Data protection

Your trust is important to us. That is why we take the issue of data protection seriously and ensure appropriate security. It goes without saying that we comply with the applicable provisions of the Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (OFADP), the Telecommunications Act (TCA) and other applicable data protection regulations.

This privacy policy is an integral part of the General Terms and Conditions of cheezy by Gorumino AG. By accessing the online store and using the services and products we offer, you declare that you have read this privacy policy carefully and agree to the data processing described.

So that you know what personal data we collect from you, for what purposes we use it, to whom it may be passed on and what rights you have in connection with the use of your personal data by cheezy by Gorumino AG, please take note of the following information.

1. responsible for the website www.cheezy.ch

Responsible for the website is:

cheezy by Gorumino AG

Eigerweg 4

3322 Urtenen-Schönbühl (Switzerland)

Email: gruezi@cheezy.ch

2. data processing when visiting the website (log file)

When you visit our website, our servers temporarily store every access in a log file. The following data is processed without any action on your part and stored by us until it is automatically deleted after 12 months at the latest:

• the IP address of the requesting computer
• the name of the owner of the IP address range (usually your Internet access provider)
• the date and time of access
• the website from which the access was made (referrer URL), if applicable with the search term used
• the name and URL of the retrieved file
• the status code (e.g. error message)
• the operating system of your computer
• the browser you are using (type, version and language)
• the transmission protocol used (e.g. HTTP/1.1)
• Your user name from a registration/authentication

The data collected is only used for statistical evaluations and to improve the website and is not linked to or stored with personal data. We reserve the right to check the log files retrospectively if there are concrete indications of unlawful use.

3. data processing when using the contact form

If you contact us using the contact form on the website, we collect the following data from you (mandatory *):

• Name*
• E-mail address*
• Your message*

We use this data exclusively to answer the questions you have asked or to provide the services you have requested.

 The provision of this personal data is expressly on a voluntary basis. Without this personal data, we will not be able to provide the requested service.

4. data processing when registering for a customer account

You can order in our online store as a guest or via your personal customer account. Certain services can only be obtained with a voluntarily created customer account.

If you register a customer account, we collect the following data from you (mandatory *):

• First name*
• Surname*
• E-mail address*

We collect this data in order to open and manage the customer account, process your order(s) and provide the requested services. You can view and change your data in the customer account at any time. You can also request the complete deletion of your customer account by sending us a corresponding request or by initiating the deletion directly in the customer account.

5. data processing when ordering as a guest

We collect the following data for the processing of the purchase contract:

• First name*
• Surname*
• E-mail address*
• Postal address*
• Country*
• Telephone number*
• Payment details (depending on the selected payment method)*
• Login data (for registered customers)

The provision of further data is voluntary. If you are registered and have a customer account, we will save your data for your next purchase.

In connection with your order and the requested services, we also process the following data if you have a customer account:

• Information on the products ordered
• Data on your ordering, purchasing and payment behavior

Unless otherwise stated in this privacy policy or unless you have given your separate consent, we will only use the aforementioned data to process the contract, namely to process your orders, deliver the ordered products and ensure correct payment.

When we use external payment providers such as Stripe (Stripe, 510 Townsend Street, San Francisco, CA 94103, USA), Twint (TWINT AG, Stauffacherstrasse 31, CH-8004 Zurich), and Recharge (ReCharge, Inc, 3030 Nebraska Avenue, Los Angeles California US 90404), we sometimes provide payment history information in addition to the personal information required to complete the purchase. Like other third parties, payment providers may only use personal information for the purposes set out in this Privacy Policy.

6. data processing when shopping in the online store

We collect the following data for the processing of the purchase contract:

• First name*
• Surname* 
• E-mail address*
• Postal address*
• Country* 
• Telephone number*
• Payment details (depending on the selected payment method)*
• Login data (for registered customers)

The provision of further data is voluntary. If you are registered and have a customer account, we will save your data for your next purchase.

