Privacy policy

This website was created and published by Essento Food AG, based in Switzerland, Aargauerstrasse 3, CH-8048 Zurich, registered in the commercial register of the Canton of Zurich under the UID number CHE-200.783.952 (hereinafter also referred to as "we" or "Essento").

Accordingly, we are responsible for the collection, processing and use of your personal data. We are committed to handling your personal data responsibly. Consequently, we consider it a matter of course to comply with the legal requirements of the Swiss Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (OFADP) and other provisions of Swiss data protection law. Specific reference is made to any additional applicable law from the European General Data Protection Regulation (GDPR).

In the following, we would like to inform you about how we handle your personal data. Please note that the information contained below may be reviewed and amended from time to time. We therefore recommend that you consult this privacy policy regularly.

1. When you visit our website

When you visit our website, our servers temporarily store every access in a log file. The following data is stored by us

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved data
  • Website from which our domain was accessed
  • Your computer's operating system and the browser you are using
  • Country from which our website is accessed
  • Name of your internet access provider

This data is generally collected and processed anonymously without reference to individuals for the purpose of enabling use of the website (establishing a connection), ensuring system security and stability in the long term and optimising the Internet offering, as well as for internal statistical purposes. The aforementioned information is not linked to or stored with personal data. Only in the event of an attack on the network infrastructure of our website or if there is suspicion of other unauthorised or abusive website use will the IP address be evaluated for clarification and defence purposes and, if necessary, used in the context of criminal proceedings for identification and for civil and criminal proceedings against the users concerned. We have a legitimate interest in this (legal basis within the scope of the GDPR: Art. 6 para. 1 lit. f GDPR). For the use of analytics software and cookies, see below.

2. When opening a customer account

To make purchases in the online shop, you can voluntarily open a customer account. For the purpose of processing your orders in the online shop or providing the services you have ordered, we collect the following data when you register for a customer account (* mandatory entries; legal basis within the scope of the GDPR: Art. 6 para. 1 lit. a and b GDPR):

  • First name and surname*
  • Billing address (and delivery address if different)
  • E-mail address*
  • Password*

The data in the customer account can be viewed and changed at any time. You can also request the complete deletion of your customer account by sending us a corresponding deletion request (see under "Contact").

3. When shopping in the online shop

If you want to buy a product in our online shop, we need various data to process the contract. You must provide the following data:

  • First name and surname
  • Billing address (and delivery address if different)
  • Payment details (depending on the selected payment method)
  • Login data (for registered customers)

The provision of further data is voluntary. The purpose of collecting your telephone number is to contact you if there are any queries about your order. The telephone number will not be used to call you for advertising purposes and will not be passed on to third party marketing providers. If you have a customer account, we will save your data for your next purchase. In connection with your orders in the online shop, the processing of your orders and the provision of the services you have requested, we also collect, store and process the following data:

  • Information about the products ordered
  • Data relating to your orders

Unless otherwise stated in this privacy policy or unless you have given your separate consent, we will only use the aforementioned data to process the contract, namely to process your orders, deliver the ordered products and ensure correct payment (legal basis within the scope of the GDPR: Art. 6 para. 1 lit. b GDPR).

4. Newsletter

You can register for our newsletter on our website. The following data is requested for registration (* mandatory entries):

  • First name*
  • E-mail address*

After entering the above information, you can initiate the registration for our newsletter. We use the double opt-in mechanism for this. After submitting your registration, you will receive an e-mail from us containing a confirmation link. You must confirm this link to definitively subscribe to the newsletter. You can revoke your consent at any time (see under "Contact"). You will also find an unsubscribe link in all newsletter emails.

We use email marketing services from Klaviyo to send our newsletter. (Klaviyo, Inc., 125 Summer Street, Boston, MA, 02111, USA). Klaviyo complies with the data protection provisions of the "Swiss-USA Privacy Shield" agreement and therefore has an adequate level of data protection. You can view Klaviyo's privacy policy at https://www.klaviyo.com/privacy/policy.

Our newsletter may also contain a so-called web beacon (tracking pixel) or similar technical means. A web beacon is a 1×1 pixel, invisible graphic that is associated with the user ID of the respective newsletter subscriber. For each newsletter sent, there is information on the address file used, the subject and the number of newsletters sent. It is also possible to see which addresses have not yet received the newsletter, to which address it was sent and which addresses failed to receive it. We also collect the opening rate, including information on which addresses have opened the newsletter and which have unsubscribed. We use this data for statistical purposes and to optimise the newsletter in terms of content and structure. This enables us to better tailor the information and offers in our newsletter to the individual interests of the recipients. The tracking pixel is deleted when you delete the newsletter. To prevent the use of the web beacon in our newsletter, please set your mail programme so that no HTML is displayed in messages, if this is not already the case by default.

