Privacy Notice

• when you complete the membership application form on the website,
• when you complete the first legal enquiry form,
• during later communication and when processing the documents you send us,
• when membership is started through Stripe Checkout and when recurring membership fees are collected,
• during membership administration and invoicing,
• when running the Grund referral programme,
• through technical log data needed to operate the website.
• when you complete the workplace quick check and when we arrange the related free consultation (see section 5a),

• name, email address, phone number and other contact details,
• selected membership, current situation, employer and timing information,
• a free-text summary of the matter,
• membership and payment data,
• billing details (for example billing name, address and country), together with the customer, subscription and transaction identifiers received from Stripe and the status, amount and currency of the payment,
• communication with Grund,
• the language of the submission or interface (Hungarian, German, English, Polish, Romanian, Italian or Portuguese), which is an operational language hint and not a guarantee of the language of personal assistance,
• documents handed over later, which may also contain particularly sensitive personal data (for example health data, trade union membership, data about legal proceedings).

• Membership application and the preparation/performance of the contract.
• Association administration (member register, communication, invoicing).
• Compliance with legal obligations (for example accounting retention).
• Legitimate interest (system security, fraud and abuse prevention, enforcing our own legal claims).
• Separate consent for the first discussion of any particularly sensitive data provided in a legal enquiry.

The membership form and the first legal inquiry form do not ask for marketing consent. In the workplace quick check you can consent, in a separate, optional, unticked box, to receiving occasional useful tips and Grund news by e-mail. This is not a condition of the free consultation, and you can withdraw it at any time by writing to info@grundunion.ch; withdrawal does not affect processing carried out lawfully before it. Confirmations and scheduling messages about your request are not a newsletter.

Within Grund, only the people assigned to the matter or to membership administration have access; the providers listed below may process data as processors to the extent needed for operations.

• Supabase Pte. Ltd. – form database,
• Lovable Labs Incorporated / Lovable Labs AB – website platform, operational services, and the internal transactional notification email about form submissions (Lovable Emails),
• Cloudflare, Inc. – hosting/CDN and security services,
• Stripe and the relevant Stripe group company identified in the applicable Checkout or Stripe Privacy Policy – the Stripe-hosted Checkout, payment processing, the collection of recurring membership fees, and payment security and fraud prevention,
• an email provider for further communication,
• Meta Platforms Ireland Ltd. – Meta Pixel for measuring our Facebook/Instagram ads (see section 9); in this respect Meta acts partly as an independent controller,
• where necessary, an accountant, a payment provider or a member-register provider,
• an external legal professional, an authority, a court or an employer – only on the basis of a specific mandate, a legal provision or an official request, and only to the extent necessary.

Internal notification about form submissions. The quick-check internal notification goes to info@grundunion.ch. Membership and case-inquiry notifications continue to go to info@jogvedo.ch. The membership application notification contains exactly the following details: name, email address, optional phone number, the selected membership plan, the language of the form interface used for the submission, the time of submission and the record identifier. The case inquiry notification contains exactly the following details: name, email address, optional phone number, the language of the form interface used for the submission, the time of submission and the record identifier. The current situation, the free-text message, the description of the matter, the employer details and the timing information are deliberately not sent by email and are available only in the protected database. The content of the internal notification for the workplace quick check is described in section 5a.

Payment data. Full card and bank details are processed directly by Stripe on its own payment page; they do not reach Grund and are not stored in our systems. Grund only sees the identifiers and payment status information returned by Stripe.

Spam protection. To limit abuse and automated submissions, the server may derive a salted hash from the sender's IP address. The application does not write the raw IP address into the form record; the hash, however, is stored together with the submission record and we still treat it as personal technical data, not as anonymous. The submission-frequency check uses a one-hour window; this is not a deletion period. The quick-check IP hash is subject to the separate active hourly purge described in section 7; this does not delete the full record.

If you complete our workplace quick check, we use your answers to contact you about a free, no-obligation employment-law consultation. We use the information you give to prepare for the first conversation and to notice if something may be urgent.

Your first name and e-mail address are required so that we can contact you. We ask for a phone number if you want a reply by phone or WhatsApp. The form asks where you work, which workplace topics apply, whether there is a deadline, and whether you still work at the workplace concerned. The canton is optional.

The quick check asks only for general workplace topics: pay, working time, termination, documents, a letter, insolvency, another workplace question or no specific issue. It does not ask for illness, accident or harassment choices, a free-text case description or such details. We will discuss the details during the consultation. We process the supplied data for contacting you and the first assessment on the basis of your consent when submitting.

With the submission we also record a unique identifier, the time, the language setting, your consents and the versions of the consent wording and of the privacy notice you were shown. We also store processing statuses and the technical outcome of delivering the notification and the confirmation. To limit abuse, the server may derive a salted hash from the IP address, which is stored with the record (see section 5, Spam protection).

If you arrive from an ad or a tagged link, the page may keep the link's campaign data – source, medium, campaign and content label – in the browser's session storage and attach it to your submission. You can also optionally tell us where you heard about us. Once attached, this data is part of the request record and of the internal notification.

