Data protection

 

Your trust is important to us. That is why we take the subject of data protection seriously and pay attention to appropriate security. We naturally observe the applicable provisions of the Federal Data Protection Act (DSG), the Ordinance to the Federal Data Protection Act (VDSG), the Telecommunications Act (TCA) and other applicable data protection regulations.

This privacy policy is an integral part of the General Terms and Conditions of swissmooh AG/cheezy. By accessing the online store and using our offered services and products, you declare that you have carefully read this privacy policy and agree to the described data processing.

So that you know what personal data we collect from you, for what purposes we use it, to whom it may be disclosed and what rights you have in connection with the use of your personal data by swissmooh/cheezy , please take note of the information below.

1. responsible for the website www.cheezy.ch

Responsible for the website is:

swissmooh AG

Archstrasse 2

8401 Winterthur (Switzerland)

Email: gruezi@cheezy.ch

2. data processing when visiting the website (log file)

When you visit our website, our servers temporarily store each access in a log file. Without your intervention, the following data will be processed and stored by us until automatic deletion after 12 months at the latest:

  • the IP address of the requesting computer
  • the name of the owner of the IP address range (usually your Internet access provider)
  • the date and time of access
  • the website from which access was made (referrer URL), if applicable with the search term used
  • the name and the URL of the retrieved file
  • the status code (e.g. error message)
  • the operating system of your computer
  • the browser you use (type, version and language)
  • the transmission protocol used (e.g. HTTP/1.1)
  • Your username from a registration/authentication

The data collected is only used for statistical analysis and to improve the website and is not linked to or stored with personal data. We reserve the right to subsequently check the log files if there are concrete indications of illegal use.

3. data processing when using the contact form

If you contact us using the contact form on the website, we collect the following data from you (mandatory *):

  • Name*
  • e-mail address*
  • Your message*

We use this data exclusively to answer the questions you ask or to provide the services you request.

 The provision of this personal data is expressly on a voluntary basis. Without the provision of this personal data, we are not able to provide the requested service.

4. data processing during registration for a customer account

In our online shop you can order as a guest or through your personal customer account. Certain services can only be obtained with a voluntarily created customer account.

If you register a customer account, we collect the following data from you (mandatory *):

  • First name*
  • Last name*
  • e-mail address*

We collect this data in order to open and manage the customer account, to process your order(s) and to provide the requested services. You can view and change your data in your customer account at any time. In addition, you can request the complete deletion of your customer account by sending us a corresponding request or requesting the deletion directly in the customer account.

5. data processing when ordering as a guest

For the processing of the purchase contract we collect the following data mandatory:

  • First name*
  • Last name*
  • e-mail address*
  • Postal address*
  • Country*
  • Phone number*
  • Payment details (depending on the selected payment method)*
  • Login data (for registered customers)

The provision of further data is voluntary. If you are registered and have a customer account, we will save your data for your next purchase.

In connection with your order and the desired services, we process, if you have a customer account, the following additional data:

  • Information about the ordered products
  • Data on your ordering, purchasing and payment behaviour

Unless otherwise stated in this data protection declaration or unless you have given your separate consent, we will only use the aforementioned data to process the contract, namely to process your orders, deliver the ordered products and ensure correct payment.

When we use external payment providers such as Stripe (Stripe, 510 Townsend Street, San Francisco, CA 94103, USA), Twint (TWINT AG, Stauffacherstrasse 31, CH-8004 Zurich, Switzerland), and Recharge (ReCharge, Inc, 3030 Nebraska Avenue, Los Angeles California US 90404), we sometimes provide payment history information in addition to the personal information required to complete the purchase. Like other third parties, payment providers may use personal information only for the purposes set forth in this Privacy Policy.

6. data processing when shopping in the online shop

For the processing of the purchase contract we collect the following data mandatory:

  • First name*
  • Last name* 
  • e-mail address*
  • Postal address*
  • Country* 
  • Phone number*
  • Payment details (depending on the selected payment method)*
  • Login data (for registered customers)

The provision of further data is voluntary. If you are registered and have a customer account, we will save your data for your next purchase.


