Privacy Policy of
Growmodo.com
This Website collects some Personal Data from its Users.
Users may be subject to different protection standards and broader standards may therefore apply to some. Users can contact the Owner, to learn more about such standards.
This document contains a section dedicated to Users in the European Union and their privacy rights.
This document contains a section dedicated to Users in the United States and their privacy rights.
This document can be printed for reference by using the print command in the settings of any browser.
Owner and Data Controller
Growmodo GmbH
Brückenstraße 2
51379 Leverkusen
Germany
Register: Amtsgericht Köln HRB 102275
Represented by: Paul Preisler
Owner contact email: hello@growmodo.com
Types of Data collected
Among the types of Personal Data that this Website collects, by itself or through third parties, there are: Cookies; Usage Data; email address; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); first name; last name; phone number; profession; company name; website; various types of Data; field of activity; number of employees; Data communicated while using the service; name; device information; calendar information; geographic position; number of Users; session statistics; physical address; country; ZIP/Postal code; city; billing address; house number; Current City; session duration; scroll-to-page interactions; clicks; time zone; mouse movements; interaction events; diagnostic events; page events; custom events; layout details; positional information; language; number of sessions; referral URL; browsing history; page views; answers to questions; contents of the email or message; time the message was received; browser information; geography/region; keypress events; motion sensor events; scroll position; touch events; IP address; job position; job title; work history; job skills; industry; education history; academic background; interests; company size; company revenue; gender; date of birth; contact details.
Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.
Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Website.
Unless specified otherwise, all Data requested by this Website is mandatory and failure to provide this Data may make it impossible for this Website to provide its services. In cases where this Website specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or the functioning of the Service.
Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.
Any use of Cookies – or of other tracking tools — by this Website or by the owners of third-party services used by this Website serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy.
Users are responsible for any third-party Personal Data obtained, published or shared through this Website.
Mode and place of processing the Data
Methods of processing
The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.
The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Website (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.
Place
The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located.
Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can check the section containing details about the processing of Personal Data.
Retention time
Unless specified otherwise in this document, Personal Data shall be processed and stored for as long as required by the purpose they have been collected for and may be retained for longer due to applicable legal obligation or based on the Users' consent.
The purposes of processing
The Data concerning the User is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as the following: Analytics, Advertising, Remarketing and behavioral targeting, Interaction with external social networks and platforms, Contacting the User, Data transfer outside the EU, Displaying content from external platforms, Handling payments, Hosting and backend infrastructure, Managing data collection and online surveys, Tag Management, User database management, Interaction with data collection platforms and other third parties, Handling activities related to productivity, Backup saving and management, Connecting Data, Information collection, Managing support and contact requests, Platform services and hosting, Traffic optimization and distribution, Registration and authentication provided directly by this Website, Heat mapping and session recording, Interaction with live chat platforms, Spam and bots protection, Managing contacts and sending messages, Managing landing and invitation pages and Managing web conferencing and online telephony.
For specific information about the Personal Data used for each purpose, the User may refer to the section "Detailed information on the processing of Personal Data"
Detailed information on the processing
of Personal Data
Personal Data is collected for the following purposes and using the following services:
Advertising
This type of service allows User Data to be utilized for advertising communication purposes. These communications are displayed in the form of banners and other advertisements on this Website, possibly based on User interests.
This does not mean that all Personal Data are used for this purpose. Information and conditions of use are shown below.
Some of the services listed below may use Trackers for identifying Users, behavioral retargeting i.e. displaying ads tailored to the User's interests and behavior, or to measure ads performance. For more information, please check the privacy policies of the relevant services.
Services of this kind usually offer the possibility to opt out of such tracking. In addition to any opt-out feature offered by any of the services below, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section "How to opt-out of interest-based advertising" in this document.
Meta ads conversion tracking (Meta pixel)
Meta ads conversion tracking (Meta pixel) is an analytics service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, that connects data from the Meta Audience Network with actions performed on this Website. The Meta pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Meta Audience Network.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.
Category of Personal Information collected according to the CCPA: internet or other electronic network activity information.
This processing constitutes: a Sale in California
Meta Lookalike Audience
Meta Lookalike Audience is an advertising and behavioral targeting service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, that uses Data collected through Meta's Custom Audience in order to display ads to Users with similar behavior to Users who are already in a Custom Audience list on the basis of their past use of this Website or engagement with relevant content across Meta's apps and services. On the basis of these Data, personalized ads will be shown to Users suggested by Meta Lookalike Audience.
Users can opt out of Meta's use of Trackers for ads personalization by visiting this opt-out page.
Personal Data processed: Cookies; Usage Data.
Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.
Category of Personal Information collected according to the CCPA: internet or other electronic network activity information.
This processing constitutes:
- a Sale in California
- a Sharing in California
LinkedIn Ads (LinkedIn Ireland Unlimited Company)
LinkedIn Ads is an advertising service provided by LinkedIn Ireland Unlimited Company.
Personal Data processed: Trackers; Usage Data.
Place of processing: Ireland – Privacy Policy – Opt out.
