Privacy Policy
Information pursuant to Art. 13/14 GDPR on the processing of personal data by Just Growing GmbH (Syvera).
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:
Just Growing GmbH (trading as "Syvera") Silcherstraße 46 71364 Winnenden Germany
Email: datenschutz@syvera.de Web: syvera.com
2. Principles of Data Processing
We process personal data only to the extent necessary to provide our services or where a legal basis exists. Legal bases for processing are, depending on context, Art. 6(1)(a) GDPR (consent), (b) (contract performance), (c) (legal obligation) or (f) GDPR (legitimate interest).
We store personal data only for as long as required for the respective processing purpose or as mandated by statutory retention periods.
3. Data Collection when Visiting our Website
When you visit our website, your browser automatically transmits information to our server. The following data is temporarily stored: IP address, date and time of access, URL accessed, referrer URL, browser and operating system used.
This data is technically necessary to display the website and is deleted after 30 days. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing a secure and functional website).
4. Contact
When you contact us by email or via a contact form, we store your details to process your request and for any follow-up queries. Required fields are marked with an asterisk (*).
The processed data will be deleted as soon as the request has been conclusively answered and no retention obligations apply. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or (f) GDPR.
5. User Account & Services
To use the Syvera platform, registration of a user account is required. We process your name, email address, company and password. Processing is carried out for contract performance (Art. 6(1)(b) GDPR).
In connection with using our services, we also process usage data (log data, device information) to ensure operation, and content data that you enter into the platform. A separate Data Processing Agreement (DPA) applies to this data.
Registration data
Name, email address, company name, password (stored as bcrypt hash).
Usage data
Log data, IP addresses, device information, timestamps of actions within the platform.
Content data
All data you enter into the Syvera modules. We process this exclusively on your instructions (data processing).
Retention period
Account data is stored until the account is deleted; upon cancellation, data is deleted after 30 days.
7. Third-party Services
We use the following third-party services, each with their own privacy policies. Where transfers to third countries occur, we rely on EU Standard Contractual Clauses (Art. 46 GDPR).
Service / Provider
Purpose & Location
Hetzner Online GmbH
Web hosting & data centre — Germany / EU.
Cloudflare, Inc.
CDN, DDoS protection, DNS — USA (EU SCCs). Privacy: cloudflare.com/privacypolicy
Stripe, Inc.
Payment processing — USA (EU SCCs). Privacy: stripe.com/privacy
Postmark / ActiveCampaign
Transactional emails — USA (EU SCCs).
8. Data Transfers to Third Parties
Your personal data will only be shared with third parties where this is necessary for contract performance, you have given consent, we are legally required to do so, or a legitimate interest exists.
Our complete list of sub-processors is available at syvera.com/subprocessors. No data is transferred to third parties for advertising purposes.
9. Your Rights
As a data subject, you have the following rights against the controller:
- Right of access (Art. 15 GDPR): You may request information about the data stored about you.
- Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate data.
- Right to erasure (Art. 17 GDPR): Under certain conditions, you may request the deletion of your data.
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests.
- Right to lodge a complaint with a supervisory authority: State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW), lfd.bwl.de
10. Data Security
We implement technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved in line with technological developments.
All data transmissions are exclusively encrypted using TLS 1.3. All passwords are stored as bcrypt hashes.
11. Currency of this Policy
This privacy policy is dated April 2026. We reserve the right to update it as necessary. The current version is always available at syvera.com/privacy.
We will notify registered users of material changes by email.
Privacy requests
For requests to exercise your data subject rights or general privacy enquiries, please contact: Just Growing GmbH (Syvera) · Silcherstraße 46 · 71364 Winnenden