Privacy Notice

• when you complete the membership application form on the website,
• when you complete the first legal enquiry form,
• during later communication and when processing the documents you send us,
• when membership is started through Stripe Checkout and when recurring membership fees are collected,
• during membership administration and invoicing,
• when running the Grund referral programme,
• through technical log data needed to operate the website.

• name, email address, phone number and other contact details,
• selected membership, current situation, employer and timing information,
• a free-text summary of the matter,
• membership and payment data,
• billing details (for example billing name, address and country), together with the customer, subscription and transaction identifiers received from Stripe and the status, amount and currency of the payment,
• communication with Grund,
• the language of the submission or interface (Hungarian, German or English), which is an operational language hint and not a guarantee of the language of personal assistance,
• documents handed over later, which may also contain particularly sensitive personal data (for example health data, trade union membership, data about legal proceedings).

• Membership application and the preparation/performance of the contract.
• Association administration (member register, communication, invoicing).
• Compliance with legal obligations (for example accounting retention).
• Legitimate interest (system security, fraud and abuse prevention, enforcing our own legal claims).
• Separate consent for the first discussion of any particularly sensitive data provided in a legal enquiry.

The web forms currently do not collect marketing consent, so we do not use the data provided here for newsletters or promotional messages. Such communication could only begin on the basis of a later, separate and voluntary consent.

Within Grund, only the people assigned to the matter or to membership administration have access; the providers listed below may process data as processors to the extent needed for operations.

• Supabase Pte. Ltd. – form database,
• Lovable Labs Incorporated / Lovable Labs AB – website platform, operational services, and the internal transactional notification email about form submissions sent to info@jogvedo.ch (Lovable Emails),
• Cloudflare, Inc. – hosting/CDN and security services,
• Stripe and the relevant Stripe group company identified in the applicable Checkout or Stripe Privacy Policy – the Stripe-hosted Checkout, payment processing, the collection of recurring membership fees, and payment security and fraud prevention,
• an email provider for further communication,
• where necessary, an accountant, a payment provider or a member-register provider,
• an external legal professional, an authority, a court or an employer – only on the basis of a specific mandate, a legal provision or an official request, and only to the extent necessary.

Internal notification about form submissions. After a form is submitted successfully, Grund receives an automated internal notification email at info@jogvedo.ch. The membership application notification contains exactly the following details: name, email address, optional phone number, the selected membership plan, the language of the form interface used for the submission, the time of submission and the record identifier. The case inquiry notification contains exactly the following details: name, email address, optional phone number, the language of the form interface used for the submission, the time of submission and the record identifier. The current situation, the free-text message, the description of the matter, the employer details and the timing information are deliberately not sent by email and are available only in the protected database.

Payment data. Full card and bank details are processed directly by Stripe on its own payment page; they do not reach Grund and are not stored in our systems. Grund only sees the identifiers and payment status information returned by Stripe.

Spam protection. To filter abuse and automated submissions we do not store the sender's raw IP address: we derive only a salted hash from it, keep that for at most a few hours in order to limit submission frequency, and then delete it automatically.

Providers may process personal data in Switzerland, in the EEA, in the United States or in other countries. For such transfers we rely on an adequacy decision, appropriate contractual safeguards (for example standard contractual clauses, SCCs) or a statutory exception.

Specific provider and region information can be requested in writing at info@jogvedo.ch.

• Membership applications that were not accepted and closed first enquiries: as a rule, last contact/closure + 6 months.
• Active membership and case data for the duration of the relationship or the matter, after that typically up to 10 years because of legal claims and accounting obligations.
• Accounting and payment records: 10 years (under Swiss law).
• Grund's own technical logs are as a rule kept for no more than 30 days; the operational and security logs of the platform providers may be retained under their own contractual regime – currently typically for no more than 90 days.
• In the event of a dispute or a legal hold, the data concerned may be retained for as long as necessary.

We apply strict access restrictions, encrypt transmission (for example HTTPS) and follow the principle of data minimisation.

Please do not write or paste particularly sensitive data (for example health data), identifiable data about third parties or copies of documents into the first forms. If such material becomes necessary during the process, we will provide a secure transfer method later, through a separately agreed channel.

Email is not necessarily a secure channel: we do not ask for sensitive documents (contract, payslip, medical certificate and so on) in the first form.

We currently do not use web analytics, advertising pixels or marketing tracking on this website, so we do not display a cookie banner either.

Once you open the external Stripe Checkout page, Stripe may use technically necessary payment-security and fraud-prevention cookies or browser storage under its own privacy notice. This happens on Stripe's page, not on the Grund website.

Browser storage that is technically necessary to operate the website (for example local storage) may occur. If non-essential tracking is introduced in the future, we will first update this notice and provide an appropriate, genuinely working settings/opt-out mechanism.

Grund does not use automated decisions or profiling that would have significant legal effects on a member.

During payment, Stripe may carry out automated payment-security and fraud-risk checks under its own privacy notice (for example declining a payment or requesting additional verification).

Within the limits of applicable law you may exercise the following rights:

• access to the data we process about you,
• rectification,
• erasure or restriction, where applicable,
• objection,
• data portability, where applicable,
• withdrawal of consent with effect for the future.

These rights are not absolute: in certain situations (for example an ongoing dispute or a legal obligation) they can only be exercised to a limited extent.

You may lodge a complaint with the Swiss data protection authority (FDPIC/EDÖB): edoeb.admin.ch.

This notice may be updated at any time; we publish the version in force on the website.

Contact for data protection matters: info@jogvedo.ch.