In connection with your order and the desired services, we process, if you have a customer account, the following additional data:

  • Information about the ordered products
  • Data on your ordering, purchasing and payment behaviour

Unless otherwise stated in this data protection declaration or unless you have given your separate consent, we will only use the aforementioned data to process the contract, namely to process your orders, deliver the ordered products and ensure correct payment.

When we use external payment providers such as Stripe (Stripe, 510 Townsend Street, San Francisco, CA 94103, USA), Twint (TWINT AG, Stauffacherstrasse 31, CH-8004 Zurich, Switzerland), and Recharge (ReCharge, Inc, 3030 Nebraska Avenue, Los Angeles California US 90404), we sometimes provide payment history information in addition to the personal information required to complete the purchase. Like other third parties, payment providers may use personal information only for the purposes set forth in this Privacy Policy.

7th Newsletter

On our website you have the possibility to subscribe to our newsletter. For this purpose a registration is required. Within the scope of registration we collect the following data from you (mandatory *):

  • e-mail address*

After entering the above mentioned information you can trigger the registration for our newsletter. We use email marketing software from The Rocket Science Group, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, to send the newsletter. The privacy policy of Mailchimp can be found here.

Our newsletter contains a so-called web beacon or similar technical means (tracking pixels). A web beacon is a 1x1 pixel, invisible graphic that is associated with the user ID of the respective newsletter subscriber. Through the web beacon we receive the following information about the newsletter dispatch:

  • address file used
  • Subject and number of newsletters sent
  • Information about which addresses received or did not receive the newsletter and at which addresses the dispatch failed
  • Information which addresses have opened the newsletter
  • Information about which addresses have unsubscribed
  • technical information (e.g. time of retrieval, IP address, browser type and operating system)

This information is used for statistical analysis of our newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients. The web beacon is deleted when you delete the newsletter.

To prevent the use of the Web Beacon, please set your mail program so that no HTML is displayed in messages, if this is not already the case by default. On the following pages you will find explanations of how to make this setting in the most common e-mail programs.

By registering for the newsletter, you give us your consent to process the data provided for the regular dispatch of the newsletter to the address you have given us as well as for the statistical evaluation of the usage behaviour and the optimisation of the newsletter. You can revoke your consent at any time with effect for the future or click on the unsubscribe link in the newsletter e-mails.

8. chat function - Tidio Live Chat 

For interested parties and customers, Flaschenpost offers an online consultation (chat function). The participation in our chat is voluntary and possible without registration. Collected data will be used to optimize our service offer and for statistical purposes. You can cancel the online consultation at any time by closing the chat window. As it is possible to enter personal data, we ask you to check for yourself which data you wish to disclose to us. If, on the other hand, the consultation requires identification (e.g. clarification of concerns regarding your customer account), requested personal data will be used exclusively to legitimise your person for the purpose of carrying out the consultation and its quality assurance. The LiveChat function is offered by the provider Tidio Live chat.

9. central storage

We store the data specified in the above-mentioned paragraphs in a central electronic data processing system (so-called CRM). The data concerning you is systematically collected, linked and evaluated for the purpose of processing your enquiries and handling our services. For this purpose we use software from Shopify International Ltd, 1-2 Victoria Buildings Haddington Road Dublin 4, D04 XN32, Ireland.

 10. transfer of data to third parties

We will only pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we will only pass on your data to third parties if this is necessary within the framework of the use of the website and the processing of the contract (also outside the website), namely the processing of your bookings. This includes in particular services in the area of payment and subscription management, transport services and IT services, e.g. services in the areas of data storage (hosting), cloud services, sending of e-mail newsletters, data analysis and refinement etc. The use of the data passed on for this purpose by the third parties is strictly limited to the stated purposes.

11. transfer of personal data abroad

For the sake of completeness, we would like to point out to users who are resident or domiciled in Switzerland that surveillance measures are in place in the USA by US authorities which generally allow the storage of all personal data of all persons whose data has been transferred from Switzerland to the USA. This is done without any differentiation, restriction or exception based on the objective pursued and without any objective criterion that would make it possible to limit access to the data by the US authorities and its subsequent use to very specific, strictly limited purposes that could justify the interference associated with both access to and use of the data. Furthermore, we would like to point out that there are no legal remedies available in the United States for data subjects from Switzerland that would allow them to gain access to the data concerning them and to obtain its correction or deletion, or that there is no effective judicial protection against general access rights of US authorities.

