Privacy Policy of GROVEMIND

Version: August 2, 2026

 1. Responsible Party

The responsible party for the processing of personal data within the meaning of Swiss data protection law as well as for data processing within the meaning of the GDPR and other applicable laws is:

GROVEMIND 
Seminarstrasse 25 
5400 Baden 
Switzerland 

Email: team@grovemind.ch 

Website: grovemind.ch

Should GROVEMIND in the future be operated as a GmbH, association, sole proprietorship, or under any other legal form, the legal entity name indicated on the website shall be considered the responsible party.

 2. Subject Matter and Scope

This Privacy Policy informs you about how we process personal data when you:

• visit our website,

• use our online shop,

• make bookings (studio sessions, packages),

• book a studio session or participate in a music project,

• communicate with us (email, contact form, social media, WhatsApp, etc.),

• use our services such as recording, mixing, mastering, production, consulting, or content creation.

It applies to all offerings and services of GROVEMIND, in particular:

• studio sessions, recording, mixing, mastering,

• EP inquiries, content production, consulting, project planning,

• use of the website, the Shopify shop, the booking functions,

• contacting us via all mentioned channels.

Personal data means all information relating to an identified or identifiable natural person. "Processing" means any handling of personal data, e.g., collection, storage, use, disclosure, archiving, or deletion.

 3. What Personal Data Do We Process?

Depending on the nature of your interaction with us, the following categories of personal data may be collected:

 3.1 Contact and Identification Data

• Last name, first name, artist name

• Address, billing address, and if applicable, delivery address

• Email address, telephone number

• Social media profiles (e.g., Instagram, TikTok)

• Information about you or your organization, if provided voluntarily

 3.2 Booking and Contract Data

• Booked package or requested service

• Date, time, duration, desired producer/engineer

• Booking history, payment status, invoice data

• Information regarding rescheduling, cancellations, or project changes

 3.3 Payment and Transaction Data

• Payment method and confirmation, transaction details

• Invoice data

• Information processed by payment providers (e.g., credit card, debit card, or bank account details) 

  We do not store complete credit card data ourselves – these are processed directly by our payment service providers and Shopify.

 3.4 Data from Studio Sessions and Music Projects

• Music genre, style, reference songs, desired sound

• Studio experience, session goal, desired outcome

• Release date, project status, information about singles, EPs, albums

• Beat files, lyrics, demos, voice memos, stems, raw tracks, multitracks

• Audio recordings, project files, mix/master versions, export files

• Feedback, revision requests, project-related communication

• Information about accompanying persons (if required)

 3.5 Communication Data

• Messages via email, contact form, Instagram, TikTok, WhatsApp, SMS, or other channels

• Inquiries, support requests, project descriptions, feedback

• Communication metadata (technically or organizationally related)

 3.6 Website, Device, and Usage Data

• IP address, browser type, device type, operating system, unique identifiers

• Date and time of access

• Pages visited, clicks, interactions, duration of visit

• Information from cookies and similar tracking technologies (see section 12)

 3.7 Photo, Video, and Content Data

• Photos, videos, behind-the-scenes material, social media content, or snippets from sessions, insofar as such content is created

• Artist name, image, voice, performance, and other visible or audible content 

  Publication for advertising or social media purposes will only occur with your express consent (see section 14).

 3.8 Account and Preference Data

• Username, password (secured), security questions, settings, and preferences (e.g., wish list, saved items)

 4. From Which Sources Do Personal Data Originate?

We obtain personal data from the following sources:

• Directly from you – during bookings, inquiries, forms, uploads, communication.

• Automatically via the website and shop – through the use of our services, cookies, and similar technologies.

• From service providers and partners – e.g., payment providers, booking services, Shopify, analysis, or marketing tools.

• Via social media platforms – when you contact us there or interact with our content.

• From publicly accessible sources – insofar as this is necessary and permissible for a project or inquiry.

 5. For What Purposes Do We Process Personal Data?

We use your data for the following purposes:

• Provision and operation of our website, the online shop, and the booking functions.

• Processing of inquiries, bookings, orders, and payments.

• Planning and execution of studio sessions, recording, mixing, mastering, and music projects.

• Preparation of sessions – review of beats, lyrics, references, demos.

• Communication with clients, artists, producers, and project partners.

• Creation, processing, storage, and delivery of audio, project, and export files.

• Handling of revisions, feedback rounds, and project changes.

• Invoicing, accounting, payment processing, and legal documentation.

• Security, fraud prevention, abuse detection, and protection of our systems.

• Improvement of our website, services, and offerings.

• Marketing, advertising, and customer information – insofar as legally permissible or with your consent.

• Fulfillment of legal obligations, enforcement of contracts, and defense against claims.

 6. Legal Bases (in particular GDPR and Swiss Law)

Insofar as the GDPR or comparable regulations (e.g., UK GDPR) are applicable, we base the processing on the following legal grounds:

• Contract performance (Art. 6 para. 1 lit. b GDPR) – for bookings, sessions, payments, and project execution.