In connection with your order and the requested services, we also process the following data if you have a customer account:

• Information on the products ordered
• Data on your ordering, purchasing and payment behavior

Unless otherwise stated in this privacy policy or unless you have given your separate consent, we will only use the aforementioned data to process the contract, namely to process your orders, deliver the ordered products and ensure correct payment.

When we use external payment providers such as Stripe (Stripe, 510 Townsend Street, San Francisco, CA 94103, USA), Twint (TWINT AG, Stauffacherstrasse 31, CH-8004 Zurich), and Recharge (ReCharge, Inc, 3030 Nebraska Avenue, Los Angeles California US 90404), we sometimes provide payment history information in addition to the personal information required to complete the purchase. Like other third parties, payment providers may only use personal information for the purposes set out in this Privacy Policy.

7th Newsletter

You have the option of subscribing to our newsletter on our website. Registration is required for this. As part of the registration process, we collect the following data from you (mandatory *):

• E-mail address*

After entering the above-mentioned information, you can initiate the registration for our newsletter. We use email marketing software from The Rocket Science Group, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, to send the newsletter. You can find Mailchimp's privacy policy here.

Our newsletter contains a so-called web beacon or similar technical means (tracking pixel). A web beacon is a 1x1 pixel, invisible graphic that is associated with the user ID of the respective newsletter subscriber. The web beacon provides us with the following information about the newsletter dispatch:

• Address file used
• Subject and number of newsletters sent
• Information on which addresses have or have not received the newsletter and which addresses have failed to receive the newsletter
• Information on which addresses have opened the newsletter
• Information on which addresses have unsubscribed
• technical information (e.g. time of access, IP address, browser type and operating system)

This information is used to statistically analyze our newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients. The web beacon is deleted when you delete the newsletter.

To prevent the use of the web beacon, please set your e-mail program so that no HTML is displayed in messages, if this is not already the case by default. On the following pages you will find explanations on how to make this setting in the most common e-mail programs.

• Microsoft Outlook
• Mail for Mac ("Load remote content into messages")

By registering for the newsletter, you give us your consent to process the data provided for the regular sending of the newsletter to the address you have provided and for the statistical evaluation of user behavior and the optimization of the newsletter. You can revoke your consent at any time with effect for the future or click on the unsubscribe link in the newsletter e-mails.

8. chat function - Tidio Live Chat 

cheezy offers online advice (chat function) for interested parties and customers. Participation in our chat is voluntary and possible without registration. The data collected is used to optimize our services and for statistical purposes. You can cancel the online consultation at any time by closing the chat window. As it is possible to enter personal data, we ask you to check for yourself which data you wish to disclose to us. However, if the consultation requires identification (e.g. clarification of matters relating to your customer account), the personal data requested is used exclusively to legitimize your person in order to carry out the consultation and its quality assurance. The LiveChat function is offered by the provider Tidio Live chat.

9. central storage

We store the data specified in the above-mentioned paragraphs in a central electronic data processing system (so-called CRM). The data relating to you is systematically recorded, linked and evaluated in order to process your inquiries and handle our services. For this purpose, we use software from Shopify International Ltd, 1-2 Victoria Buildings Haddington Road Dublin 4, D04 XN32, Ireland.

 10. disclosure of data to third parties

We only pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we pass on your data to third parties if this is necessary in the context of using the website and processing contracts (including outside the website), in particular the processing of your bookings. This relates in particular to services in the area of payment and subscription management, transportation services and IT services, e.g. services in the areas of data storage (hosting), cloud services, sending email newsletters, data analysis and refinement, etc. The use of the data passed on for this purpose by the third parties is strictly limited to the stated purposes.

11. transfer of personal data abroad

For the sake of completeness, we would like to point out to users residing or domiciled in Switzerland that there are surveillance measures by US authorities in the USA that generally allow the storage of all personal data of all persons whose data has been transferred from Switzerland to the USA. This is done without differentiation, restriction or exception on the basis of the objective pursued and without an objective criterion that makes it possible to restrict the US authorities' access to the data and its subsequent use to very specific, strictly limited purposes that justify the interference associated with both access to this data and its use. We would also like to point out that there are no legal remedies available in the USA for data subjects from Switzerland that would allow them to gain access to the data concerning them and to obtain its correction or deletion, or that there is no effective legal protection against general access rights of US authorities.

