Privacy Policy

This Privacy Policy describes how we process personal data in line with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and the Dutch GDPR implementation act (Uitvoeringswet AVG), which implements the GDPR in the Netherlands.

1. Data Controller Information

The data controller responsible for your personal data is:

Growradiant
Herenoord 8, 3079 JJ Rotterdam, Netherlands
Phone: +31 10 479 3400
Email: message@growradiant.world

KvK / BTW: If the operator is registered in the Dutch Business Register (Kamer van Koophandel), the statutory Chamber of Commerce (KvK) number and, where applicable, Dutch VAT (BTW) identification number are provided on request or displayed here when legally required.

Data protection officer (DPO): We have not appointed a DPO because our core processing activities do not meet the conditions in Article 37 GDPR requiring designation. Privacy requests can be sent to the contact details above.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

2.1 Information You Provide Directly

• Name and email address when you contact us
• Messages and correspondence content
• Cookie preferences you select

2.2 Information Collected Automatically

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referring website addresses
• Technical data sent when your browser loads embedded resources (for example fonts or style sheets) from third-party servers, which may include your IP address and connection metadata as processed by those providers

3. Purposes of Data Processing

We process your personal data for the following purposes:

• Communication: To respond to your inquiries and provide requested information
• Website Operation: To ensure proper functioning of our website
• Analytics: To understand how visitors use our website and improve user experience (with your consent)
• Legal Compliance: To comply with applicable laws and regulations

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Consent (Article 6(1)(a)): For analytics and marketing cookies
• Legitimate Interest (Article 6(1)(f)): For website operation and security
• Contract Performance (Article 6(1)(b)): To respond to your inquiries
• Legal Obligation (Article 6(1)(c)): To comply with legal requirements

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact form submissions: 2 years from the date of last communication
• Cookie and consent preferences: up to 1 year from the date of selection (stored in your browser as described in our Cookie Policy)
• Analytics data: only if you consent to analytics cookies/tools; retention then depends on the analytics provider and is kept as short as reasonably possible (often up to 26 months unless we configure a shorter period)

After the retention period, data is securely deleted or anonymized.

6. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Request limitation of data processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal)

To exercise your rights, please contact us using the details provided in Section 1. Where we cannot verify your identity, we may request additional information. We will respond within one month in principle (this may be extended by two further months in complex cases, as permitted by the GDPR). For complaints about the processing of your personal data, you may also contact the Dutch Data Protection Authority (see Section 12).

6.1 Profiling and automated decision-making

We do not use solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.

6.2 Children

This website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete such information where appropriate.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Secure server infrastructure
• Access controls and authentication measures
• Regular security assessments

8. Third-Party Services

We use third-party services that may process personal data. Where they act as processors on our behalf, we take steps (such as appropriate agreements under Article 28 GDPR) to ensure they protect your data. The following are relevant when you use our website:

• Google Fonts (typically Google Ireland Limited): delivery of web fonts; your browser may establish a connection to Google servers, which can involve processing of IP address and related technical data. Details: Google Privacy Policy.
• cdnjs (Cloudflare): delivery of open-source front-end libraries (for example Font Awesome stylesheets); may involve processing of technical connection data. Details: Cloudflare Privacy Policy.

We may add further processors (for example email delivery or analytics) as our operations evolve; this policy will be updated accordingly.

9. International Data Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

10. Cookies

For detailed information about our use of cookies, please see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly.

12. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): Postbus 93374, 2509 AJ Den Haag, Netherlands; website: https://autoriteitpersoonsgegevens.nl/. If you live or work in another EU Member State, you may instead (or also) contact your local supervisory authority.

13. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us:

Growradiant
Herenoord 8, 3079 JJ Rotterdam, Netherlands
Phone: +31 10 479 3400
Email: message@growradiant.world