Responsible Entity
The entity responsible for processing personal data in connection with this website and our business activities is:
Vinothèque La passion du vin SA
Schauplatzgasse 27, 3011 Bern, Switzerland
Phone number: +41 31 312 70 40
Email address: info@passionduvin.ch
Website: https://passionduvin.ch
Inquiries regarding data protection can be directed to info@passionduvin.ch .
Scope
This privacy policy informs how we process personal data when individuals visit our website, use our online shop, order goods, use services, reserve a table or a room, communicate with us, subscribe to our newsletter, visit our business premises, or otherwise contact us.
Personal data are all information that relates to an identified or identifiable natural person.
This privacy policy is based on Swiss data protection law. As applicable in individual cases, we also consider other data protection regulations.
Principles of Data Processing
We process personal data lawfully, in good faith, and proportionately. We process personal data only for identifiable or specified purposes and retain it only as long as necessary for the respective purposes, to fulfill legal obligations, or to protect legitimate interests.
We take appropriate technical and organizational measures to protect personal data from loss, unauthorized access, misuse, alteration, or disclosure.
Categories of processed personal data
Depending on the use of our services, we particularly process the following personal data:
Basic and contact data such as name, first name, billing address, delivery address, email address, phone number, date of birth, language, and customer information.
Order and contract data such as ordered goods, booked services, reservations, contract contents, delivery information, correspondence, complaints, returns, and cancellations.
Payment data such as payment method, payment status, billing information, and transaction references. Complete card information is generally processed by the respective payment service providers.
Communication data from emails, contact forms, telephone calls, live chats, text messages, WhatsApp messages, newsletter subscriptions and other correspondence.
Usage and device data such as Internet Protocol address, browser type, operating system, device type, pages visited, time of access, duration of visit, referring page, approximate location information and identifiers generated by cookies or similar technologies.
Marketing data such as newsletter preferences, responses to advertising content, openings of messages, clicked links, interests, target group assignments, and information about advertising campaigns.
Image data, as far as individuals enter our video-monitored business premises.
Additional data that is voluntarily provided to us or that is necessary for processing a request or for providing a service.
Purposes of data processing
We process personal data particularly for the following purposes:
For the provision, security, management, and improvement of our website and our systems.
For processing orders and delivering goods.
For making table reservations, room reservations, events, and catering services.
For providing services such as gift service, estimates, and catering.
For creating and managing customer accounts, even if an order can be placed without a customer account.
For processing payments, invoices, refunds, payment reminders, and claims.
For checking creditworthiness and avoiding payment defaults, as far as this is necessary for a purchase on account.
For communicating with customers and for handling inquiries, complaints, and feedback.
For sending order confirmations, reservation confirmations, appointment notifications, reminders, and information about goods or services.
For sending newsletters and other advertising, as far as this is legally permissible.
For analyzing the use of our website as well as measuring and improving our offerings and advertising campaigns.
For displaying interest-based advertising and for forming target groups, as far as the affected person has consented to this or another permissible basis exists.
To comply with statutory obligations regarding data retention, documentation and the provision of information.
For enforcing or defending legal claims.
For ensuring the safety of our business premises, our employees, our customers, and our property.
Data acquisition
We primarily receive personal data directly from the affected individuals, for example, when placing an order, making a reservation, submitting an inquiry, signing up for a newsletter, or visiting our business premises.
We may also receive personal data from payment service providers, credit reference and debt collection agencies, logistics companies, platform operators, advertising partners, publicly available sources or other business partners.
When visiting our website, certain technical data is automatically collected by our systems as well as by deployed services and technologies.
Online shop, orders, and customer accounts
When placing an order, we process the information required for contract execution. This includes, in particular, name, contact details, billing address, delivery address, ordered goods, payment method, and information about the delivery.
Orders can also be placed without a customer account. If a customer account is created, we store the information required for account management and the associated order information.
