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden.

When you open a page with an embedded Spotify Player, a connection is established to Spotify's servers. Personal data such as your IP address can be transmitted to Spotify and cookies stored.

The data processing is based on your consent according to Art. 6 Abs. 1 lit. a GDPR. You can revoke this via our cookie management tool at any time.

Further information about data processing by Spotify can be found at: https://www.spotify.com/us/legal/privacy-policy

6. Social Media

6.1 Our Online Presences

We maintain online presences on various social networks such as Facebook (by Meta), Instagram (by Meta), YouTube, and LinkedIn to communicate with active customers, interested parties, and users there and inform them about our services. When using Facebook pixel, "Custom Audiences" may be formed if you have agreed to it via our cookie banner. Your behavior on our website is analyzed to display targeted advertising on Facebook.

6.2 Data Processing by Social Media Providers

Once you visit one of our social media online presences, your data is automatically collected and processed for market research and advertising purposes by the respective social media provider. This data processing is based on your consent according to Art. 6 Abs. 1 S. 1 lit. a GDPR. Cookies are used, allowing platforms to create usage profiles to display personalized advertisements tailored to your interests.

Detailed information about the processing and use of data by the respective social media providers and the appropriate objection options are found in the data privacy notices of the providers:

Facebook (by Meta): Meta Platforms Ireland Ltd., Dublin, Ireland. Data may be transferred to servers in the USA and stored there. Data privacy notices.

Instagram (by Meta): Meta Platforms Ireland Ltd., Dublin, Ireland. Data may be transferred to servers in the USA and stored there. Data privacy notices.

YouTube: Google Ireland Ltd., Dublin, Ireland. Data may be transferred to servers in the USA and stored there. Data privacy notices.

LinkedIn: LinkedIn Ireland Unlimited Company, Dublin, Ireland. Data may be transferred to servers in the USA and stored there. Data privacy notices.

​

7. Advertising via Email, Mail, Phone

7.1 Newsletter

If you sign up for our newsletter, we'll use the necessary data to regularly send you our email newsletter. Processing is based on Art. 6 Abs. 1 S. 1 lit. a GDPR. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or informing us via the contact details above.

7.2 Newsletter Tracking

We inform you that we analyze your user behavior during the newsletter dispatch. This is done using tracking technologies, like web beacons or tracking pixels. Processing is based on Art. 6 Abs. 1 S. 1 lit. a GDPR.

7.3 Postal Advertising

We reserve the right to use your first and last name and postal address for our own advertising purposes, such as sending interesting offers and information about our products via mail. This serves to protect our overriding legitimate interests in advertising to our customers according to Art. 6 Abs. 1 S. 1 lit. f GDPR. You can object to this data use at any time by sending us a message.

7.4 Telephone Advertising

If you have given your consent according to Art. 6 Abs. 1 S. 1 lit. a GDPR, we use the necessary data for our own advertising purposes, such as informing you about interesting offers and our products. You can revoke your consent at any time.

8. HubSpot CRM

   
   

We use the CRM system HubSpot on our website. HubSpot uses cookies to analyze website usage and offer personalized content. Processing is based on Art. 6 Abs. 1 S. 1 lit. a GDPR. More information can be found in HubSpot's privacy policy at: https://legal.hubspot.com/privacy-policy.

8a. Consent Management and Revocation

We use a cookie consent tool from our website provider (Wix) to obtain your consent for storing certain cookies on your device or using certain technologies, documenting them in compliance with data protection. Consent occurs according to Art. 6 Abs. 1 lit. a GDPR. Consents are securely recorded and can be reviewed at any time.

You have the option to revoke your consent at any time with future effect or adjust your selection. Please use the "Cookie Settings" link at the bottom of this website.

Without your consent, only technically necessary cookies are used, which are required for the operation of this website (Art. 6 Abs. 1 lit. f GDPR).

9. Contact Options and Your Rights

9.1 Your Rights

As a data subject, you have the following rights:

the right to request information about your personal data processed by us to the extent indicated in Art. 15 GDPR;

the right to request the correction of incorrect or completion of your personal data stored with us according to Art. 16 GDPR;

the right to request the deletion of your personal data stored with us unless further processing is required according to Art. 17 GDPR;

the right to request the restriction of the processing of your personal data according to Art. 18 GDPR;

the right to receive your personal data in a structured, commonly used, and machine-readable format or to request its transfer to another controller according to Art. 20 GDPR;

the right to complain to a supervisory authority according to Art. 77 GDPR.

9.2 Right to Object

If we process personal data to protect our overriding legitimate interests as explained above, you can object to this processing with future effect. If the processing is for direct marketing purposes, you can exercise this right at any time.

9.3 Contact

If you have questions about the collection, processing, or use of your personal data, for information, correction, restriction, or deletion of data, as well as for revocation of given consents or objection to certain data uses, please contact:

​

Edin Cerimagic
Seitenstettengasse 5/37
1010 Vienna
Austria
Email: info@igrow.at

​