We would also like to point out to users residing in Switzerland that the USA does not have an adequate level of data protection from Switzerland's perspective - partly due to the issues mentioned in this section. Insofar as we have explained in this privacy policy that recipients of data are based in the USA, we will ensure that your data is adequately protected by our partners either through contractual agreements with these companies or by ensuring that these companies are certified under the Swiss-US Privacy Shield.

13. cookies

Cookies help in many ways to make your visit to our website easier, more pleasant and more meaningful. Cookies are information files that your web browser automatically stores on your device's memory when you visit our website. Cookies do not damage the memory of your end device, nor do they transmit your personal data to us.

For example, we use cookies to temporarily store your selected services and entries when you fill out a form on the website so that you do not have to repeat the entry when you access another subpage. Cookies may also be used to identify you as a registered user after you have registered on the website without you having to log in again when you access another subpage.

Most Internet browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your device or a message always appears when a new cookie is activated. On the following pages you will find explanations of how you can configure cookies in the most common browsers:

• Microsoft Windows Internet Explorer
• Mozilla Firefox
• Google Chrome for desktop
• Google Chrome for Mobile
• Apple Safari for Desktop

If you deactivate cookies, you may not be able to use all the functions of our website.

14. analysis tools, remarketing and targeting

14.1 Google Analytics

On our website, we use Google Analytics, a web analysis service of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, or Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses methods that enable the use of the website to be analyzed, such as cookies. The information generated by the cookie about your use of our website such as

• Navigation path that a visitor takes on the website
• Time spent on the website or a subpage
• the subpage on which the website is left
• the country, region or city from which access is made
• End device (type, version, color depth, resolution, width and height of the browser window)
• Returning or new visitor
• Browser type/version
• Operating system used
• Referrer URL (i.e. the previously visited website)
• Host name of the accessing computer (IP address)
• Time of the server request

are generally transmitted to a Google server in the USA and stored there. The IP address is shortened by activating IP anonymization ("anonymizeIP") on this website before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area or Switzerland. According to Google, the masked IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. In these cases, we use contractual guarantees to ensure that Google complies with an adequate level of data protection.

The information is used to evaluate the use of the website, to compile reports on the activities on the website and to provide further services associated with the use of the website and the Internet for the purposes of market research and demand-oriented design of the website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf.

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

14.2 Google Tag Manager

This website uses Google Tag Manager. This service allows website tags to be managed via an interface. The Google Tag Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tag Manager triggers the services described in the "Cookies" section, which in turn may collect data. However, Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it will remain in place for all tracking tags, provided they are implemented with Google Tag Manager.

14.3 Google Adwords

We use Google Adwords to draw attention to our attractive offers on external websites with the help of advertising material (so-called Google Adwords).

These advertisements are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies generally lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be contacted) are usually stored as analysis values for this cookie.

These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Adwords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the websites of Adwords customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.

The information collected with the help of the "conversion cookies" is used by Google to compile visit statistics for our website. These statistics tell us the total number of users who have clicked on our ad and also which pages of our website were subsequently accessed by the respective user. We can determine how successful the individual advertising measures are in relation to the advertising campaign data. In this way, we pursue the interest of optimizing the design of our website, showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
The personal data is transmitted to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.

If you have reached our website via a Google ad, a cookie will be stored on your computer. Cookies are small text files that your Internet browser stores on your computer. These so-called "conversion cookies" lose their validity after 30 days and are not used to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, we and Google can recognize that you as a user have clicked on one of our ads placed on Google and have been redirected to our site.

You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly, in particular suppressing third-party cookies will prevent you from receiving ads from third-party providers; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads, whereby this setting will be deleted if you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers under the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this website to their full extent.