Birth data may be processed particularly for age verification, compliance with legal delivery restrictions, and management of customer data.
Personalized or custom-made goods may require additional information. This information is used for the production and processing of the corresponding order.
Age-restricted goods
We sell, among other things, wine and spirits. Legal age restrictions apply to the purchase and delivery of alcoholic beverages.
Therefore, we may require information about age or date of birth and conduct an age verification during the order, delivery, or handover. In case of doubt, we may request suitable proof of age.
We do not target advertising for alcoholic beverages at individuals who have not yet reached the legally required age.
Therefore, we may require information about age or date of birth and conduct an age verification during the order, delivery, or handover. In case of doubt, we may request suitable proof of age.
We do not target advertising for alcoholic beverages at individuals who have not yet reached the legally required age.
Reservations and Services
For table reservations, room reservations, events, catering inquiries, and other services, we specifically process contact details, information about the desired service, number of people, date, time, special requests, and the associated communication.
Depending on the offer, a reservation may become immediately binding or initially be considered a request. The details are outlined in the respective description, the reservation confirmation, and our General Terms and Conditions.
We can send automatic confirmations and reminders via email, SMS, phone, or through other agreed communication channels.
Depending on the offer, a reservation may become immediately binding or initially be considered a request. The details are outlined in the respective description, the reservation confirmation, and our General Terms and Conditions.
We can send automatic confirmations and reminders via email, SMS, phone, or through other agreed communication channels.
Payments
We use payment service providers to process electronic payments. Depending on the payment method selected, the following providers, in particular, may be involved:
Worldline Switzerland AG
Wallee AG
TWINT AG
PostFinance AG
Boncard or the provider responsible for the selected Boncard payment method
Payment service providers process the data required to authorise and execute the payment either on their own behalf or on our behalf. In particular, the following data may be transmitted: name, invoice amount, currency, transaction number, payment method, Internet Protocol address and technical information.
In addition, the data protection provisions of the relevant payment service provider apply to the processing of the payment.
Worldline Switzerland AG
Wallee AG
TWINT AG
PostFinance AG
Boncard or the provider responsible for the selected Boncard payment method
Payment service providers process the data required to authorise and execute the payment either on their own behalf or on our behalf. In particular, the following data may be transmitted: name, invoice amount, currency, transaction number, payment method, Internet Protocol address and technical information.
In addition, the data protection provisions of the relevant payment service provider apply to the processing of the payment.
Purchase on account, credit check, and collection
When you make a purchase on account, we may check your creditworthiness or have it checked. To this end, we may pass on your name, address, date of birth, invoice amount and information regarding your previous payment history to specialist service providers.
In this regard, we may, in particular, work with Intrum AG or other suitable credit reference and debt collection service providers.
If outstanding debts are not paid, we may pass on the information required to enforce the claim to a debt collection agency or another debt recovery service provider commissioned by us.
Data will only be disclosed insofar as this is necessary for the assessment, safeguarding or enforcement of our claims.
In this regard, we may, in particular, work with Intrum AG or other suitable credit reference and debt collection service providers.
If outstanding debts are not paid, we may pass on the information required to enforce the claim to a debt collection agency or another debt recovery service provider commissioned by us.
Data will only be disclosed insofar as this is necessary for the assessment, safeguarding or enforcement of our claims.
Delivery and Logistics
We primarily deliver goods using in-house logistics. Depending on the order, we may also use Swiss Post or other logistics and transport companies.
We transmit the necessary data for delivery to these companies, particularly name, delivery address, phone number, email address, and information about the shipment.
The choice of logistics company may depend on the delivery location, scope, type of goods, and other circumstances.
We transmit the necessary data for delivery to these companies, particularly name, delivery address, phone number, email address, and information about the shipment.
The choice of logistics company may depend on the delivery location, scope, type of goods, and other circumstances.
