top of page

Privacy Policy

This website (hereinafter, “Site”)is owned and operated by Growithy AG, with its registered address at Tödistrasse 16, 8002 - Zurich) (hereinafter, “Growithy“, “we”, “our”, and “us”).


At Growithy, we are committed to respecting your privacy.

This Privacy Policy explains how we collect, use and disclose personal information that we receive when you visit the Site and use our service “Flowle – Culture Data” hereinafter, “service”), or communicate with us offline as a business customer, prospective customer or general contact. This Privacy Policy applies to Growithy and covers our processing activities as a data controller.

We also process personal information as a data processor on behalf of our customers (please see “Growithy as Data Processor” below).

The Site is not intended for or directed at children under the age of 18 years, and we do not knowingly collect information relating to children under this age.

We are not required to appoint a formal data protection officer under data protection laws. However, we have appointed a Data Protection Contact who you can reach out to about any queries you may have in relation to this Privacy Policy. You can contact us about any data protection queries, using the contact details below.


If you have any questions about our Privacy Policy or your information, or to exercise any of your rights as described in this Privacy Policy or under data protection laws, you can contact us as follows:

  • by post:    Growithy AG, with its registered address at Tödistrasse 16, 8002 - Zurich

  • by email:



Growithy adheres to the following principles when processing your personal information as data controller:

1. Lawfulness, fairness and transparency – data must be processed lawfully, fairly and in a transparent manner.

2. Purpose limitation – data must be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.

3. Data minimization – data must be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.

4. Accuracy – data must be accurate and, where necessary, kept up to date.

5. Storage limitation – data must be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal information is processed.

6. Integrity and confidentiality – data must be processed in a manner that ensures appropriate security of the personal information, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage by using appropriate technical or organizational measures.


Information you give us

You may provide us with information about you browsing the Sites or by corresponding with us, by email or phone. This includes information you provide when you:

  • request additional information about our service or ask us to contact you

  • try the demo version of our service

  • log in to access and use the service

The categories of personal information you provide may include:

  • first and last name

  • job title and company name

  • email address

  • phone number

  • account details

  • any other identifier that permits Growithy to make contact with you.

We do not generally seek to collect sensitive personal information through our Site. Sensitive personal information is information relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership; health or sex life, sexual orientation; genetic or biometric information. If we do collect sensitive personal information, we will ask for your explicit consent to our proposed use of that information at the time of collection.

Information we collect from you

Growithy collects, stores and uses information about your visits to the Site and about your computer, tablet, mobile or other device through which you access the Site. This includes the following information: technical information, including the Internet protocol (IP) address, browser type, internet service provider, device identifier, time zone setting, browser plug-in types and versions, operating system and platform, and geographical location; information about your visit and use of the Site, including the full Uniform Resource Locators (URL), clickstream to, through and from our Site, pages you viewed and searched for, page response times, length of visits to certain pages, referral source/exit pages, page interaction information (such as scrolling, clicks and mouse-overs),and Website navigation.


We collect and process personal information on behalf of our customers in the provision of our service. In these circumstances, Growithy is acting as a data processor; our customers remain the data controllers in respect of personal information they provide to us. To the extent that we are acting as data processor, we will process such personal information in accordance with our customer’s instructions and any agreement in place with our customers. We will only use such personal information for the purposes of providing the service for which our customers have engaged us.

The customers of Growithy are responsible for ensuring that individual privacy is respected, including communicating to the individuals in their own privacy policies who their personal information is being shared with and processed by.

As a data processor, Growithy may share personal information when instructed by the customer (the data controller). Where authorized by the customer, personal information may also be shared with third party service providers who work for Growithy and who are subject to security and confidentiality obligations.

Where Growithy is acting as a data processor, any request from an individual for access to personal information held about them will be referred to the customer. Growithy will not respond directly to the request.

Growithy will retain personal information processed on behalf of customers only for as long as needed to provide services to the customer and in accordance with any agreements in place with the customer.


As a data controller, Growithy will only use your personal information where there is a legal basis to do so. The purpose for which we use and process your information and the legal basis on which we carry out each type of processing is explained in the table below.






Growithy will only use your personal information for the purposes for which it was collected, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you in a timely manner and we will explain the legal basis which allows us to do so.


Growithy will not sell, rent, lease or otherwise share your personal information other than as outlined in this Privacy Policy or without obtaining your consent beforehand.

Personal information will be shared with our third parties service providers who assist with the running of the Site and our services including hosting providers. Our third parties service providers are subject to security and confidentiality obligations and are only permitted to process your personal information for specified purposes and in accordance with our instructions.

Personal information will be shared also with subjects authorized by Growithy to process the personal data necessary for carrying out activities strictly connected to the provision of service and who have assumed an appropriate legal and contractual obligation of confidentiality (e.g. employees and / or collaborators of Growithy).

In addition, we may disclose information about you:

  • if we are under a duty to disclose or share your personal information in order to comply with any legal or regulatory obligation;

  • if necessary to protect the vital interests of a person; and

  • to enforce or apply our terms and conditions or to establish, exercise or defend the rights of Growithy, our staff, customers or others.


Your personal information will not be stored or transferred outside UE or to countries that do not provide adequate levels of personal protection.