We would also like to point out to users resident in Switzerland that, from Switzerland's point of view, the USA does not provide an adequate level of data protection, partly due to the issues mentioned in this section. Insofar as we have explained in this data protection declaration that recipients of data are based in the USA, we will ensure that your data is adequately protected with our partners, either through contractual agreements with these companies or by ensuring that these companies are certified under the Swiss-US Privacy Shield.

13. cookies

Cookies help in many ways to make your visit to our website easier, more pleasant and more meaningful. Cookies are information files that your web browser automatically stores on the memory of your terminal device when you visit our website. Cookies neither damage the memory of your terminal device nor do they transmit personal data from you to us.

 

We use cookies, for example, to temporarily save your selected services and entries when you fill out a form on the website so that you do not have to repeat the entry when you call up another subpage. Cookies may also be used to identify you as a registered user after you have registered on the website, so that you do not have to log in again when you access another subpage.

Most Internet browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your device or so that a message is always displayed when a new cookie is activated. On the following pages you will find explanations on how to configure cookies in the most common browsers:

Disabling cookies may mean that you will not be able to use all the features of our website.

14. analysis tools, remarketing and targeting

14.1 Google Analytics

On our website, we use Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, or Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses methods that enable an analysis of the use of the website, such as cookies. The information generated by the cookie about your use of our website such as

  • Navigation path followed by a visitor to the website
  • Time spent on the website or a subpage
  • the subpage from which the website is left
  • the country, region or city from where access is made
  • End device (type, version, color depth, resolution, width and height of the browser window)
  • Returning or new visitor
  • Browser type/version
  • Operating system in use
  • Referrer URL (i.e. the previously visited website)
  • Host name of the accessing computer (IP address)
  • Time of the server request

are usually transferred to a Google server in the USA and stored there. The IP address is shortened by activating the IP anonymization ("anonymizeIP") on this website before transmission within the member states of the European Union or in other signatory states of the Agreement on the European Economic Area or Switzerland. According to Google, the masked IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. In these cases, we ensure through contractual guarantees that Google maintains an adequate level of data protection.

The information is used to evaluate the use of the website, to compile reports on the activities on the website and to provide further services associated with the use of the website and the Internet for the purposes of market research and the design of the website in line with requirements. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf.

You can prevent the collection of data generated by the cookie and related to the website use by you (including the IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

14.2 Google Tag Manager

This website uses the Google Tag Manager. This service allows web page tags to be managed through an interface. The Google Tag Manager only implements tags. This means: no cookies are used and no personal data is collected. The Google Tag Manager triggers the services described in the section "Cookies", which in turn may collect data. However, Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will persist for all tracking tags if implemented with Google Tag Manager.

14.3 Google Adwords

We use the offer of Google Adwords to draw attention to our attractive offers by means of advertising material (so-called Google Adwords) on external websites.


These advertising media are delivered by Google via so-called "Ad Servers". For this purpose, we use ad server cookies, through which certain parameters can be measured to measure success, such as the display of ads or clicks by users. If you reach our website via a Google ad, Google Adwords will store a cookie in your PC. These cookies usually expire after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be contacted) are usually stored as analysis values for this cookie.


These cookies enable Google to recognize your internet browser. If a user visits certain pages of an AdWords client's website and the cookie stored on their computer has not expired, Google and the client may recognize that the user clicked on the ad and was redirected to that page. Each Adwords client is assigned a different cookie. Cookies can't be tracked through the websites of Adwords clients. We ourselves do not collect and process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google. By means of these evaluations we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, in particular we cannot identify the users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and save your IP address.

The information collected with the help of "conversion cookies" is used by Google to create visit statistics for our website. Through these statistics, we learn the total number of users who clicked on our advertisement and also which pages of our website were subsequently accessed by each user. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. In this way, we pursue the interest of optimizing the design of our website, showing you advertisements that are of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
The personal data is transmitted to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For more information about Google's privacy policy, please visit http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.

If you have reached our website via a Google ad, a cookie will be placed on your computer. Cookies are small text files that your internet browser places and saves on your computer. These so-called "conversion cookies" lose their validity after 30 days and are not used for your personal identification. If you visit certain pages of our website and the cookie has not expired, we and Google can recognize that you as a user clicked on one of our ads placed at Google and were redirected to our site.