Communication
When individuals communicate with us via email, phone, contact form, live chat, SMS, WhatsApp, or in any other way, we process the transmitted information to handle the request and for the ongoing business relationship.
When communicating via WhatsApp, data is processed by Meta Platforms and may be transmitted to the United States and other countries. The privacy policies of WhatsApp or Meta also apply to this processing.
Confidential or particularly sensitive information should only be transmitted via appropriate and sufficiently secure communication channels.
When communicating via WhatsApp, data is processed by Meta Platforms and may be transmitted to the United States and other countries. The privacy policies of WhatsApp or Meta also apply to this processing.
Confidential or particularly sensitive information should only be transmitted via appropriate and sufficiently secure communication channels.
Newsletters and electronic advertising
We send newsletters and other electronic information about our offers, events, and services.
Registration can be done through our website or in the context of a personal contact. Individuals can unsubscribe from advertising messages at any time. For this, the unsubscribe link in the respective message can be used or a notification can be sent to info@passionduvin.ch.
We can inform existing customers within the legally permissible scope about our own similar goods and services. There is always a free and easy option to unsubscribe.
For shipping, we particularly use functions of Odoo. The technical shipping can be done through services from Amazon Web Services or other providers we have commissioned.
We can evaluate whether messages have been delivered, opened, or clicked. This information helps us improve the shipping and content. If necessary, such evaluation is only carried out with the required consent.
Our producers do not receive customer data and do not carry out direct shipping to our customers.
Registration can be done through our website or in the context of a personal contact. Individuals can unsubscribe from advertising messages at any time. For this, the unsubscribe link in the respective message can be used or a notification can be sent to info@passionduvin.ch.
We can inform existing customers within the legally permissible scope about our own similar goods and services. There is always a free and easy option to unsubscribe.
For shipping, we particularly use functions of Odoo. The technical shipping can be done through services from Amazon Web Services or other providers we have commissioned.
We can evaluate whether messages have been delivered, opened, or clicked. This information helps us improve the shipping and content. If necessary, such evaluation is only carried out with the required consent.
Our producers do not receive customer data and do not carry out direct shipping to our customers.
Odoo
We use Odoo as our central business software and as the technical backbone of our website, our online shop and other business processes.
The provider is Odoo SA, based in Belgium. We use the Odoo.sh hosting solution. Odoo enables us to manage, in particular, customer details, orders, bookings, invoices, payments, contacts, newsletters, live chat messages, support enquiries, appointments, stock data and other operational information.
Odoo and any subcontractors engaged by Odoo may process personal data in the hosting region selected for our project, as well as in other countries in connection with support, maintenance, data backup and technical services.
We agree appropriate data protection and security standards with the service providers involved. Where personal data is transferred to a country without adequate statutory data protection, we base the transfer in particular on recognised contractual clauses or other guarantees provided for by law.
The provider is Odoo SA, based in Belgium. We use the Odoo.sh hosting solution. Odoo enables us to manage, in particular, customer details, orders, bookings, invoices, payments, contacts, newsletters, live chat messages, support enquiries, appointments, stock data and other operational information.
Odoo and any subcontractors engaged by Odoo may process personal data in the hosting region selected for our project, as well as in other countries in connection with support, maintenance, data backup and technical services.
We agree appropriate data protection and security standards with the service providers involved. Where personal data is transferred to a country without adequate statutory data protection, we base the transfer in particular on recognised contractual clauses or other guarantees provided for by law.
Server log data
When you visit our website, our servers or the servers of our technical service providers may automatically collect the following information:
Internet Protocol address
Date and time of access
Page or file accessed
Amount of data transferred
Source page
Browser and browser version
Operating system
Device type
Status messages and technical errors
This data is processed for the purposes of providing the website, ensuring system security, analysing errors and preventing unauthorised access.
Internet Protocol address
Date and time of access
Page or file accessed
Amount of data transferred
Source page
Browser and browser version
Operating system
Device type
Status messages and technical errors
This data is processed for the purposes of providing the website, ensuring system security, analysing errors and preventing unauthorised access.