The legal basis for processing your data for this purpose is the consent you have given (legal basis within the scope of application of the GDPR: Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the cancellation.

5. Disclosure of your personal data to third parties

We only pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we pass on your data to third parties if this is necessary for the use of the website and contract processing, namely the processing of your orders, the processing of your purchases, the delivery of your ordered products and their payment, for the provision of the services requested by you and the analysis of your user behaviour. The use of the data passed on for this purpose by the third parties is strictly limited to the stated purposes.

Various third-party service providers are explicitly mentioned in this privacy policy (e.g. in the sections "Tracking tools" and "Social plugins"). Another service provider to whom personal data is passed on or who has or may have access to your personal data is our web host hostpoint.

6. Transfer of your personal data abroad

We are authorised to transfer your data to third-party companies abroad if this is necessary in connection with the processing of your enquiries, the provision of services and marketing campaigns. These third-party companies are obliged to maintain your privacy to the same extent as we do. If the level of data protection in a country is deemed inappropriate for Swiss conditions or within the meaning of the EU General Data Protection Regulation, we will use a contract to ensure that your personal data is protected at all times in accordance with Swiss guidelines or the EU General Data Protection Regulation. Some of the third-party service providers mentioned in this privacy policy are based in the USA (see under "Tracking tools" and "Social plugins"). Further information on data transfers to the USA can be found under "Tracking".

7. Processing of your personal data for credit checks

If we make advance payments, e.g. in the case of a purchase on account, we may obtain credit information from a credit agency on the basis of mathematical-statistical procedures in order to safeguard our legitimate interests. For this purpose, we transmit the personal data required for a credit check to a credit agency and use the information received on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) that have been calculated on the basis of scientifically recognised mathematical-statistical procedures and whose calculation includes address data, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions.

Our legitimate interest lies in the purposes described above (legal basis within the scope of the GDPR: Art. 6 para. 1 lit. f GDPR).

8. Your right to information, deletion, correction and restriction

You can request information about your personal data stored by us at any time. Requests for information must be submitted in writing with proof of identity. You are also entitled to request the deletion or correction of your data stored by us at any time. You can do this by sending us a corresponding request (see under "Contact"). Please note that we reserve the right to request proof of identity and that if your data is deleted, you will not be able to use our services or will no longer be able to use them to their full extent.

You can revoke your consent to certain data processing at any time with effect for the future. Please note that by law certain data must be stored for a certain period of time. Such data must therefore remain stored by us until the expiry of these periods. We block this data in our system and only use it to fulfil legal requirements.

You have the right to request the restriction of the processing of your personal data, for example if the accuracy of the data is disputed by you.

You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller, depending on the applicable data protection law.

Depending on the applicable data protection law, you may have a statutory right of appeal to the data protection authority responsible for you if you do not agree with the handling of your personal data.

9. Data security

We use appropriate technical and organisational security measures that we deem appropriate to protect your data stored by us against manipulation, partial or complete loss and unauthorised access by third parties. Our security measures are continuously adapted in line with technological developments. If you register with us as a customer, access to your customer account is only possible after entering your personal password. You should always treat your payment information confidentially and close the browser window when you have finished communicating with us, especially if you share your computer with others. We also take our own internal data protection very seriously. Our employees and the service companies commissioned by us are obliged to maintain confidentiality and to comply with data protection regulations. Furthermore, they are only granted access to personal data to the extent necessary.

10. Cookies

We also use cookies (session cookies as well as temporary and permanent cookies) on our website. Among other things, cookies help to make your visit to our website easier, more pleasant and more useful. Cookies are information files that your web browser automatically saves on your computer's hard drive when you visit our website. Cookies do not damage your computer's hard drive or transmit your personal data to us. We use cookies, for example, to recognise you as a registered user without you having to log in again each time. In this case, using cookies does not mean that we receive new personal data about you as an online visitor. Most Internet browsers accept cookies automatically. The use of cookies serves in particular the user-friendly and stable operation of the website and enables us to improve our offer. This constitutes a legitimate interest. However, you can set your browser so that no cookies are stored on your computer or you receive a warning message when a new cookie arrives. You can find more information on this in the settings options of your browser. However, deactivating cookies may mean that you cannot use all the functions of our website.

By continuing to use our website and/or agreeing to this privacy policy, you consent to cookies being set by us and thus to personal usage data being collected, stored and used, even beyond the end of the browser session. You can revoke this consent at any time by activating the browser setting to refuse third-party cookies.

11. Tracking tools

We use the web analysis service Google Analytics for the purpose of designing and continuously optimising our website in line with requirements. In this context, pseudonymised user profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as

  • Browser type/version
  • Operating system used
  • Referrer URL (the previously visited page)
  • Host name of the accessing computer (IP address)
  • Time of the server request
  • device

are transmitted to servers of Google Inc, a company of the holding company Alphabet Inc, in the USA and stored there. The IP address is shortened by activating IP anonymisation ("anonymizeIP") on this website before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area or Switzerland. The anonymised IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google observes the data protection provisions of the "Swiss-USA Privacy Shield" agreement and therefore has an adequate level of data protection.

