data protection

As of March 2024

Cave du Vin by Jan Wiederkehr, Klösterlistrasse 4, 6010 Kriens is the operator of the website www.caveduvin.ch

with the services offered therein and is therefore responsible for the collection, processing and use of your personal data and the compatibility of data processing with applicable data protection law.

Your trust is important to us, which is why we take data protection seriously and ensure appropriate security. Of course, we comply with the legal provisions of the Federal Data Protection Act (DSG), the Ordinance on the Federal Data Protection Act (VDSG), the Telecommunications Act (FMG) and other applicable data protection provisions of Swiss or EU law, in particular the General Data Protection Regulation (GDPR).

So that you know what personal data we collect from you and for what purposes we use it, please read the information below.

Visiting our website
When you visit our website, our servers temporarily save each access in a log file. As with every connection to a web server, the following technical data is recorded without your intervention and stored by us until it is automatically deleted after 190 days at the latest:

  • IP address of the requesting computer
  • Name of the owner of the IP address range (usually your Internet access provider)
  • Date and time of access
  • Website from which access was made (referring URL) if applicable with search term used
  • Name and URL of the retrieved file
  • Status code (e.g. error message)
  • Operating system of your computer
  • Browser you use (type, version and language)
  • Transfer protocol used (e.g. HTTP/1.1)
  • if applicable, your user name from registration/authentication

This data is collected and processed for the purpose of enabling the use of our website (establishing a connection), ensuring long-term system security and stability, enabling the optimization of our internet offering and for internal statistical purposes. This is our legitimate interest in data processing within the meaning of Art. 6 (1) (f) GDPR.

Opening a customer account
 To place orders in the online shop, you can order as a guest or open a customer account. When you register for a customer account, we collect the following data:

  • First and Last Name
  • company
  • E-mail address
  • Street, No.
  • ZIP / City
  • country
  • phone
  • mobile
  • birth date
  • password

The data is collected for the purpose of providing the customer with password-protected direct access to the basic data stored by us. The customer can view their completed and open orders or manage or change their personal data.

The legal basis for processing the data for this purpose is the consent you have given in accordance with Art. 6 (1) (a) EU GDPR.

Shopping in the online shop
If you would like to place orders in our online shop, we require the following data to process the contract:

  • First and Last Name
  • company
  • E-mail address
  • Street, No.
  • Postcode/City (and if different delivery address)
  • country
  • phone
  • mobile
  • birth date
  • Payment details (depending on the payment method chosen)
  • Login details, i.e. email address and password (for registered customers)

Unless otherwise stated in this privacy policy or you have given your separate consent, we will only use the aforementioned data to process the contract, namely to process your orders, deliver the ordered products and ensure correct payment. The legal basis for data processing for this purpose is the fulfillment of a contract in accordance with Art. 6 Para. 1 lit. b EU GDPR.

Transfer of data to third parties
We will only pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship.

In addition, we pass on your data to third parties if this is necessary in the context of using the website and processing the contract (also outside the website), namely the processing of your bookings. This includes the respective transport service provider that has been entrusted with the shipping of ordered goods. A service provider to whom the personal data collected via the website is passed on or who has or can have access to it is our web host Green Datacenter AG, Industriestrasse 33, 5242 Lupfig. The website is hosted on servers in Switzerland. The data is passed on for the purpose of providing and maintaining the functionality of our website. This is our legitimate interest within the meaning of Art. 6 Para. 1 lit. f EU GDPR.

If we make advance payments, e.g. when purchasing on account, we may obtain a credit report from a credit agency based on mathematical-statistical procedures in order to protect our legitimate interests. For this purpose, we transmit the personal data required for a credit check to the credit agency Intrum AG, Eschenstrasse 12, 8603 Schwerzenbach, and use the information received on the statistical probability of a payment default to make a balanced decision about the establishment, implementation or termination of the contractual relationship. The credit report may contain probability values ​​(score values) that were calculated on the basis of scientifically recognized mathematical-statistical procedures and whose calculation includes address data, among other things. Your legitimate interests will be taken into account in accordance with the statutory provisions. For the purposes described above, we have a legitimate interest in data processing within the meaning of Art. 6 Para. 1 lit. f EU GDPR.

Finally, when you pay by credit card on the website, we forward your credit card information to your credit card issuer and to the credit card acquirer. If you decide to pay by credit card, you will be asked to enter all the mandatory information. The legal basis for the transfer of data is the fulfillment of a contract in accordance with Art. 6 Paragraph 1 Letter b of the EU GDPR. Regarding the processing of your credit card information by these third parties, we ask you to also read the general terms and conditions and the privacy policy of your credit card issuer.

Transfer of data abroad
We are entitled to transfer your personal data to third parties (contracted service providers) abroad for the purposes of the data processing described in this data protection declaration. These companies are obliged to protect data to the same extent as we are. If the level of data protection in a country does not correspond to that in Switzerland or Europe, we contractually ensure that the protection of your personal data corresponds to that in Switzerland or the EU at all times.

Cookies
 Cookies help in many ways to make your visit to our website easier, more pleasant and more meaningful. Cookies are information files that your web browser automatically stores on your computer's hard drive when you visit our website.