Cookies and similar technologies
Our website uses cookies and similar technologies. These are files or identifiers that are stored in the browser or on the device, or which can recognise a device.
In particular, we distinguish between the following categories:
Essential technologies enable basic functions such as the shopping basket, login, language settings, security, payment processing and the storage of cookie preferences.
Functional technologies enable additional features and make our website easier to use.
Analytics technologies help us to understand how our website is used and to improve our content and services.
Marketing technologies are used to measure advertising campaigns, identify target audiences and display interest-based advertising.
Non-essential analytics and marketing technologies are, as a rule, only activated in accordance with the selection made in the cookie banner. This selection can be changed or withdrawn at any time via the cookie settings.
Cookies may be stored for the duration of a session or for a longer period. The specific storage period depends on the individual cookie and the service used.
Most browsers allow you to delete or block cookies. If you block essential cookies, certain features of the website may be restricted.
In particular, we distinguish between the following categories:
Essential technologies enable basic functions such as the shopping basket, login, language settings, security, payment processing and the storage of cookie preferences.
Functional technologies enable additional features and make our website easier to use.
Analytics technologies help us to understand how our website is used and to improve our content and services.
Marketing technologies are used to measure advertising campaigns, identify target audiences and display interest-based advertising.
Non-essential analytics and marketing technologies are, as a rule, only activated in accordance with the selection made in the cookie banner. This selection can be changed or withdrawn at any time via the cookie settings.
Cookies may be stored for the duration of a session or for a longer period. The specific storage period depends on the individual cookie and the service used.
Most browsers allow you to delete or block cookies. If you block essential cookies, certain features of the website may be restricted.
Google Analytics
We use Google Analytics 4 to analyse the use of our website.
Depending on the terms of the contract, the provider is a company within the Google Group. Google Analytics may collect information about page views, interactions, approximate locations, devices, browsers and the origin of visits.
Google states that it does not log or permanently store Internet Protocol addresses in Google Analytics 4. However, the information collected may still enable devices to be recognised or linked to other information.
We only use Google Analytics in accordance with the selection made in the cookie banner. The retention period within Google Analytics is specified in the settings.
Google may process data in Switzerland, the European Economic Area, the United States and other countries.
Depending on the terms of the contract, the provider is a company within the Google Group. Google Analytics may collect information about page views, interactions, approximate locations, devices, browsers and the origin of visits.
Google states that it does not log or permanently store Internet Protocol addresses in Google Analytics 4. However, the information collected may still enable devices to be recognised or linked to other information.
We only use Google Analytics in accordance with the selection made in the cookie banner. The retention period within Google Analytics is specified in the settings.
Google may process data in Switzerland, the European Economic Area, the United States and other countries.
Google Ads and Google Tag Manager
We use Google Ads to place and track adverts.
In particular, this may involve processing information on whether a person arrived at our website via an advert and whether this was followed by an order, a booking, an enquiry or some other action.
We can use Google Tag Manager to technically integrate and manage analytics and marketing services. Google Tag Manager is used to manage tags and may transmit technical information to Google.
Google Ads and the associated marketing features are, as a rule, only activated in accordance with the selection made in the cookie banner.
In particular, this may involve processing information on whether a person arrived at our website via an advert and whether this was followed by an order, a booking, an enquiry or some other action.
We can use Google Tag Manager to technically integrate and manage analytics and marketing services. Google Tag Manager is used to manage tags and may transmit technical information to Google.
Google Ads and the associated marketing features are, as a rule, only activated in accordance with the selection made in the cookie banner.
Google Consent Mode
We can use Google Consent Mode. This transmits signals to Google services about the selection made in the cookie banner.
The Google Consent Mode does not replace a cookie banner or required consent. The specific technical design determines whether restricted signals are transmitted to Google before consent is given.
