Privacy Policy

1. Controller

The controller within the meaning of the GDPR is:

Julia Oestreich · Grow & Move
Baakenallee 24 · 20457 Hamburg, Germany
Phone: +49 156 79640693
E-mail: info@growandmove.de

2. Hosting (Vercel)

This website is hosted by Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA. When you visit this website, connection data is automatically collected (IP address, timestamp, requested URL, browser type). This data is processed by Vercel and temporarily stored in server log files. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website).

Vercel is certified under the EU-US Data Privacy Framework. The website font is bundled on our server at build time; no request is made to Google Fonts. Further information: vercel.com/legal/privacy-policy

3. Contact by e-mail, phone and WhatsApp

There is no contact form on this website. If you contact us by e-mail or phone, we process the data you provide (e.g. name, e-mail address, phone number, content of your enquiry, and for course enquiries your baby's due date) solely to handle your request and organise the course. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures and performance of a contract), otherwise Art. 6(1)(f) GDPR. The data is deleted once it is no longer needed for this purpose and no statutory retention obligations apply.

WhatsApp: The contact buttons on this website open WhatsApp with a pre-filled message. Only when you send the message in WhatsApp are your phone number, profile name and message content transmitted to WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (part of Meta Platforms) and processed under their terms, including on servers in the USA (certified under the EU-US Data Privacy Framework). We use WhatsApp on a business device; contact details are not used for advertising and not shared with third parties. The legal basis is your consent expressed by actively using WhatsApp (Art. 6(1)(a) GDPR) and Art. 6(1)(b) GDPR. If you prefer not to use WhatsApp, simply e-mail us at info@growandmove.de. WhatsApp privacy notice: whatsapp.com/legal/privacy-policy-eea

4. Cookies and consent

This website does not set any cookies that are not technically necessary before you have given consent in the cookie banner. Your choice is stored in your browser (localStorage "cookie-consent" and the cookie "gm-consent", valid for 12 months) so it can be respected on future visits (Section 25(2) no. 2 TDDDG). Only after your consent are Google Analytics (statistics) and the Meta Pixel (marketing) loaded, see sections 6 and 7.

Withdrawal: You can withdraw or change your consent at any time with effect for the future. Click Cookie settings in the footer of any page. The banner reopens, and with "Decline" the services are no longer loaded. The lawfulness of processing carried out before withdrawal remains unaffected (Art. 7(3) GDPR).

5. Newsletter (Brevo) with double opt-in

If you sign up for our newsletter about new course dates, your e-mail address together with the chosen language and the sign-up page is transferred to and stored by Brevo SAS, 7 rue de Madrid, 75008 Paris, France. Brevo processes the data on our behalf (Art. 28 GDPR) within the EU.

Sign-up uses a double opt-in procedure: you receive an e-mail with a confirmation link and are only subscribed once you click it. The time of sign-up and confirmation and the IP address used are stored to document your consent. The legal basis is your consent (Art. 6(1)(a) GDPR). Your data is stored until you unsubscribe.

You can unsubscribe at any time via the link at the end of every e-mail or by writing to info@growandmove.de. Further information: brevo.com/en/legal/privacypolicy

6. Google Analytics 4 (only with consent)

With your consent we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to evaluate how the website is used (pages viewed, time on site, approximate location, device, clicks on contact buttons). Google Analytics 4 does not store IP addresses; they are only used for coarse location. Data may be transmitted to Google servers in the USA; Google LLC is certified under the EU-US Data Privacy Framework.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). User data retention: 14 months. Withdraw via "Cookie settings" in the footer. Further information: policies.google.com/privacy

7. Meta Pixel and Meta Conversions API (only with consent)

With your consent we use the Meta Pixel, a marketing tool provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. It lets us measure whether our ads on Facebook and Instagram lead to visits and enquiries, and show ads to visitors of this website there (retargeting). The pixel sets the cookies "_fbp" and "_fbc" and transmits page views and events (e.g. click on WhatsApp or e-mail, newsletter sign-up) together with your IP address, browser data and the cookie identifiers to Meta.

Conversions API: We additionally send the same events from our server to Meta so that measurement works even when browser scripts are blocked. This transmits the IP address, user agent, the cookie identifiers "_fbp"/"_fbc", the page URL and, for newsletter sign-ups, your e-mail address in hashed form (SHA-256, never in plain text). Browser and server events carry the same event ID so Meta counts them only once. Transmission happens only when your consent is present; we verify this on the server as well.

Meta also processes data in the USA; Meta Platforms Inc. is certified under the EU-US Data Privacy Framework. For the collection and transmission to Meta we are joint controllers with Meta (Art. 26 GDPR); Meta is solely responsible for any further processing. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG); withdraw via "Cookie settings" in the footer. Further information and settings at Meta: facebook.com/privacy/policy

8. External links

This website contains links to external services such as Google Maps and Instagram. By clicking these links you leave our website. The privacy policies of the respective external services govern the processing of your data by those services. We have no influence over their data processing. We do not embed maps or social media plugins.

9. Your rights as a data subject

Under the GDPR you have the following rights against the controller:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure / "right to be forgotten" (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on legitimate interests (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise your rights, please contact: info@growandmove.de

10. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us. The competent authority for Hamburg is the Hamburg Commissioner for Data Protection and Freedom of Information: www.datenschutz.hamburg.de