José Vouillamoz Wine & Grapes Consulting Data Protection Policy

1. Controller and Content of the Data Protection Policy

We, the undersigned, José Vouillamoz Wine & Grapes Consulting, Rue de Lausanne 52, 1950 Sion – Switzerland, are the operators of the business premises for the José Vouillamoz brand (the "business premises") and the website www.josevouillamoz.com (hereinafter, the "Website") and, unless otherwise stated, are responsible for the data processing described in this data protection policy.

Please consult the information below to learn about the personal data we collect from you and the purposes for its use. In terms of data protection, we are primarily guided by the requirements of the Swiss Data Protection Act (nLPD), in particular the Federal Data Protection Act (FADP) and the EU General Data Protection Regulation (GDPR), whose provisions may apply in individual cases.

Please be aware that the information below will be reviewed and amended from time to time. We therefore recommend that you regularly consult this data protection policy. Furthermore, the applicable data protection provisions stipulate that other companies are responsible for the processing of the individual data listed below or are jointly responsible with us. Therefore, in this case, the information from these providers is also decisive.

2. Contact Person

If you have any questions about data protection or wish to exercise your rights in this regard, please contact our contact person by sending an email to: info@josevouillamoz.com.

3. Your Rights

Subject to the satisfaction of the legal requirements, you, as the data subject, have the following rights:

  • Right of access: You have the right to request free access to your personal data stored by us at any time if we are processing it. This gives you the opportunity to check what personal data we process about you and to confirm that we are using it in accordance with applicable data protection regulations.

  • Right to rectification: You have the right to have inaccurate or incomplete personal data rectified and to be informed of the rectification. In this case, we will inform the relevant data recipients of the rectifications made, unless this is impossible or involves a disproportionate effort.

  • Right to erasure: You have the right to have your personal data erased in certain circumstances. In specific cases, for example in the case of legal retention requirements, the right to erasure may be set aside. In this case, if the conditions are met, the data may be blocked instead of deleted.

  • Right to restriction of processing: You have the right to request the restriction of the processing of your personal data.

  • Right to data portability: You have the right to receive the personal data that you have provided to us, free of charge and in a readable format.

  • Right to object: You can object to data processing at any time, in particular in the context of direct marketing (e.g., advertising emails).

  • Right to withdraw consent: In principle, you have the right to withdraw your consent at any time. However, processing activities based on past consent will not become illegal as a result of your withdrawal.

To exercise these rights, please send us an email to the following address: info@green-shop.ch

  • Right to appeal: You have the right to lodge a complaint with a competent supervisory authority, for example, against the way your personal data is processed.

4. Data Security

We implement adequate technical and organizational security measures to protect the personal data we store against loss and unlawful processing, specifically unauthorized access by third parties. Our employees and service providers mandated by us are required to comply with confidentiality and data protection rules. Furthermore, these people only have access to personal data to the extent necessary for the performance of their activities.

Our security measures are continuously adapted in line with technological developments. However, the transmission of information via the Internet and electronic means of communication always carries certain security risks, and we cannot guarantee the absolute security of the information transmitted in this way.

5. Contacting Us

Any contact via our contact addresses and channels (e.g., email, telephone, or contact form) involves the processing of your personal data. The processing concerns the data you provide to us, e.g., your company name, your name, your function, your email address or your telephone number, and your question. In addition, the time the request was received is recorded. Optional information is indicated by the word optional in parentheses (optional) in the contact forms.

We process this data exclusively for the purpose of fulfilling your request (e.g., providing product information, helping you execute contracts such as product returns, logging feedback for service improvement, etc.). The legal basis for this data processing is our legitimate interest in fulfilling your request within the meaning of Article 6(1)(f) of the EU GDPR or, if it concerns the conclusion or performance of a contract, the implementation of the necessary measures within the meaning of Article 6(1)(b) of the EU GDPR.

6. Use of Your Data for Marketing Purposes

6.1 Centralized Data Storage and Analysis in the CRM System If it is clearly possible to link the data to you personally, we will record and link the data referred to in this data protection policy, i.e., in particular your contact details, contract data, and browsing behavior on our websites in a centralized database. This will allow us to manage customer data efficiently, respond adequately to your concerns, effectively provide you with the requested services, and execute the associated contracts. The legal basis for this data processing is our legitimate interest in the efficient management of user data within the meaning of Article 6(1)(f) of the EU GDPR.

We evaluate this data in order to develop our product ranges based on your needs and to display and offer the most relevant information and offers possible. We also use methods that allow us to anticipate your possible interests and future orders based on your use of our website. The legal basis for this data processing is our legitimate interest in implementing marketing measures within the meaning of Article 6(1)(f) of the EU GDPR.