We configure Google services so that non-essential analytics and marketing services are only activated after the corresponding selection in the cookie banner.
The Google Consent Mode does not replace a cookie banner or required consent. The specific technical design determines whether restricted signals are transmitted to Google before consent is given.
We configure Google services so that non-essential analytics and marketing services are only activated after the corresponding selection in the cookie banner.
Meta Pixel and Meta Advertising
We use services provided by Meta Platforms, in particular the Meta Pixel and advertising features for Facebook and Instagram.
In doing so, information may be collected regarding website visits, content accessed, orders, bookings, interactions, devices and browsers, as well as technical identifiers.
This data may be used to measure the effectiveness of advertising, create target audiences and display adverts on Meta’s platforms.
Meta may link data to existing accounts and other information. Such processing is carried out in accordance with Meta’s settings and privacy policy.
The Meta Pixel and similar marketing features are, as a rule, only activated in accordance with the selection made in the cookie banner.
In doing so, information may be collected regarding website visits, content accessed, orders, bookings, interactions, devices and browsers, as well as technical identifiers.
This data may be used to measure the effectiveness of advertising, create target audiences and display adverts on Meta’s platforms.
Meta may link data to existing accounts and other information. Such processing is carried out in accordance with Meta’s settings and privacy policy.
The Meta Pixel and similar marketing features are, as a rule, only activated in accordance with the selection made in the cookie banner.
We may use the services of the LinkedIn group, in particular to display content, measure the effectiveness of advertising and create professionally-oriented target groups.
In doing so, technical data, page views, interactions and details of the device used may be transmitted to LinkedIn.
LinkedIn can link such information to an existing LinkedIn account. LinkedIn’s marketing features are generally only activated in accordance with the selection made in the cookie banner.
In doing so, technical data, page views, interactions and details of the device used may be transmitted to LinkedIn.
LinkedIn can link such information to an existing LinkedIn account. LinkedIn’s marketing features are generally only activated in accordance with the selection made in the cookie banner.
Google Maps
We can integrate Google Maps to display locations and directions.
When accessing an embedded map, technical data and location information may be transmitted to Google. As far as possible, Google Maps will only be loaded after a corresponding selection or through an active action by the visiting person.
When accessing an embedded map, technical data and location information may be transmitted to Google. As far as possible, Google Maps will only be loaded after a corresponding selection or through an active action by the visiting person.
Embedded videos and social media
Our website can embed content from YouTube, Vimeo, Facebook, Instagram, LinkedIn, or other platforms.
When loading such content, the respective provider may receive information about the visit to our website. If a person is logged in with the respective provider, they may be able to associate the visit with the corresponding account.
As far as technically possible and necessary, such content will only be loaded after a corresponding selection or an active action.
When loading such content, the respective provider may receive information about the visit to our website. If a person is logged in with the respective provider, they may be able to associate the visit with the corresponding account.
As far as technically possible and necessary, such content will only be loaded after a corresponding selection or an active action.
External fonts
Our website may load fonts from Google servers or other external providers.
When an external font is loaded, the Internet Protocol address of the device being used may be transmitted to the relevant provider.
To minimise such data transfers, fonts can be stored locally on our server. Where external fonts are used, this is done in accordance with the selected cookie and privacy settings, as well as the technical configuration of our website.
When an external font is loaded, the Internet Protocol address of the device being used may be transmitted to the relevant provider.
To minimise such data transfers, fonts can be stored locally on our server. Where external fonts are used, this is done in accordance with the selected cookie and privacy settings, as well as the technical configuration of our website.
Cloudflare
We may use Cloudflare’s services to ensure the secure and reliable delivery of our website.
Cloudflare may route traffic through its own systems and, in doing so, may process, in particular, Internet Protocol addresses, technical connection data, security information and details of suspicious access attempts.
This processing is carried out, in particular, to defend against attacks, detect misuse and improve loading times.