• Legitimate interests (Art. 6 para. 1 lit. f GDPR) – in particular for the operation of the website, communication, security, business organization, quality control, and direct marketing within the permitted framework.

• Consent (Art. 6 para. 1 lit. a GDPR) – for certain marketing measures, cookies/tracking, publication of media content.

• Legal obligations (Art. 6 para. 1 lit. c GDPR) – e.g., accounting, tax obligations, retention obligations, or official requests.

For persons residing in Switzerland, the corresponding provisions of the Federal Act on Data Protection (FADP) apply. Any granted consent may be revoked at any time with effect for the future.

 7. Our Website, Shopify, and the Online Shop

Our website and online shop are operated via Shopify. Shopify provides the technical infrastructure, shop functions, payment processing, security, analysis, and other services.

When you visit our website, view products or packages, make a booking, use the shopping cart, or initiate a payment, personal data is transferred to Shopify and to service providers used by Shopify, and processed there. This includes in particular contact, transaction, device, usage, payment, and shop data.

Shopify may also process this data outside Switzerland, in particular in the EU, the USA, Canada, or other countries. In certain cases, Shopify itself is responsible for the processing of your data (e.g., for certain analysis and advertising functions). Further information on data processing by Shopify and your rights vis-à-vis Shopify can be found in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

 8. Booking and Calendar Functions

For booking studio sessions and packages, we use booking and calendar functions (or corresponding plugins). In doing so, the following data in particular is processed:

• Date, time, booked package, desired producer/engineer,

• Contact details, payment status,

• Additional information about the session (e.g., desired sound, references).

This data is used for coordinating appointments, checking availability, booking confirmation, sending reminders, and preparing the sessions. If an external booking service is used, this service may process data on our behalf or under its own responsibility.

 9. Uploads, Audio Files, Project Files, and Cloud Services

For studio sessions and music projects, you can send us files, e.g., beats, lyrics, demos, voice memos, stems, raw tracks, or references. This can be done via website uploads, email, cloud links, transfer services, or directly in the studio.

For processing and storage, we use internal systems as well as suitable service providers or cloud services, for example:

• Shopify functions,

• Email systems,

• Google Drive, Dropbox, WeTransfer, iCloud, OneDrive, or comparable services (depending on the project).

We use this data exclusively for the execution, processing, organization, delivery, and documentation of the booked or requested services, unless another consent or legal basis exists.

 10. Communication via Email, Social Media, WhatsApp, and Other Channels

If you contact us via email, contact form, Instagram, TikTok, WhatsApp, SMS, or other channels, we process the information you provide to answer your inquiry, coordinate bookings, and manage our business relationship.

In doing so, the following data in particular may be processed:

• Name, username, profile information,

• Telephone number, email address,

• Message content, files, links, project information,

• Communication metadata.

Please note that when using platforms such as Instagram, TikTok, WhatsApp, or other social networks, the respective providers also process personal data under their own responsibility. The data protection provisions of these platforms apply in addition.

 11. Marketing, Newsletter, and Advertising

We may use your data to inform you about offers, studio sessions, new packages, promotions, releases, events, or relevant news from GROVEMIND – insofar as this is legally permissible or you have consented.

Marketing may in particular be conducted via email, social media, online advertising, or platforms such as Shopify, Instagram, TikTok, Meta, or Google.

You may object to the receipt of marketing communications at any time (e.g., via an unsubscribe link in newsletters) or revoke your consent. Non-advertising messages (e.g., booking confirmations, payment information, project-related communication) remain unaffected by this.

 12. Cookies, Analysis, and Tracking Technologies

Our website uses cookies and similar technologies. Cookies are small files that are stored on your device and enable certain functions or collect information about your usage.

We use the following categories in particular:

• Technically necessary cookies – for the operation of the website, shopping cart, checkout, security, booking functions.

• Functional cookies – for saving settings.

• Analysis cookies – for improving the website and evaluating usage (e.g., Shopify Analytics, Google Analytics).

• Marketing and tracking technologies – for displaying relevant advertising (e.g., Meta Pixel, TikTok Pixel), insofar as used and permissible.

Insofar as required, we obtain your consent via a cookie banner or corresponding settings. You can restrict or delete cookies in your browser at any time – however, this may impair certain functions of the website.

Note on "Do Not Track" and Global Privacy Control: 

We recognize the Global Privacy Control (GPC) signal as an opt-out for the disclosure of your data for targeted advertising purposes, insofar as this is provided for under applicable law (e.g., CCPA). Other "Do Not Track" signals are currently not taken into account.

 13. Social Media and Embedded Content

Our website may contain links or embedded content from social media platforms, music platforms, or third-party providers (e.g., Instagram, TikTok, YouTube, Spotify, SoundCloud).

If you click on or load such content, personal data (e.g., IP address, device information, usage data, interaction data) may be transmitted to the respective providers. The processing is partly carried out by the providers under their own responsibility – we recommend that you observe their data protection declarations.

 14. Publication of Photo, Video, and Audio Material

In the context of studio sessions, photos, videos, audio recordings, behind-the-scenes material, snippets, or references may be created.