For example, we use cookies to offer you the shopping cart function across multiple pages and to temporarily save your entries when you fill out a form on the website so that you do not have to repeat the entry when you visit another subpage. Cookies may also be used to identify you as a registered user after you have registered on the website without you having to log in again when you visit another subpage.

Most Internet browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears when you receive a new cookie. On the following pages you will find explanations on how you can configure the processing of cookies in the most common browsers:

  • Microsoft's Windows Internet Explorer
  • Microsoft's Windows Internet Explorer Mobile
  • Firefox
  • Google Chrome for Desktop
  • Google Chrome for Mobile
  • Apple Safari for Desktop
  • Apple Safari for Mobile

Deactivating cookies may result in you not being able to use all functions of our website.

Tracking tools and general
 We use the web analysis service Google Analytics to design our website to meet your needs and to continuously optimize it. In this context, pseudonymized user profiles are created and small text files stored on your computer (cookies) are used. The information generated by the cookie about your use of this website is transferred to the servers of the providers of these services, stored there and processed for us. In addition to the data listed under point 1, we may receive the following information:

  • Navigation path that a visitor takes on the site
  • Time spent on the website or subpage
  • Subpage on which the website is left
  • The country, region or city from which access is made
  • Device (type, version, color depth, resolution, width and height of the browser window)

Returning or new visitor
The information is used to evaluate the use of the website, to compile reports on website activities and to provide other services related to website and internet usage for the purposes of market research and needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf.

Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information on your use of this website generated through the cookie is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law or where third parties process the data on Google's behalf. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the installation of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. By using this website, you agree to the processing of the data collected about you by Google in the manner and for the purposes set out above. Further information about the web analysis service used can be found on the Google Analytics website.

Instagram plugins
Our web pages contain plug-ins from the social network Instagram. You can recognise the Instagram plug-in by the Instagram logo on our page. When you visit our web pages, a direct connection is established between your browser and the Instagram server via the plug-in. Instagram therefore receives the information that you have visited our page using your IP address. If you click the Instagram button while you are logged into your Instagram account, you can link the contents of our pages to your Instagram profile. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or how it is used by Instagram. You can find further information on this in Instagram's privacy policy. If you do not want Instagram to associate your visit to our pages with your Instagram user account, please log out of your Instagram user account.

Instagram remarketing / retargeting
 Remarketing tags from the social network Instagram are integrated into our pages. When you visit our pages, a direct connection is established between your browser and the Instagram server via the remarketing tags. Instagram therefore receives the information that you have linked your IP address to our website. address. This allows Instagram to associate the visit to our pages with your user account. We can use the information obtained in this way to display Instagram ads. We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or their use by Instagram. For more information, see Instagram's privacy policy.

Note on data transfers to the USA
For the sake of completeness, we would like to point out to users residing or based in Switzerland that surveillance measures are in place in the USA by US authorities that generally allow the storage of all personal data of all persons whose data has been transferred from Switzerland to the USA. This is done without differentiation, restriction or exception based on the objective pursued and without an objective criterion that makes it possible to restrict the US authorities' access to the data and their subsequent use to very specific, strictly limited purposes that can justify the interference associated with both access to this data and its use. We would also like to point out that in the USA there are no legal remedies available to the data subjects from Switzerland that allow them to access the data concerning them and to have it corrected or deleted, and there is no effective legal protection against general access rights of US authorities. We explicitly inform the data subject of this legal and factual situation in order to make an appropriately informed decision regarding consent to the use of his or her data.

We would like to point out to users residing in an EU member state that, from the perspective of the European Union, the USA does not have an adequate level of data protection - due, among other things, to the issues mentioned in this section. To the extent that we have explained in this privacy policy that recipients of data (such as Google) are based in the USA, we will ensure that your data is protected at an appropriate level by our partners either through contractual arrangements with these companies or by ensuring that these companies are certified under the EU or Swiss-US Privacy Shield.

Right to information, rectification, erasure and restriction of processing; right to data portability

You have the right to request information about the personal data we store about you. In addition, you have the right to correct incorrect data and the right to delete your personal data, provided that this does not conflict with any statutory retention period or a legal basis that allows us to process the data.

You also have the right to request that we return the data you have given us (right to data portability). Upon request, we will also pass the data on to a third party of your choice. You have the right to receive the data in a common file format.

You can contact us for the aforementioned purposes via the email address info@caveduvin.ch. In order to process your requests, we may, at our own discretion, request proof of identity.

Data security
We use suitable technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

You should always treat your access data confidentially and close the browser window when you have finished communicating with us, especially if you share the computer with others.

We also take internal data protection very seriously. Our employees and the service providers we employ have been obliged to maintain confidentiality and to comply with data protection regulations.

Data retention
We only store personal data for as long as it is necessary to use the tracking and analysis services mentioned above and to carry out further processing within the scope of our legitimate interest. We store contract data for longer because this is required by statutory retention periods. Retention obligations that require us to store data arise from accounting and tax regulations. According to these regulations, business communications, concluded contracts and accounting documents must be stored for up to 10 years. If we no longer need this data to carry out the services for you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes.

Right to lodge a complaint with a data protection supervisory authority
You have the right to complain to a data protection supervisory authority at any time.