Cloudflare may process personal data in various countries, in particular in the United States and at other locations within its global network.
Cloudflare may route traffic through its own systems and, in doing so, may process, in particular, Internet Protocol addresses, technical connection data, security information and details of suspicious access attempts.
This processing is carried out, in particular, to defend against attacks, detect misuse and improve loading times.
Cloudflare may process personal data in various countries, in particular in the United States and at other locations within its global network.
reCAPTCHA and abuse protection
We may use Google reCAPTCHA or similar security services to protect forms, registrations and other functions from automated access and misuse.
In doing so, technical data, device information, mouse movements, time spent on the site, IP addresses and other usage information may be analysed.
Where possible, we use data-minimising settings. The security service may collect data as soon as the protected function is accessed.
In doing so, technical data, device information, mouse movements, time spent on the site, IP addresses and other usage information may be analysed.
Where possible, we use data-minimising settings. The security service may collect data as soon as the protected function is accessed.
Live chat and reviews
We can offer a live chat for direct communication. The entered messages, contact details, and technical information will be processed.
We can also implement features for ratings and feedback. Published reviews may contain the specified name, the content of the review, and other voluntarily provided information.
Before publication, no confidential or particularly sensitive personal data should be included in a review.
We can also implement features for ratings and feedback. Published reviews may contain the specified name, the content of the review, and other voluntarily provided information.
Before publication, no confidential or particularly sensitive personal data should be included in a review.
Video Surveillance
Certain areas of our business premises may be under video surveillance.
Video surveillance is intended to protect individuals and property, to prevent and investigate crimes, and to enforce legal claims.
Monitored areas will be appropriately marked. Recordings will only be accessible to a limited circle of authorized persons.
Recordings will generally be stored only as long as necessary for security purposes. In the event of a specific incident, relevant recordings may be retained until the conclusion of the investigation or proceedings and may be shared with insurance companies, security firms, authorities, or law enforcement agencies.
Areas where individuals have an increased need for privacy will not be monitored.
Video surveillance is intended to protect individuals and property, to prevent and investigate crimes, and to enforce legal claims.
Monitored areas will be appropriately marked. Recordings will only be accessible to a limited circle of authorized persons.
Recordings will generally be stored only as long as necessary for security purposes. In the event of a specific incident, relevant recordings may be retained until the conclusion of the investigation or proceedings and may be shared with insurance companies, security firms, authorities, or law enforcement agencies.
Areas where individuals have an increased need for privacy will not be monitored.
Disclosure to Third Parties
We may disclose personal data, in particular, to the following categories of recipients:
Payment service providers
Banks and financial institutions
Credit and collection agencies
Logistics and transportation companies
Communication and newsletter providers
Analysis and advertising service providers
Consulting companies, trustees, audit firms, and legal representatives
Insurances
Authorities and courts
Other recipients, as far as disclosure is necessary for contract fulfillment, compliance with legal obligations, or the protection of legitimate interests.
We do not sell personal data.
Payment service providers
Banks and financial institutions
Credit and collection agencies
Logistics and transportation companies
Communication and newsletter providers
Analysis and advertising service providers
Consulting companies, trustees, audit firms, and legal representatives
Insurances
Authorities and courts
Other recipients, as far as disclosure is necessary for contract fulfillment, compliance with legal obligations, or the protection of legitimate interests.
We do not sell personal data.
Disclosure of personal data abroad
We work with service providers located in Switzerland, the European Economic Area, the United States, and other countries or who process personal data there.
If a recipient is in a country without adequate legal data protection, we generally use recognized contractual clauses or other legally provided guarantees. In legally provided cases, disclosure may also be based on consent, contract processing, enforcement of legal claims, or another legal exception.
When using globally operating providers, it cannot be completely ruled out that foreign authorities may access data under the applicable law there.
Our producers are located in various countries of origin. Customer data is not shared with producers.
