Privacy Policy
(GDPR & Swiss Federal Act on Data Protection – revDSG 2023 compliant)
1. General Information
We are pleased that you are visiting our website. The protection of your personal data is very important to us. This Privacy Policy explains how Vinebration GmbH (“we”, “us”, “our”) collects, processes, and protects personal data in accordance with:
-
the Swiss Federal Act on Data Protection (revDSG, effective 1 September 2023), and
-
the EU General Data Protection Regulation (GDPR), where applicable.
Controller
Vinebration GmbH
Zürcherstrasse 4
8103 Unterengstringen
Switzerland
www.vinebration.com
2. Personal Data and Legal Bases
“Personal data” means any information relating to an identified or identifiable natural person.
We process personal data only where at least one legal basis applies, in particular:
-
performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR / Art. 31 revDSG),
-
compliance with legal obligations (Art. 6(1)(c) GDPR),
-
legitimate interests (Art. 6(1)(f) GDPR),
-
your consent (Art. 6(1)(a) GDPR), where required.
3. Server Log Files
You may visit our website without actively providing personal data. Our hosting provider automatically collects the following technical data in server log files:
-
requested file name
-
date and time of access
-
volume of data transferred
-
IP address
-
requesting provider
This data is processed solely to ensure website security, system stability, and service optimisation. No personal profiling takes place.
Legal basis: legitimate interest in secure and reliable website operation.
4. Data Collection for Contract Performance and Customer Accounts
We collect personal data when you voluntarily provide it to us:
-
when placing an order,
-
when contacting us (e.g. via contact form or email),
-
when creating a customer account.
The data collected is evident from the respective input forms and may include name, address, email address, payment details, and order-related information.
We process this data exclusively for:
-
contract performance,
-
order handling,
-
customer communication,
-
customer account administration.
Personal data is not sold, rented, or disclosed to third parties outside the Vinebration GmbH group, except where necessary to fulfil contractual or legal obligations.
5. Storage Duration
We retain personal data only for as long as necessary for the stated purposes or as required by statutory retention obligations under Swiss tax and commercial law.
After expiry of these periods, data is deleted or anonymised unless:
-
you have given explicit consent to further processing, or
-
continued processing is legally permitted.
Customer accounts may be deleted at any time via the account settings or by contacting us.
6. Disclosure to Third Parties
Personal data is disclosed only where required for contract fulfilment, including:
-
shipping providers (for delivery of goods),
-
payment service providers and financial institutions (for payment processing).
All recipients process data only for the intended purpose and in accordance with applicable data protection laws.
7. Newsletter
If you subscribe to our newsletter, we process your email address and any additional data you voluntarily provide to send you marketing communications.
Legal basis: your explicit consent.
You may withdraw consent at any time via the unsubscribe link in each newsletter or by contacting us directly.
8. Postal Marketing and Right to Object
We may process your name and postal address for postal marketing purposes.
You have the right to object to this processing at any time. Upon objection, your data will no longer be used for this purpose.
9. Credit Assessment
Where applicable, we may obtain creditworthiness information containing probability values (scoring). These are based on recognised statistical methods and may include address data.
Such data is used solely to assess contractual risk.
Legal basis: legitimate interest and contractual necessity.
10. Cookies
Our website uses cookies to ensure functionality and improve user experience.
Cookies may be:
-
session cookies (deleted after browser closure), or
-
persistent cookies (stored until deletion).
You may manage cookie preferences via your browser settings or our cookie consent tool. Disabling cookies may limit website functionality.
11. Web Analytics (Google Analytics)
This website uses Google Analytics, a web analytics service provided by Google LLC.
Google Analytics uses cookies to analyse website usage. IP anonymisation is enabled. Data may be transferred to servers outside Switzerland or the EU (notably the USA).
Legal basis: your consent via cookie banner.
You may withdraw consent at any time or install the Google Analytics opt-out browser plugin:
https://tools.google.com/dlpage/gaoptout
12. Data Transfers Abroad
Where personal data is transferred outside Switzerland or the EU/EEA, we ensure an adequate level of protection through:
-
adequacy decisions,
-
standard contractual clauses,
-
or other legally recognised safeguards.
13. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. These include encryption, access controls, and secure infrastructure.
14. Your Rights
You have the right to:
-
access your personal data,
-
rectification of inaccurate data,
-
deletion (“right to be forgotten”),
-
restriction of processing,
-
data portability (GDPR),
-
objection to processing,
-
withdrawal of consent at any time.
Requests can be submitted using the contact details in our legal notice (Imprint).
You also have the right to lodge a complaint with a competent data protection authority.
15. Third-Party Links
Our website may contain links to third-party websites. We do not control and are not responsible for their privacy practices. Accessing such links is at your own risk.
16. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time. The version published on our website is always the current and binding version.