14.4 Google Remarketing

In addition to Adwords Conversion, we use the Google Remarketing application. This is a procedure with which we would like to address you again. Through this application, our advertisements can be displayed to you when you continue to use the Internet after visiting our website. This is done by means of cookies stored in your browser, which are used by Google to record and evaluate your usage behavior when you visit various websites. This enables Google to determine your previous visit to our website. According to its own statements, Google does not merge the data collected in the context of remarketing with your personal data, which may be stored by Google. In particular, according to Google, pseudonymization is used in remarketing.

14.5 Facebook pixel

Within our online offer, the so-called "Facebook pixel" is used due to our legitimate interests in the analysis, optimization and economic operation of our online offer and for these purposes.

With the help of the Facebook pixel, it is possible for Facebook to determine the visitors of our online offer as a target group for the display of ads (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion")

The processing of data by Facebook takes place within the framework of Facebook's data usage guidelines. Please read the information on the display of Facebook ads in Facebook's data usage policy: https://www.facebook.com/policy.php. Specific information and details about the Facebook pixel and how it works can be found in Facebook's help section: https://www.facebook.com/business/help/651294705016616.

The service is offered by Facebook Inc (1 Hacker Way, Menlo Park, CA 94025, USA). If you are located in the EU, the service is operated by Facebook Ireland Ltd (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).

We do not know how long Facebook processes the above-mentioned data and for what additional purposes it is used.

You can object to the collection by the Facebook pixel and use of your data to display Facebook ads. To set which types of ads are displayed to you within Facebook, you can go to the page set up by Facebook and follow the instructions on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

You can also object to the use of cookies for reach measurement and advertising purposes via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

14.6 Hotjar

We use Hotjar to better understand the needs of our users and to optimize the offer on this website. Hotjar works with cookies and other technologies to collect information about the behavior of our users and their end devices. Hotjar is used to anonymously record the interactions of randomly selected individual visitors to our website. This creates a log of, for example, mouse movements and clicks with the aim of identifying potential improvements to our website. Hotjar is also used to evaluate the IP address of the device (only recorded and stored in anonymized form), information on screen size, device type (unique device identifiers), information on the browser used, location (country), incoming and outgoing links, as well as the resolution and type of device accessing our website for statistical purposes. In addition, we offer the possibility of anonymous user feedback via Hotjar by means of so-called "feedback polls", in which users can voluntarily submit an assessment of our website. Hotjar stores this information in a pseudonymized user profile. The information is not used by Hotjar or by us to identify individual users or merged with other data about individual users. The information collected is stored by Hotjar Ltd. and is not passed on to other third parties.

In addition, users who give us feedback on our website with the help of the "Feedback Poll" via Hotjar have the opportunity to provide us with their e-mail address. This gives us the opportunity to ask interested users more precisely about their personal impression of our website and to use this information to further improve it. Providing the e-mail address is voluntary and can be skipped by the user at any time.

14.7 Google Fonts

We use script libraries and font libraries such as Google Webfonts (https://www.google.com/webfonts/) on this website to display our content correctly and graphically appealing across browsers. Google web fonts are transferred to your browser's cache to avoid multiple loading. If the browser does not support Google web fonts or prevents access, content is displayed in a standard font.

15 Social media and your data

15.1 Own social media presence

You will find links to social media networks on our website. These are not plugins provided by the social media network, which already transmit data to the provider when the page is loaded without the user having any influence. The buttons to the social media networks merely contain a link to our presence on the relevant social media network. User data is not automatically transmitted to the social media network when the page is loaded.

The links lead to our appearances in the following networks:

• Facebook from Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
• Instagram from Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, and
• Twitter from Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.
• Pinterest from Pinterest Inc, 651 Brannan Street, San Francisco, CA 94107, USA
• Linkedin from LinkedIn Corporation, Mountain View, California, USA
• YouTube from YouTube, LLC 901 Cherry Ave, 94066 San Bruno, CA, USA

 When you access a link to one of our social media profiles, a direct connection is established between your browser and the server of the relevant social network. This provides the network with the information that you have visited our website with your IP address and accessed the link. If you access a link to a network while you are logged into your account with the relevant network, the content of our site may be linked to your profile on the network, which means that the network can directly associate your visit to our website with your user account. If you wish to prevent this, you should log out before clicking on the relevant links. An assignment will take place in any case if you log in to the relevant network after clicking on the link.