If a recipient is in a country without adequate legal data protection, we generally use recognized contractual clauses or other legally provided guarantees. In legally provided cases, disclosure may also be based on consent, contract processing, enforcement of legal claims, or another legal exception.
When using globally operating providers, it cannot be completely ruled out that foreign authorities may access data under the applicable law there.
Our producers are located in various countries of origin. Customer data is not shared with producers.
Retention period
We retain personal data for as long as is necessary for the relevant purpose.
Contract, order, accounting and invoicing data are generally retained for ten years, in accordance with statutory retention obligations.
Furthermore, customer and contact details may be retained for as long as a business relationship exists or there is a legitimate interest in continuing to process them.
Marketing data will be retained until you unsubscribe, withdraw your consent or the purpose for which it is processed ceases to apply.
Technical log data and security data are stored for a period appropriate to the respective purpose.
Video recordings are generally deleted after a short period of time, unless an incident requires them to be retained for a longer period.
Contract, order, accounting and invoicing data are generally retained for ten years, in accordance with statutory retention obligations.
Furthermore, customer and contact details may be retained for as long as a business relationship exists or there is a legitimate interest in continuing to process them.
Marketing data will be retained until you unsubscribe, withdraw your consent or the purpose for which it is processed ceases to apply.
Technical log data and security data are stored for a period appropriate to the respective purpose.
Video recordings are generally deleted after a short period of time, unless an incident requires them to be retained for a longer period.
Rights of affected persons
Under the applicable data protection legislation, data subjects have, in particular, the right to request information about their personal data that is being processed.
Depending on the legal requirements, you may also request the rectification of inaccurate data, the erasure of data, the restriction of certain processing activities, the disclosure or transfer of certain data, and the withdrawal of any consent you have given.
As a general rule, a withdrawal takes effect for the future and does not affect the lawfulness of previous processing operations.
Statutory retention obligations and other legitimate grounds may prevent data from being erased or restricted.
To exercise these rights, please send an enquiry to info@passionduvin.ch. We may request proof of identity if this is necessary to protect the data subject.
Data subjects may also contact the Federal Data Protection and Information Commissioner.
Depending on the legal requirements, you may also request the rectification of inaccurate data, the erasure of data, the restriction of certain processing activities, the disclosure or transfer of certain data, and the withdrawal of any consent you have given.
As a general rule, a withdrawal takes effect for the future and does not affect the lawfulness of previous processing operations.
Statutory retention obligations and other legitimate grounds may prevent data from being erased or restricted.
To exercise these rights, please send an enquiry to info@passionduvin.ch. We may request proof of identity if this is necessary to protect the data subject.
Data subjects may also contact the Federal Data Protection and Information Commissioner.
Automated decision-making & profiling
As a general rule, we do not make any individual decisions based solely on automated processing that have legal consequences for a person. Automated checks may take place, in particular, in connection with payments, fraud prevention or credit checks. Where an individual decision based on automated processing that is relevant under the law is made, we will inform the data subject in accordance with the applicable regulations.
We may analyse personal data automatically in order to identify interests and preferences, segment target groups and improve our services and advertising. We do not carry out high-risk profiling as defined by the Data Protection Act.
We may analyse personal data automatically in order to identify interests and preferences, segment target groups and improve our services and advertising. We do not carry out high-risk profiling as defined by the Data Protection Act.
Data security
We take appropriate technical and organizational security measures. These may include access restrictions, encryption, data backups, logging, security updates, and internal authorization regulations.
A completely secure data transmission or data storage cannot be guaranteed despite appropriate protective measures.
A completely secure data transmission or data storage cannot be guaranteed despite appropriate protective measures.
Changes to this privacy policy
We may adjust this privacy policy at any time if our data processing, our technical systems, or the legal requirements change.
The version published on this website applies. The date mentioned above indicates the status of the last update.
The version published on this website applies. The date mentioned above indicates the status of the last update.