Privacy Policy
1. Controller
The controller responsible for data processing on this website is:
Go&Grow Digital
Tajana Gudenus e.U.
Opernring 1/R/746
1010 Vienna
Austria
Phone: +43660 3933979
Email: office@goandgrow-digital.com
Website: goandgrow-digital.com
2. General Information on Data Processing
We process personal data exclusively in accordance with the General Data Protection Regulation, the Austrian Data Protection Act and the applicable provisions of the Telecommunications Act 2021.
Personal data means any information that can directly or indirectly identify a natural person, for example name, email address, telephone number, IP address or information you submit to us through a form.
3. Hosting and Server Log Files
This website is operated by the following hosting provider:
World4You
Austria
When you visit this website, technically necessary data is processed so that the website can be displayed correctly. This may include, in particular, the following data:
- IP address
- date and time of access
- page or file accessed
- browser type and browser version
- operating system used
- referrer URL
- amount of data transferred
- server status messages
The processing is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in technically providing the website, operating it securely and detecting attacks or malfunctions.
According to the hosting provider, server log files are stored for two weeks and then deleted, unless longer storage is required for security reasons or for the establishment, exercise or defence of legal claims.
4. Contact via Form or Email
If you contact us via a contact form or by email, we process the data you provide in order to handle your enquiry.
This may include, in particular, the following data:
- name
- email address
- company, if provided
- subject of the enquiry
- message
- technical metadata of the submission
The processing is carried out for the implementation of pre-contractual measures or for the performance of a contract pursuant to Art. 6 para. 1 lit. b GDPR, provided that your enquiry relates to our services. In other cases, the processing is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in answering and documenting enquiries efficiently.
Enquiries are stored for the duration of processing and generally for up to six months thereafter. If an enquiry results in a contractual relationship, we store relevant data in accordance with statutory retention obligations.
5. Processing in the Context of Projects and Contractual Relationships
If you commission our services or request a project from us, we process the data required for preparing offers, communication, project execution, billing and statutory documentation obligations.
This may include, in particular, the following data:
- name and contact details
- company data
- billing data
- project information
- communication content
- contract and offer data
- payment and accounting information
The processing is carried out pursuant to Art. 6 para. 1 lit. b GDPR for the performance of a contract or for the implementation of pre-contractual measures. Data subject to statutory retention obligations is processed pursuant to Art. 6 para. 1 lit. c GDPR.
Invoice and accounting data is generally stored for seven years in accordance with statutory retention obligations.
6. Cookies and Consent Management
Our website uses cookies and similar technologies.
Technically necessary cookies are required for the website to function. These may be set without prior consent.
Non-essential cookies, in particular for statistics, marketing, external media or tracking, are only set if you have actively given your prior consent.
To manage your consent, we use an individually developed consent management system that is directly integrated into this website. No external consent management provider is used for this purpose.
Your cookie selection is stored in the cookie gg_consent. This cookie stores the selected categories, the consent version and the time of selection. The storage period is 180 days.
You can change or withdraw your consent at any time with effect for the future. The relevant setting option can be found in the footer of this website via the “Cookie Settings” button.
7. Web Analytics
This website uses the following web analytics tools:
- Google Analytics 4
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland - Google Search Console
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Google Analytics 4 is used via the Google tag gtag.js with the Measurement ID G-RW1GMP5CD5.
Web analytics are used to statistically evaluate the use of our website and to improve our offering. In particular, the following data may be processed:
- pages accessed
- time spent on pages
- click behaviour
- origin of visitors
- device and browser information
- shortened or pseudonymised IP address
- cookie or device identifiers
Processing through Google Analytics 4 takes place exclusively on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and the applicable provisions of the Telecommunications Act 2021.
You can withdraw your consent at any time via the cookie settings.
Google Analytics 4 is used with Google Consent Mode v2. By default, analytics and marketing storage are disabled. Analytics cookies are only set if you consent to the Analytics category. Without consent, no analytics cookies are set; however, cookieless aggregated signals may be transmitted to Google.