15.2 Social plugins

We provide certain social media functions on our website, in particular the sharing of product information on Facebook, tweeting of product information, etc. You will find the relevant functions on the individual product pages under the heading "Share". If you click on the relevant social network icons, you will be linked to the relevant social network in order to use the selected functionality, e.g. to share content on Facebook or tweet on Twitter. However, you must log into your user account or already be logged in to do this.

We provide you with plugins from the following social networks:

• Facebook from Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
• Instagram from Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, and
• Twitter from Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.
• Pinterest from Pinterest Inc, 651 Brannan Street, San Francisco, CA 94107, USA
• Linkedin from LinkedIn Corporation, Mountain View, California, USA
• YouTube from YouTube, LLC 901 Cherry Ave, 94066 San Bruno, CA, USA

 If you select one of the functions provided and click on the symbol of the social network in question, a direct connection is established between your browser and the server of the social network in question. This provides the network with the information that you have visited our website with your IP address and accessed the link. If you access a link to a social network while you are logged into your account on the social network in question, the content of our website may be linked to your profile on the social network. This means that the social network can assign your visit to our website directly to your user account. If you wish to prevent this, you should log out before clicking on the corresponding links. An assignment will take place in any case if you log in to the relevant network after clicking on the link.

The purpose and scope of the data collection and the further processing and use of the data by the respective social network as well as your rights in this regard and setting options to protect your privacy can be found in the data protection information of the social network.

16. data security

We use suitable and appropriate technical and organizational security measures to protect your personal data stored by us against manipulation, partial or complete loss and unauthorized access by third parties. Our security measures are continuously adapted and improved in line with technological developments.

You should always treat your access data confidentially and close the browser window when you have finished communicating with us, especially if you share the end device with others.

We take data protection within the company very seriously. Our employees and the service companies commissioned by us have been sworn to secrecy and to comply with data protection regulations.

17. storage period

We only store personal data for as long as is necessary to achieve the above-mentioned data processing purposes. We store contractual data for longer as this is required by statutory retention obligations. Such retention obligations arise, among other things, from accounting and tax regulations. According to these regulations, business communication, concluded contracts and accounting documents must be stored for up to 10 years. If we no longer need this data to perform the services for you, the data will be blocked. This means that the data may then only be used for very specific purposes, such as accounting and tax purposes.

18 Your rights as a data subject

You can object to data processing at any time. You also have the following rights:

Right to information: You have the right to request access to your personal data stored by us at any time free of charge if we process it. This gives you the opportunity to check what personal data we process about you and that we use it in accordance with the applicable data protection regulations.

Right to rectification: You have the right to have incorrect or incomplete personal data rectified and to be informed of the rectification.

Right to erasure: You have the right to have your personal data erased under certain circumstances. In individual cases, the right to erasure may be excluded.

Right to restriction of processing: Under certain conditions, you have the right to request that the processing of your personal data be restricted.

Right of withdrawal: In principle, you have the right to withdraw your consent at any time with effect for the future. Processing activities based on your consent in the past will not become unlawful as a result of your withdrawal.

Please note that even after you request the deletion of your personal data, we must retain all or part of it in accordance with statutory and contractual retention obligations. The deletion of your personal data may mean that you can no longer use our services.

The withdrawal of your consent does not affect the lawfulness of the processing prior to the withdrawal.

19. contact

If you have any questions about data protection on our website, would like information or would like to have your data deleted, please contact us by sending an e-mail to gruezi@cheezy.ch.

Please send your request by letter to the following address:

cheezy by Gourmino AG

Eigerweg 4

3322 Urtenen-Schönbühl

Switzerland

Status: 06.09.2024