The information is used to analyse the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. According to Google Inc., under no circumstances will the IP address be associated with other data relating to the user. You can find out more at http://www.google.com/intl/de/analytics/privacyoverview.html.

Users can prevent Google from collecting the data generated by the cookie and relating to the use of the website by the user concerned (including the IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser plugin, you can click on this link to prevent Google Analytics from collecting data on the website in the future. An opt-out cookie will be stored on your device. If you delete cookies (see under "Cookies"), you must click on the link again.

The use of Google Analytics is in our legitimate interest in the operation and improvement of our website (legal basis within the scope of the GDPR: Art. 6 para. 1 lit. f GDPR).

12 Facebook Custom Audience

We use communication tools from the provider Facebook Inc, 1601 S California Ave, Palo Alto, CA 94304, USA or, if you are based in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When using Custom Audience, a non-reversible and non-personalised checksum (hash value) is generated from your usage data, which can be transmitted to Facebook for analysis and marketing purposes. The Facebook cookie is used for this purpose. Facebook complies with the data protection provisions of the "Swiss-USA Privacy Shield" agreement and therefore has an adequate level of data protection.

For more information about the purpose and scope of data collection and the further processing and use of your data by Facebook, as well as your setting options for protecting your privacy, please refer to Facebook's privacy policy, which can be found at https://www.facebook.com/ads/website_custom_audiences/ and https://www.facebook.com/privacy/explanation.

If you wish to object to the use of Facebook Custom Audience, you can do so at https://www.facebook.com/ads/website_custom_audiences/.

The use of Facebook Custom Audience is in our legitimate interest to operate and improve our offer (legal basis within the scope of the GDPR: Art. 6 para. 1 lit. f GDPR).

13 Facebook Pixel

Our website uses so-called "Facebook pixels" from the social network Facebook, which is operated by Facebook Inc, 1601 S California Ave, Palo Alto, CA 94304, USA, or, if you are based in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. With the help of the Facebook pixel, Facebook is able to determine the visitors to our website as a target group for the display of adverts, so-called "Facebook ads". Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our website. This means that with the help of the Facebook pixel, we want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying.

With the help of the Facebook pixel, we can also track the effectiveness of Facebook adverts for statistical and market research purposes by seeing whether users have been redirected to our website after clicking on a Facebook advert. The Facebook pixel is integrated directly by Facebook when you visit our website and a cookie is stored on your device. If you subsequently log in to Facebook or visit Facebook while logged in, your visit to our website will be noted in your profile. The data collected about you is anonymous to us, so it does not allow us to draw any conclusions about your identity.
However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible.The data is processed by Facebook in accordance with Facebook's data usage policy.For more information on how Facebook Pixel works and how Facebook Ads are displayed in general, please refer to Facebook's data usage policy at https://www.facebook.com/policy.php.

You can object to the collection by the Facebook pixel and use of your data to display Facebook ads. To do this, you can go to the page set up by Facebook and follow the instructions on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads or declare your objection via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are adopted for all devices, such as desktop computers or mobile devices.

The use of Facebook Pixel is in our legitimate interest in operating and improving our website (legal basis within the scope of the GDPR: Art. 6 para. 1 lit. f GDPR).

14. Links to our social media presences

We have included links to our social media profiles on the following social networks on our website

  • Facebook Inc, 1601 S California Ave, Palo Alto, CA 94304, USA
  • Instagram Inc, 1601 Willow Road, Menlo Park, California 94025, USA
  • Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA

If you click on the relevant social network icons, you will be automatically redirected to our profile on the relevant network. In order to use the functions of the relevant network there, you must log in to your user account with the relevant network.

When you access a link to one of our social media profiles, a direct connection is established between your browser and the server of the relevant social network. This provides the network with the information that you have visited our website with your IP address and accessed the link. If you access a link to a network while you are logged into your account with the relevant network, the content of our site may be linked to your profile on the network, which means that the network can directly associate your visit to our website with your user account. If you want to prevent this, you should log out before clicking on the relevant links. An assignment will take place in any case if you log in to the relevant network after clicking on the link.

15. Duration of storage

Your personal data will be stored for as long as is necessary to fulfil the purposes for which it was collected or for as long as we have a legitimate interest in doing so. Legal retention obligations are also reserved.

Contact

If you have any questions about data protection on our website, would like information or would like to have your data deleted, please contact us:

Essento Food AG
Data Privacy
Aargauerstrasse 3
8048 Zurich
hallo@essento.ch

Status: Zurich, 22 January 2019