In the event this is necessary to provide you with services, Growithy assures you that the transfer of your personal data outside UE or to countries that do not provide an adequate level of protection shall be performed only prior to the signing of specific contracts between Growithy and said parties in accordance with the applicable law and regulations.


Growithy use appropriate technical and organizational security measures to protect personal information both online and offline from unauthorized use, loss, alteration or destruction. We use industry-standard physical and procedural security measures to protect information from the point of collection to the point of destruction. This includes access controls to our systems, policies and other procedures to protect information from unauthorized access.

Only authorized personnel and third parties service providers are permitted access to personal information, and such access is limited by need. Where data processing is carried out on our behalf by a third party, we take steps to ensure that appropriate security measures are in place to prevent unauthorized disclosure of personal information.

Despite these precautions, however, Growithy cannot guarantee the security of information transmitted over the Internet or that unauthorized persons will not obtain access to personal information. In the event of a data breach, Growithy has put in place procedures to deal with any suspected breach and will notify you and any applicable regulator of a breach where required to do so.


Your personal information will not be kept for longer than is necessary for the purposes for which it was collected and processed.

Growithy will retain your personal data only for as long as is necessary for the purposes set out in this privacy policy, in compliance with the storage limitation principle, article 6 of LPD and article 5 of GDPR.



You have the right to access information which we hold about you (“data subject access request”).

You may also have the right to receive personal information which you have provided to us in a structured and commonly used format so that it can be transferred to another data controller (“data portability”). The right to data portability only applies where your personal data is processed by us with your consent or for the performance of a contract and when processing is carried out by automated means.

We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate. Please keep us informed if your personal information changes during your relationship with us.


Direct marketing

You have the right to object at any time to our processing of your personal information for direct marketing purposes.

Where we process your information based on our legitimate interests:

You also have the right to object, on grounds relating to your particular situation, at any time to processing of your personal information which is based on our legitimate interests. Where you object on this ground, we shall no longer process your personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.


You also have the following rights under data protection laws to request that we rectify your personal information which is inaccurate or incomplete.

In certain circumstances, you have the right to:

  • request the erasure of your personal information (“right to be forgotten”);

  • restrict the processing of your personal information in certain circumstances.

Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under the applicable law apply.

For example, we may refuse a request for erasure of personal information where the processing is necessary to comply with a legal obligation or necessary for the establishment, exercise or defense of legal claims. We may refuse to comply with a request for restriction if the request is manifestly unfounded or excessive.


You can exercise any of your rights as described in this Privacy Policy and under data protection laws by contacting us as provided in “Contacting Us” above.

Save as described in this Privacy Policy or provided under data protection laws, there is no charge for the exercise of your legal rights. However, if your requests are manifestly unfounded or excessive, in particular because of their repetitive character, we may either: (a) charge a reasonable fee taking into account the administrative costs of providing the information or taking the action requested; or (b) refuse to act on the request.

Where we have reasonable doubts concerning the identity of the person making the request, we may request additional information necessary to confirm your identity.


The Site may contain links to and from the websites of social media and advertisers. If you follow a link to any of these websites, please note that these websites have their own privacy policies and Growithy does not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to these websites.


If you have any questions or complaints regarding our Privacy Policy or practices, please contact us as provided in “Contacting Us” above.

  • If you are in located in the EEA, you also have the right to complain to the relevant supervisory authority in the EEA. In Switzerland this is the Federal Data Protection and Information Commissioner (


Growithy reserves the right to change this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

If we make any material changes to this Privacy Policy, we will notify you by means of a prominent notice on the Site prior to the change becoming effective.


Updated and Effective as of 27.10.2021

Cookie Policy

In order to improve the Site, we may use small files commonly known as “Cookies”. A cookie is a small amount of data which often includes a unique identifier that is sent to your computer or mobile phone (your “device”) from the Site and is stored on your device’s browser or hard drive. The cookies we use on the Site won’t collect personally identifiable information about you and we won’t disclose information stored in cookies that we place on your device to third parties.

If you don’t want us to use cookies when you use the Site, you can set your internet browser not to accept cookies. However, if you block cookies some of the features on the Site may not function as a result.

You can find more information about how to do manage cookies for all the commonly used internet browsers by visiting This website will also explain how you can delete cookies which are already stored on your device.


"Necessary Cookies" (so-called Technical Cookies)

They are necessary to allow you to browse the Site and use its features. In particular, they enable functions without which it would not be possible to fully use the Site; their presence enables basic functions such as page navigation and access to protected areas of the Site.

"Session cookies"

These are cookies that are active only for the reference session that allow you to temporarily store the information necessary for navigation from one page to another, avoiding having to re-enter it.

“Cookies from third parties”

We exclusively use “Google Analytics” on the Site. Google Analytics uses cookies to provide us with visitor counts per page and helps us understand how visitors navigate and use the Site. We can then use this information to improve navigability and the Site generally. The cookies we use on the Site won’t collect personally identifiable information about you and we won’t disclose information stored in cookies that we place on your device to third parties.

The Site uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the Site analyze how users use the Site. The information generated by the cookie about your use of the Site (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the Site, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of the Site. By using the Site, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

bottom of page