Category of Personal Information collected according to the CCPA: internet or other electronic network activity information.
This processing constitutes:
- a Sale in California
- a Sharing in California
LinkedIn conversion tracking (LinkedIn Insight Tag) (LinkedIn Corporation)
LinkedIn conversion tracking (LinkedIn Insight Tag) is an analytics and behavioral targeting service provided by LinkedIn Corporation that connects data from the LinkedIn advertising network with actions performed on this Website. The LinkedIn Insight Tag tracks conversions that can be attributed to LinkedIn ads and enables to target groups of Users on the base of their past use of this Website.
Users may opt out of behavioral targeting features through their device settings, their LinkedIn account settings or by visiting the AdChoices opt-out page.
Personal Data processed: device information; Trackers; Usage Data.
Place of processing: United States – Privacy Policy – Opt out.
Category of Personal Information collected according to the CCPA: internet or other electronic network activity information.
This processing constitutes:
- a Sale in California
Google Conversion linker (Google Ireland Limited)
Google Conversion linker is an analytics service provided by Google Ireland Limited that connects Data from the Google advertising services with actions performed on this Website. Depending on the setup of the service, such Data might also be used for retargeting purposes.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: Trackers; Usage Data.
Place of processing: Ireland – Privacy Policy – Opt out.
Category of Personal Information collected according to the CCPA: internet or other electronic network activity information.
LinkedIn Audience Expansion (LinkedIn Ireland Unlimited Company)
LinkedIn Audience Expansion is an advertising service provided by LinkedIn Ireland Unlimited Company that allows the Owner to expand the available target audience by finding Users who have interests, demographics or online behaviour similar to an existing audience selected by the Owner. Users can opt out of LinkedIn's use of personalized advertising by visiting LinkedIn's Ads Settings.
Personal Data processed: Trackers; Usage Data.
Place of processing: Ireland – Privacy Policy – Opt Out.
Category of Personal Information collected according to the CCPA: internet or other electronic network activity information.
Legal basis for processing
Processing under GDPR (EU Users)
The Owner may process Personal Data relating to Users if one of the following legal bases applies:
- Consent (Art. 6(1)(a) GDPR): the User has given consent for one or more specific purposes.
- Performance of a contract (Art. 6(1)(b) GDPR): provision of Data is necessary for the performance of an agreement with the User or for any pre-contractual obligations thereof.
- Legal obligation (Art. 6(1)(c) GDPR): processing is necessary for compliance with a legal obligation to which the Owner is subject.
- Legitimate interests (Art. 6(1)(f) GDPR): processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the User.
In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.
Data transfers outside the EU/EEA
The Owner is established in Germany. Some third-party services used on this Website (including Meta and LinkedIn) process Personal Data in the United States or other countries outside the European Economic Area (EEA). For such transfers, the Owner relies on one or more of the following mechanisms:
- Standard Contractual Clauses (SCCs) approved by the European Commission (Commission Implementing Decision (EU) 2021/914).
- EU–US Data Privacy Framework (DPF), where the recipient is certified under the DPF as approved by the European Commission's adequacy decision of 10 July 2023.
- Any other legally recognised transfer mechanism applicable under Chapter V of the GDPR.
Users may request a copy of the applicable transfer safeguards by contacting the Owner at hello@growmodo.com.
How to opt-out of interest-based advertising
In addition to any opt-out option offered by the individual services listed in this document, Users may learn more about opting out of interest-based advertising through the following industry resources:
- Digital Advertising Alliance (DAA) – YourAdChoices
- Network Advertising Initiative (NAI) – Consumer Opt-Out
- Your Online Choices (EU)
- AdChoices opt-out page
Users may also use the Global Privacy Control (GPC) browser signal where supported, which the Owner will honour as an opt-out of sale/sharing under applicable US state privacy laws.
Rights of Users
Available rights
Users may exercise certain rights regarding their Data processed by the Owner. In particular, Users have the right to do the following, to the extent permitted by applicable law:
- Withdraw consent at any time. Where processing is based on consent, Users have the right to withdraw it at any time without affecting the lawfulness of prior processing.
- Object to processing. Users have the right to object to processing carried out on legal bases other than consent. Further details are provided in the EU Users section below.
- Access their Data. Users have the right to learn whether Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing, and obtain a copy of the Data undergoing processing.
- Rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
- Restrict processing. Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than storing it.
- Erasure. Users have the right, under certain circumstances, to obtain deletion of their Data from the Owner.
- Data portability. Users have the right to receive their Data in a structured, commonly used and machine-readable format and, if technically feasible, to have it transmitted to another controller without hindrance.
- Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.
How to exercise these rights
Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the Owner as early as possible and always within one month of receipt, providing Users with the information required by law. Any rectification or erasure of Personal Data or restriction of processing will be communicated by the Owner to each recipient to whom the Personal Data has been disclosed, unless this proves impossible or involves disproportionate effort.
Information for EU Users
This section applies to all Users located in the European Union and European Economic Area and fulfils the information obligations under the General Data Protection Regulation (GDPR), Regulation (EU) 2016/679.