You can prevent participation in this tracking process in a number of ways: a) by adjusting your browser software accordingly, in particular by suppressing third-party cookies so that you do not receive third-party ads; b) by disabling cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads, whereby this setting will be deleted if you delete your cookies; c) by deactivating interest-based ads from the providers that are part of the self-regulation campaign "About Ads" via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers via the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.

14.4 Google Remarketing

Besides Adwords Conversion we use the application Google Remarketing. This is a procedure with which we would like to address you again. This application allows you to see our advertisements after visiting our website during your further internet use. This is done by means of cookies stored in your browser, which are used by Google to record and evaluate your usage behaviour when visiting various websites. In this way Google can determine your previous visit to our website. A combination of the data collected within the scope of remarketing with your personal data, which may be stored by Google, does not take place by Google according to its own statements. In particular, according to Google, pseudonymisation is used in remarketing.

14.5 Facebook pixels

Within our online offer, the so-called "Facebook pixel" is used due to our legitimate interests in analysis, optimization and economic operation of our online offer and for these purposes.

On the one hand, the Facebook pixel enables Facebook to determine the visitors of our online offer as a target group for the presentation of ads (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of users and do not appear to be annoying. The Facebook Pixel also enables us to track the effectiveness of Facebook Ads for statistical and market research purposes by seeing whether users are redirected to our website after clicking on a Facebook Ad (so-called "conversion").

The processing of data by Facebook takes place within the framework of Facebook's data use policy. Please read the notes on the presentation of Facebook ads in the Facebook Data Usage Policy: https://www.facebook.com/policy.php. Specific information and details about the Facebook pixel and its functionality can be found in the help section of Facebook: https://www.facebook.com/business/help/651294705016616.

The service is offered by Facebook Inc. (1 Hacker Way, Menlo Park, CA 94025, USA). If you are located in the EU, the service is provided by Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).

We do not know how long Facebook processes the above-mentioned data and for what additional purposes it is used.

You may object to the collection by the Facebook pixel and use of your information to display Facebook ads. To control what types of ads are displayed to you within Facebook, you can go to the page set up by Facebook and follow the instructions on usage-based advertising settings: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, which means they apply to all devices, such as desktop computers or mobile devices.

You may also opt-out of the use of cookies for audience measurement and advertising purposes by visiting the Network Advertising Initiative opt-out page (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

14.6 Hotjar

We use Hotjar to better understand the needs of our users and to optimize the services offered on this website. Hotjar uses cookies and other technologies to collect information about the behaviour of our users and their end devices. Hotjar is used to anonymously record the interactions of randomly selected, individual visitors to our website. This creates a log of e.g. mouse movements and clicks with the aim of identifying possibilities for improvement of our offer. In addition, Hotjar is used to evaluate the IP address of the device (only recorded and stored in anonymised form), information on screen size, device type (Unique Device Identifiers), information on the browser used, location (country), incoming and outgoing links, as well as resolution and type of the terminal device calling up our website offer for statistical purposes. In addition, we offer the possibility of anonymous user feedback via Hotjar by means of so-called "feedback polls", in which users can voluntarily submit an assessment of our website. Hotjar stores this information in a pseudonymous user profile. The information is not used by Hotjar or by us to identify individual users, nor is it combined with other data about individual users. The information collected is stored by Hotjar Ltd. and is not passed on to other third parties.

In addition, users who give us feedback on our website via Hotjar using the "Feedback Poll" have the opportunity to provide us with their e-mail address. This gives us the opportunity to ask interested users about their personal impression of our website and to improve it further with this information. The provision of the e-mail address is voluntary and can be skipped by the user at any time.

14.7 Google Fonts

In order to display our content correctly and graphically appealing across browsers, we use script libraries and font libraries such as Google Web Fonts (https://www.google.com/webfonts/) on this website. Google Web fonts are cached in your browser to prevent multiple downloads. If your browser does not support Google Web Fonts or prevents access, content will be displayed in a default font.

15. social media and your data

15.1 Own social media presence

On our website you will find links to social media networks. These are not plug-ins provided by the social media network, which already transmit data to the provider without user influence when the page is loaded. Behind the buttons to the social media networks there is only a link to our presence on the respective social media network. User data is not automatically transmitted to the social media network when the page is loaded.