Your answers are stored in a protected database. Your request is handled by authorised Grund staff, with the database, hosting and e-mail providers named in section 5. An internal e-mail notification gives us your contact details, your preferred contact method, your place of work and canton, short labels of the topics, your answers on the deadline (including any date given) and on whether you still work there, the preliminary classification, whether marketing consent was given, and language and source data. We may send an automatic confirmation to the e-mail address you gave.

The Meta Pixel is not loaded on the workplace quick check page or its result screens; we send Meta no data about your answers, your submission or its outcome.

The configured project database region is Europe (Ireland). The observed list of daily database backups is consistent with a provider retention window of approximately 14 days. Deletion from the active database does not mean immediate deletion from backups; ordinary access to them is restricted. Documented deletions must be reapplied after a restore. We do not guarantee physical erasure after exactly 14 days; this region information does not establish all providers’ processing and access locations or data-processing agreements.

Providers may process personal data in Switzerland, in the EEA, in the United States or in other countries. For such transfers we rely on an adequacy decision, appropriate contractual safeguards (for example standard contractual clauses, SCCs) or a statutory exception.

Specific provider and region information can be requested in writing at info@grundunion.ch.

• Membership applications that were not accepted and closed first enquiries: as a rule, last contact/closure + 6 months.
• Active membership and case data for the duration of the relationship or the matter, after that typically up to 10 years because of legal claims and accounting obligations.
• Accounting and payment records: 10 years (under Swiss law).
• Grund's own technical logs are as a rule kept for no more than 30 days; the operational and security logs of the platform providers may be retained under their own contractual regime – currently typically for no more than 90 days.
• In the event of a dispute or a legal hold, the data concerned may be retained for as long as necessary.
• We manually review and delete or irreversibly anonymise the full workplace quick-check record six calendar months after the later of actual closure and the last meaningful contact, or earlier if it is no longer needed. This includes Grund-managed internal mail and exports, not the participant’s own mailbox. Exceptions are limited to documented legal holds or case-file retention obligations, only for the affected data and the necessary period. Full-record deletion after six months is not automated.
• The quick-check IP hash is handled separately: the active, verified hourly purge removes hashes from records older than three hours, normally around 3–4 hours after submission. It leaves the other record fields unchanged. The infrastructure’s own logs are subject to separate provider retention rules.

We apply strict access restrictions, encrypt transmission (for example HTTPS) and follow the principle of data minimisation.

Please do not write or paste particularly sensitive data (for example health data), identifiable data about third parties or copies of documents into the first forms. If such material becomes necessary during the process, we will provide a secure transfer method later, through a separately agreed channel.

Email is not necessarily a secure channel: we do not ask for sensitive documents (contract, payslip, medical certificate and so on) in the first form.

Apart from technically necessary browser storage, we use only one tracking tool on the website: the Meta Pixel (see below). We do not run classic web analytics and do not show a cookie banner; you can disable the Pixel at any time below.

Once you open the external Stripe Checkout page, Stripe may use technically necessary payment-security and fraud-prevention cookies or browser storage under its own privacy notice. This happens on Stripe's page, not on the Grund website.

Browser storage that is technically necessary to operate the website (for example local storage) may occur. The language you choose is stored in the grund_lang cookie for one year so that the site opens in that language next time.

Meta Pixel. Our website uses the "Meta Pixel" of Meta Platforms Ireland Ltd. to measure the effectiveness of our Facebook and Instagram ads (page views, form submissions). The Pixel uses technical data from your browser and cookies; we do not transmit names, e-mail addresses or the content of the forms to Meta. Meta may process the data under its own privacy policy, including outside the EU/EEA and Switzerland. The legal basis is our legitimate interest in measuring our advertising; you can reject or delete Meta cookies in your browser settings and manage Meta's ad settings in your Facebook account.

The Meta Pixel is not loaded on the workplace quick check page or its result screens, and no Meta events are generated there.

Grund does not use automated decisions or profiling that would have significant legal effects on a member.

During payment, Stripe may carry out automated payment-security and fraud-risk checks under its own privacy notice (for example declining a payment or requesting additional verification).

For the workplace quick check, the system derives a preliminary topic and urgency classification from your answers. It helps us handle the request; it does not determine your employment rights and does not on its own decide whether you can receive the consultation. A person reviews your situation in the follow-up contact.

Within the limits of applicable law you may exercise the following rights:

• access to the data we process about you,
• rectification,
• erasure or restriction, where applicable,
• objection,
• data portability, where applicable,
• withdrawal of consent with effect for the future.

These rights are not absolute: in certain situations (for example an ongoing dispute or a legal obligation) they can only be exercised to a limited extent.

You may lodge a complaint with the Swiss data protection authority (FDPIC/EDÖB): edoeb.admin.ch.

This notice may be updated at any time; we publish the version in force on the website.

Contact for data protection matters: info@grundunion.ch.