The Owner and Data Controller is Growmodo GmbH, Brückenstraße 2, 51379 Leverkusen, Germany. Contact: hello@growmodo.com.
Pursuant to Articles 13 and 14 GDPR, EU Users have the following rights:
- Right of access (Art. 15 GDPR): obtain confirmation that personal data is being processed and receive a copy of that data.
- Right to rectification (Art. 16 GDPR): have inaccurate personal data corrected and incomplete data completed.
- Right to erasure / “right to be forgotten” (Art. 17 GDPR): request deletion of personal data where it is no longer necessary, where consent has been withdrawn, or where processing is unlawful.
- Right to restriction of processing (Art. 18 GDPR): restrict processing while the accuracy of data is contested or an objection is assessed.
- Right to data portability (Art. 20 GDPR): receive personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
- Right to object (Art. 21 GDPR): object at any time to processing of personal data based on legitimate interests (Art. 6(1)(f)), including profiling, and to processing for direct marketing purposes.
- Right to withdraw consent (Art. 7(3) GDPR): where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
- Right to lodge a complaint (Art. 77 GDPR): lodge a complaint with the competent supervisory authority. The authority with jurisdiction over Growmodo GmbH is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany (ldi.nrw.de).
The Owner does not engage in solely automated decision-making (including profiling) that produces legal or similarly significant effects on Users within the meaning of Art. 22 GDPR, except to the extent that advertising technology from third parties (Meta, LinkedIn) may do so subject to their own policies.
To exercise any of the above rights, contact the Owner at hello@growmodo.com. Requests are handled free of charge and responded to within 30 days, extendable by a further two months where necessary with prior notice.
Information for US Users
California – CCPA / CPRA
This section applies to California residents under the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA).
California residents have the following rights:
- Right to Know (§1798.110, §1798.115 CCPA): request disclosure of the categories and specific pieces of personal information collected, the sources of collection, the business or commercial purpose for collection, and the categories of third parties to whom personal information is disclosed or sold.
- Right to Delete (§1798.105 CCPA): request deletion of personal information, subject to certain exceptions.
- Right to Correct (§1798.106 CPRA): request correction of inaccurate personal information.
- Right to Opt Out of Sale or Sharing (§1798.120 CCPA / CPRA): opt out of the sale or sharing of personal information for cross-context behavioral advertising. As described in this policy, certain advertising services may constitute a “Sale” or “Sharing” under California law. To opt out: email hello@growmodo.com with subject “Do Not Sell or Share My Personal Information”, or use the opt-out links provided for each advertising service above.
- Right to Limit Use of Sensitive Personal Information (CPRA): limit the use and disclosure of sensitive personal information to that necessary for the service.
- Right to Non-Discrimination (§1798.125 CCPA): the right not to receive discriminatory treatment for exercising any CCPA/CPRA privacy rights.
To exercise these rights, California residents may submit a verifiable consumer request to hello@growmodo.com. The Owner will acknowledge receipt within 10 business days and provide a substantive response within 45 calendar days (extendable by a further 45 days where reasonably necessary, with notice).
Do Not Sell or Share My Personal Information: To opt out of the sale or sharing of your personal information, email hello@growmodo.com with the subject line “Do Not Sell or Share My Personal Information”.
Other US States (Virginia, Colorado, Connecticut, Texas, and others)
Residents of states with applicable consumer privacy laws — including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Montana (MCDPA), Oregon (OCPA), and other states — have the following rights with respect to their personal data:
- The right to access personal data.
- The right to correct inaccurate personal data.
- The right to delete personal data.
- The right to obtain a portable copy of personal data.
- The right to opt out of the processing of personal data for targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects.
To exercise these rights, residents of applicable states may contact the Owner at hello@growmodo.com. The Owner will respond within the timeframe required by applicable state law. If a request is denied, Users may appeal by emailing hello@growmodo.com with the subject line “Privacy Rights Appeal.” If the appeal is denied, Users may contact their state Attorney General's office.
Cookie Policy
This Website uses Trackers, including Cookies and similar technologies (e.g. web beacons, pixel tags, and scripts). Cookies are small data files placed on the User's device when they visit a website.
Where required by law — including the EU ePrivacy Directive and the GDPR — Trackers will only be placed on the User's device after obtaining prior and informed consent through the cookie consent notice shown on first visit. Users may withdraw or adjust their consent preferences at any time by clicking “Cookie Settings” in the site footer.
Users may also control or delete Cookies through their browser settings. Note that disabling Cookies may affect the functionality of certain parts of this Website. For more information on managing Cookies, visit allaboutcookies.org.
Changes to this Privacy Policy
The Owner reserves the right to make changes to this Privacy Policy at any time by notifying Users on this page and — as far as technically and legally feasible — sending a notice to Users via any contact information available to the Owner. It is strongly recommended to check this page often, referring to the date of the last modification listed below.
Should the changes affect processing activities performed on the basis of the User's consent, the Owner shall collect new consent from the User, where required.
Last updated: June 2025
