Privacy Policy

Gr0w B.V. (“we”, “us”, or “our”) welcomes you to our website and thanks you for your interest in our organization. We take the protection of your personal data seriously and aim to ensure that you feel secure when visiting our website and sharing your information.

This General Privacy Policy explains how we collect, use, share, and otherwise process personal data (“data”) in connection with our website, services, and marketing activities.

All personal data is processed in accordance with applicable data protection laws, including the European General Data Protection Regulation ((EU) 2016/679) (“GDPR”).

Our website and services are not intended for children under the age of 18. We do not knowingly collect personal data from children. If you believe that we have inadvertently collected such data, please contact us so we can take appropriate action.

‍

1. Definitions

Controller: The entity that determines the purposes and means of the processing of personal data.

Lead: An individual whose contact details are collected for marketing or sales purposes.

Lead Data: The information filled in on a website by a Lead, including but not limited to email addresses, name, address, and telephone number details.

Processor: The entity that processes personal data on behalf of a Controller and in accordance with its instructions.

Data Subject: An identified or identifiable natural person to whom personal data relates.

Personal Data: Any information relating to an identified or identifiable natural person.

Online Lead Generation: Marketing activities aimed at generating interest or inquiries into products or services. Data collected in such campaigns is referred to as “Lead Data”.

‍

2. Services

Gr0w B.V. operates as an online advertising and lead generation agency and, in certain cases, as a Lead Data provider. Depending on the service, we either run digital marketing campaigns on behalf of a specific customer or collect Lead Data and make it available to one or more customers.

These activities may be carried out via platforms such as Facebook, Google, TikTok, Snapchat, and other websites, including our own landing pages.

‍

3. Controller

The controller of this website is:

Gr0w B.V.
Overhoeksplein 1, 1030KS Amsterdam
The Netherlands

‍

4. Data Protection Officer

We have appointed an internal Data Protection Officer (DPO).

You can contact the DPO at:
legal@gr0w.com

‍

5. Data Processing Activities

Below we describe what data we process, for what purposes, on which legal bases, and for how long.

5.1 Contact Requests

When you contact us via a web form or email, we process the information you provide (e.g. name, email address, phone number, company name, message content) to respond to your request.

Legal basis: Art. 6(1)(b) or (f) GDPR (contractual steps or legitimate interest)
Retention: No longer than necessary for the purpose or legal obligations.

5.2 Quote Requests

When requesting a quote from Gr0w B.V., we process contact and business details necessary to prepare and provide an offer.

Legal basis: Art. 6(1)(b) GDPR
Retention: No longer than necessary and in line with our internal retention policy.

5.3 Customer Management

For the provision of services, we process business contact data and financial information (e.g. billing and payment data).

Legal basis: Art. 6(1)(b) GDPR
Retention: In line with contractual and statutory retention periods.

5.4 Partner Portal

We may provide a partner portal for customers to access campaign insights and download Lead Data. We process login credentials and business identifiers.

Legal basis: Art. 6(1)(b) GDPR
Retention: For the duration of the customer relationship.

5.5 Customer Communications

We may send service-related and relationship-based communications to existing customers.

Legal basis: Art. 6(1)(b) or (f) GDPR

Opt-out: Available at any time via unsubscribe link or direct contact.

5.6 Newsletter

If you subscribe to our newsletter, we process your contact details for email distribution and analytics.

Legal basis: Art. 6(1)(a) GDPR (consent)

You may withdraw consent at any time.

5.7 Recruitment

When you apply for a position, we process application data relevant to recruitment.

Legal basis: Art. 6(1)(b) or (f) GDPR
Retention: Up to 6 months after completion of the recruitment process, unless otherwise required.

5.8 Online Lead Generation Campaigns

Branded

In lead generation campaigns, we often act as a Processor on behalf of our customers. We refer to this as “Branded” campaigns.

Processing is governed by data processing agreements pursuant to Art. 28 GDPR. Lead Data may be stored in a de-identified form for up to 5 years for compliance and legal defense purposes, unless otherwise instructed by the customer.

Non-Branded

In certain cases, we collect Lead Data and disclose it to one or more companies. We refer to this as “Non-Branded” lead generation.

Once the Lead Data is disclosed, the receiving company acts as an independent Controller. We retain Lead Data for a period between two (2) and seven (7) years, depending on applicable laws and business requirements.

Each campaign and website includes a specific campaign privacy policy. Please review the applicable policy for more details.

‍

6. Website Usage Data

6.1 Server Logs

We automatically collect technical data such as IP address, browser type, and access timestamps to ensure website functionality and security.

Legal basis: Art. 6(1)(f) GDPR

6.2 Cookies and Similar Technologies

We use cookies and similar technologies for functional, analytical, and marketing purposes. More information is available in our Cookie Policy.

Cookie preferences can be managed via our consent management platform.

‍

7. Data Sharing

We may share personal data with:

Group companies and affiliates
Service providers acting as Processors
Customers (when you request quotes or participate in campaigns)
Authorities, where legally required

‍

8. International Data Transfers

We primarily store Lead Data within the European Union (EU).

Where data is transferred outside the EEA, we ensure appropriate safeguards, such as EU Standard Contractual Clauses.

‍

9. Your Rights

You have the right to:

Access your data
Rectify incorrect data
Erase data
Restrict processing
Object to processing
Withdraw consent
Lodge a complaint with a supervisory authority

Requests can be submitted to:
legal@gr0w.com

‍

10. Security

We implement appropriate technical and organizational measures to protect personal data, including encryption, access controls, and secure data transfers.

For more information about our security measures, please contact us.

‍

11. Changes to this Policy

We may update this policy from time to time. The latest version is always available on our website.

Last updated: March 2026

‍

12. Contact