Privacy Policy

**1. Introduction**
This Privacy Policy explains how we collect, use, disclose, and protect your personal information. We are committed to ensuring that your privacy is protected and that your personal data is handled in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

**2. Purpose of Data Collection**
We collect personal data to provide and enhance our services, fulfill contractual obligations, comply with legal requirements, and improve user experience.

**3. Types of Data Collected**
We may collect the following types of personal data:
– Identification information (e.g., name, contact details)
– Payment information (e.g., credit card details)
– Technical data (e.g., IP address, browser type, device information)
– Usage data (e.g., how you use our website and services)

**4. Legal Basis for Processing Personal Data**
We process your personal data based on the following legal grounds:
– Consent
– Contractual necessity
– Compliance with legal obligations
– Legitimate interests

**5. Data Sharing and Transfer**
We may share your personal data with third parties, including:
– Service providers who assist us in delivering our services (e.g., hosting, CRM, analytics).
– Business partners, as necessary for the provision of our services.
– Authorities, where required by law.
Your data may be transferred to recipients outside the European Union (EU) or European Economic Area (EEA). We ensure that such transfers are conducted in compliance with GDPR standards, including reliance on the EU-US Privacy Shield or appropriate contractual safeguards.

**6. Data Retention**
We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

**7. Your Rights**
You have the following rights concerning your personal data, as provided by the GDPR:
– Right to access: You can request copies of your personal data.
– Right to rectification: You can request correction of inaccurate or incomplete data.
– Right to erasure: You can request deletion of your personal data under certain conditions.
– Right to restrict processing: You can request restriction of processing your personal data.
– Right to data portability: You can request transfer of your personal data to another organization.
– Right to object: You can object to processing based on legitimate interests, provided you have reasons related to your particular situation.
To exercise these rights, please contact us using the information provided below.

**8. Security of Your Data**
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or damage. This includes using SSL encryption for data transmission and maintaining physical security measures for our facilities.

**9. Cookies and Tracking Technologies**
Our website may use cookies and similar tracking technologies to enhance user experience. You can manage your cookie preferences through your browser settings. For detailed information on how we use cookies, please refer to our Cookie Policy.

**10. Changes to This Privacy Policy**
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any significant changes and encourage you to review this policy periodically.

**11. Contact Us**
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
crowda Sustainability GmbH
Im Tiergarten 10
8055 Zurich
Switzerland
info@crowda.ch