The links lead to our appearances in the following networks:

  • Facebook from Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
  • Instagram of Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, and
  • Twitter from Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.
  • Pinterest of Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA
  • Linkedin from LinkedIn Corporation, Mountain View, California, USA
  • Youtube from YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA

 When you click on a link to one of our social media profiles, a direct connection is established between your browser and the server of the social network concerned. This gives the network the information that you visited our website with your IP address and called up the link. If you link to a network while logged into your account on that network, the content on our site may be linked to your profile on the network, which means that the network can associate your visit to our site directly with your account. If you wish to prevent this, you should log out before clicking on any links. In any case, an assignment will take place when you log in to the relevant network after clicking on the link.

15.2 Social plugins

On our website, we provide you with certain social media functionalities, in particular the sharing of product information on Facebook, the tweeting of product information etc. You will find the respective functionalities on the individual product pages under the heading "Share". If you click on the relevant social network icons, you will be linked to the social network in question to exercise the selected functionality, e.g. to share content on Facebook or to tweet on Twitter. To do this, however, you must be logged in to your user account or already be logged in.

We provide you with plugins from the following social networks:

  • Facebook from Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
  • Instagram of Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, and
  • Twitter from Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.
  • Pinterest of Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA
  • Linkedin from LinkedIn Corporation, Mountain View, California, USA
  • Youtube from YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA

 If you select one of the available functionalities and click on the icon of the social network concerned, a direct connection between your browser and the server of the social network concerned will be established. This provides the network with the information that you have visited our website with your IP address and called up the link. If you link to a social network while you are logged into your account on that social network, the content of our website may be linked to your social network profile. This means that the social network can directly link your visit to our website to your user account. If you want to prevent this, you should log out before you click on any links. In any case, an assignment takes place when you log in to the relevant network after clicking on the link.

For the purpose and scope of data collection and the further processing and use of the data by the respective social network as well as your rights and setting options to protect your privacy, please refer to the data protection information of the social network.

16. data security

We use suitable and appropriate technical and organisational security measures to protect your personal data stored with us against manipulation, partial or complete loss and unauthorised access by third parties. Our security measures are continuously adapted and improved in line with technological developments.

You should always keep your access data confidential and close the browser window when you have finished communicating with us, especially if you share the terminal device with others.

We take internal company data protection very seriously. Our employees and the service companies we commission have been obligated by us to maintain confidentiality and to comply with data protection regulations.

17. storage period

We only store personal data for as long as necessary to achieve the above-mentioned data processing purposes. Contract data will be stored by us for a longer period of time, as this is required by legal storage obligations. Such storage obligations result, among other things, from accounting regulations and from tax regulations. According to these regulations, business communication, concluded contracts and accounting vouchers must be stored for up to 10 years. If we no longer need this data for the performance of services for you, the data will be blocked. This means that the data may then only be used for very specific purposes, such as accounting and for tax purposes.

18. your rights as a data subject

You can object to data processing at any time. You also have the following rights:

Right to information: You have the right to demand free of charge access to your personal data stored with us at any time if we are processing it. This gives you the opportunity to check which personal data we process about you and that we use it in accordance with the applicable data protection regulations.

Right of rectification: You have the right to have incorrect or incomplete personal data corrected and to be informed of the correction.

Right to deletion: You have the right to have your personal data deleted under certain circumstances. In individual cases the right to deletion may be excluded.

Right to limit processing: You have the right, under certain conditions, to request that the processing of your personal data be limited.

Right of withdrawal: You have the right to withdraw your consent at any time with effect for the future. Processing activities based on your consent in the past will not become unlawful by your revocation.

Please note that even after a request for deletion of your personal data, we must retain all or part of it within the framework of the legal and contractual obligations to retain it. The deletion of your personal data may result in you no longer being able to use our services.

The revocation of your consent does not affect the lawfulness of the processing before the revocation.

19. contact

If you have any questions about data protection on our website, would like information or would like to have your data deleted, please contact us by sending an e-mail to gruezi@cheezy.ch.

Please send your request by letter to the following address:

swissmooh AG

Archstrasse 2

8401 Winterthur

Switzerland

Status: 11.05.2020