As a matter of principle, we only publish such material (including artist name, image, voice, performance) for advertising, website, or social media purposes with your express consent. Consent can be given in writing, electronically, via form, email, message, or in another verifiable manner.

The internal storage and processing of audio, video, or project data for the execution of the booked service remains unaffected by this.

 15. Disclosure of Personal Data to Third Parties

We only disclose your personal data if this is necessary for the fulfillment of our services, compliance with legal obligations, the protection of legitimate interests, or with your consent.

Recipients may include in particular:

• Shopify (as the website and shop platform)

• Payment providers and banks

• Booking and calendar services

• Email, hosting, IT, and cloud service providers

• File transfer services (e.g., WeTransfer, Google Drive)

• Producers, engineers, service providers, or project partners, insofar as they are used for your project

• Marketing, analysis, and advertising service providers (insofar as used)

• Trustees, accounting, legal advisors, or authorities (insofar as required)

• Social media and platform providers, if you interact with our content

We ensure that all service providers process your data only to the extent necessary and with appropriate security measures.

 16. Disclosure Abroad (International Transfers)

Your personal data may be processed in Switzerland, the EU/EEA, the USA, Canada, or other countries – in particular if we use international service providers such as Shopify, payment providers, cloud services, social media platforms, or marketing tools.

If data is transferred to countries that do not offer an adequate level of protection under applicable law, we take suitable protective measures, e.g.:

• Standard contractual clauses of the EU Commission or equivalent clauses,

• other contractual guarantees, or

• legally permissible exceptions (e.g., for contract performance, with consent, or for the enforcement of legal claims).

 17. Retention Period

We store personal data only for as long as it is necessary for the respective purposes, a legal retention obligation exists, legitimate business interests exist, or claims can be asserted, exercised, or defended.

• Accounting, invoicing, and contract documents are retained for several years due to legal obligations (e.g., tax and commercial law).

• Audio, project, and session data may be stored for the execution, post-processing, revision, archiving, and quality assurance. However, we do not guarantee permanent or unlimited archiving. Customers are themselves responsible for additionally backing up delivered files after receipt.

As soon as data is no longer required for the aforementioned purposes and no retention obligations exist, it will be deleted or anonymized.

 18. Data Security

We take appropriate technical and organizational measures to protect your data from loss, misuse, unauthorized access, alteration, or disclosure. These include, among others:

• access restrictions,

• password-protected accounts,

• organizational rules,

• careful selection of service providers,

• encryption (where appropriate).

No data transmission over the internet and no electronic storage is completely secure. We can therefore not guarantee absolute security, but we strive to maintain a high level of protection.

 19. Minors

Our website and services are generally not directed at children or minors. Persons under the legal age of majority may only book or use studio sessions or other services with the consent of their legal guardians.

If we become aware that personal data of minors has been transmitted without the required consent, we reserve the right to delete this data or to refuse or suspend the booking.

 20. Your Rights

Depending on the applicable data protection law (Switzerland, EU/EEA, USA), you have various rights. These are not absolute and may be restricted in certain cases (e.g., due to statutory retention obligations or overriding interests).

 Overview of your rights:

• Access – to the personal data we process.

• Rectification – of inaccurate or incomplete data.

• Erasure – provided that no retention obligations or overriding interests conflict.

• Restriction of processing – under certain conditions.

• Objection – to certain processing (e.g., direct marketing).

• Data portability – provision of your data in a structured, common format (insofar as applicable).

• Revocation of consent – with effect for the future.

 Additional rights for residents of the EU/EEA and the United Kingdom:

• Objection to processing (for reasons arising from your particular situation).

• Restriction of processing – in certain cases (e.g., when contesting accuracy).

 Additional rights for residents of certain US states (e.g., California, CCPA/CPRA):

• Right to opt-out of the "sale" or "sharing" of your personal data for targeted advertising purposes. 

  You can exercise this opt-out at any time by enabling the Global Privacy Control (GPC) signal in your browser or by contacting us directly. We will automatically treat this signal as an opt-out for the respective device and browser; insofar as we can link the signal to a Shopify account, the opt-out also applies to that account.

To exercise your rights, please contact us at team@grovemind.ch. We may require proof of identity to process your request.

You also have the right to lodge a complaint with the competent data protection supervisory authority (see section 21).

 21. Right to Complain

If you believe that the processing of your personal data violates applicable data protection law, you may contact us. You also have the right to lodge a complaint with the competent supervisory authority:

• In Switzerland: Federal Data Protection and Information Commissioner (FDPIC)

• In the EU/EEA: the respective data protection supervisory authority of your place of residence (list of authorities).

• In the United Kingdom: Information Commissioner's Office (ICO).

 22. Changes to this Privacy Policy

We may amend this Privacy Policy at any time, in particular if our data processing, the service providers used, legal requirements, or website functions change.

The current version will be published on our website. The version published on the website shall apply.

23. Contact

If you have any questions about this Privacy Policy or the processing of your personal data, you can contact us at any time:

GROVEMIND 
Seminarstrasse 25 
5400 Baden 
Switzerland 

Email: team@grovemind.ch 

Website: grovemind.ch