According to Google, Google Analytics does not store individual IP addresses of users from the EU, Switzerland or the United Kingdom. IP addresses are used to derive approximate location data and are then discarded.
The data retention period in Google Analytics depends on the retention period configured in the Google Analytics property. For standard Google Analytics properties, the retention of user-level and event-level data can be set to 2 months or 14 months. Aggregated standard reports may remain available for longer.
When using Google Analytics, data may be transferred to Google LLC in the USA. According to Google, such transfers are based, among other things, on the EU-U.S. Data Privacy Framework and standard contractual clauses.
Google Search Console is used for the technical and content-related optimisation of visibility in Google Search. We receive aggregated information about search queries, impressions, clicks, positions, indexing and technical issues. Google Search Console does not set additional cookies through this website and is not used to individually track website visitors.
Further information:
8. Marketing and Conversion Tracking
This website currently does not use separate marketing or conversion tracking services such as Google Ads, Meta Pixel or LinkedIn Insight Tag.
If marketing or conversion tracking services are used in the future, processing will take place exclusively on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and the applicable provisions of the Telecommunications Act 2021.
You can withdraw your consent at any time via the cookie settings.
9. External Content and Embedded Services
External content or services may be embedded on this website, for example videos, iframe-based content, social media content or similar functions.
In this context, personal data may be transmitted to the respective providers, in particular IP address, browser information and usage data.
Where legally required, external content is only loaded after you have given your consent.
The following external services are used:
At present, no specifically named external media providers are permanently and automatically loaded in the theme. If editorial external iframe or video content is embedded on individual subpages, the privacy information of the respective provider also applies.
10. Social Media Links
This website may contain links to our profiles on social networks.
When you click these links, you leave our website. The respective platform operators are generally responsible for the processing of personal data on those platforms.
Linked platforms:
11. Recipients and Processors
Personal data is only passed on to third parties where this is necessary for providing the website, processing enquiries, fulfilling contracts, complying with legal obligations or based on your consent.
The following service providers may process personal data on our behalf:
- Hosting provider: World4You
- Email provider: World4You or the email service provider configured for the domain
- Contact form system: Contact Form 7
- Cookie consent tool: individually developed, locally integrated consent management system
gg_consent - Web analytics tools: Google Analytics 4 and Google Search Console
- Marketing tracking tools: currently no separate marketing tracking tools active
- Security or spam protection services: if activated in the contact form, the spam protection service used there
- Accounting or administration services: internal or commissioned accounting and administration services used where required for offers, invoices, project execution and legal obligations
Where required, appropriate data processing agreements pursuant to Art. 28 GDPR are concluded with processors.
12. Data Transfers to Third Countries
Personal data is only transferred to countries outside the European Union or the European Economic Area if this is necessary for the use of the services employed and if an appropriate legal basis exists.
This may be relevant in particular when using services provided by international providers.
When using Google Analytics 4 and Google Search Console, data may be processed by Google Ireland Limited and, where applicable, transferred to Google LLC in the USA. According to Google, such data transfers are based, among other things, on the EU-U.S. Data Privacy Framework and standard contractual clauses.
Hosting via World4You is provided by a provider based in Austria.
13. Storage Period
We store personal data only for as long as required for the respective purposes or as long as statutory retention obligations apply.
Unless a specific storage period is stated in this Privacy Policy, we delete personal data as soon as the purpose of processing no longer applies and there are no statutory retention obligations or legitimate interests in further storage.
14. Your Rights
Subject to the provisions of the GDPR, you have in particular the following rights:
- right of access
- right to rectification
- right to erasure
- right to restriction of processing
- right to data portability
- right to object
- right to withdraw consent given
If processing is based on your consent, you may withdraw this consent at any time with effect for the future.
To exercise your rights, please contact us at:
office@goandgrow-digital.com
15. Right to Lodge a Complaint
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with the competent supervisory authority.
For Austria, this is the Austrian Data Protection Authority.
16. Validity of this Privacy Policy
This Privacy Policy applies from:
04.07.2026
We reserve the right to amend this Privacy Policy if legal requirements, technical functions of this website or services used change.