6.2 Email Marketing and Newsletter

If you sign up for our email newsletter (e.g., when opening or in your customer account), the following data will be collected. The mandatory information in the registration form is:

  • Email address

  • Title

  • First and last name Optional information is indicated by the word optional in parentheses (optional) in the registration forms. By registering, you consent to the processing of this data in order to receive information about our company, our offers in the organic, natural, and ecological product range, and the associated products and services. You may also receive invitations to participate in prize draws or to evaluate one of the aforementioned products or services. The collection of the title and name allows us to verify whether the registration corresponds to an existing customer account and to personalize the email content. The connection to the customer account helps us to make the newsletter offers and content more relevant to you and better suited to your potential needs.

We use your data to send you emails until you withdraw your consent. Withdrawal is possible at any time, particularly via the unsubscribe link present in all our marketing emails. Our marketing emails may contain a web beacon, a 1x1 pixel (tracking pixel), or similar technical aids. A web beacon is an invisible graphic file that is linked to the user ID of the person registered for the newsletter concerned. For each marketing email sent, we receive information about the addresses that have not yet received the email, the addresses to which it has been sent, and the addresses for which the sending failed. We also see which addresses have opened the email, for how long, and which links the recipients clicked on. Finally, we receive information about the addresses that have unsubscribed. We use this data for statistical purposes and to optimize advertising emails in terms of frequency, timing, structure, and content. This allows us to better adapt the information and offers in our emails to the individual interests of their recipients. The web beacon is deleted when you delete the email. To prevent the use of the web beacon in our marketing emails, please set your email software settings to ensure that HTML code is not displayed in messages if this is not already the default. Consult the help sections of your email software to find out how to configure this setting, e.g., here for Microsoft Outlook.

By signing up for the newsletter, you also agree to the statistical evaluation of user behavior for the purpose of optimizing and adapting this publication. The legal basis for this processing is consent within the meaning of Article 6(1)(a) of the EU GDPR. We use the email marketing software MaiPoet from Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, for marketing emails. Therefore, your data will be stored in a database belonging to MailPoet, which will allow them to access your data if necessary for the provision of the software and for the support provided in the context of its use. To learn about the further processing of data by Automattic, please consult the Automattic data protection policy. The legal basis for this processing is our legitimate interest within the meaning of Article 6(1)(f) of the EU GDPR in using the services of third-party providers.

7. Cross-Border Data Communication

We also reserve the right to disclose your personal data to third parties located abroad if this is necessary to carry out the data processing provided for in this data protection policy (see in particular sections 12 to 15). Of course, the legal provisions relating to the disclosure of personal data to third parties are respected. If the country in question does not have an adequate level of data protection, we guarantee, by concluding contractual provisions with these companies, that your data is adequately protected.

8. Retention Periods

We only store personal data for the period necessary to carry out the processing described in this data protection policy and based on our legitimate interest. With regard to contract data, the recording is covered by legal retention requirements. The rules that oblige us to retain data result from accounting and tax regulations. According to these regulations, commercial communications, concluded contracts, and accounting documents must be retained for a period of 10 years. If we no longer need this data to perform services on your behalf, the data will be blocked. Thus, the data can only be used if it is necessary to satisfy our retention obligations or to defend and assert our legal interests. The data will be deleted as soon as there is no longer any obligation to retain it or any legitimate interest in doing so.

10. Cookies

Cookies are information files that your web browser stores on the hard drive or memory of your computer when you visit our website. Cookies are associated with identification numbers that allow your browser to be recognized and the information contained in the cookie to be read. Cookies help, among other things, to make your visit to our website easier, more pleasant, and more relevant. We use cookies for various purposes that are necessary for your desired use of our website, i.e., which are "technically necessary." For example, we use cookies that allow us to identify you as a registered user after you log in without you having to log in again when you navigate between different sub-pages. Cart and order functionalities also rely on the use of cookies. In addition, cookies also perform other technical functions necessary for the operation of the website, such as "load balancing," i.e., distributing the performance load of the site over different web servers to relieve the servers. Cookies are also used for security purposes, for example, to prevent the unauthorized publication of certain content. Finally, we use cookies in the context of the design and programming of our website, for example, to allow the downloading of scripts or codes. The legal basis for this processing is our legitimate interest in providing a user-friendly and up-to-date website within the meaning of Article 6(1)(f) of the EU GDPR. Most Internet browsers automatically accept cookies. However, when you access our website, we ask you to accept certain cookies that we use and that are not necessary for the technical operation of our site, particularly when using third-party cookies for marketing purposes. You can use the buttons in the cookie banner to make the settings you want. The cookie banner and the following sections of this data protection policy provide information about the services and data processing associated with individual cookies. You can also configure your browser so that no cookies are stored on your computer or a message is always displayed when you receive a new cookie. On the following pages, you will find explanations on how you can configure cookie processing in the browsers mentioned.

  • Google Chrome

  • Apple Safari Disabling cookies may hinder your use of certain features of our website.

11. Tracking and Web Analytics Tools

11.1 General Information on Tracking We use the web analytics services listed below for the purpose of designing a website that meets your needs and continuously optimizing it. In this context, pseudonymized user profiles are created, and cookies are used (please also note section 11). The information generated by the cookie regarding your use of this website is generally transferred to a server of the service provider, where it is stored and processed with the log file data listed in section 10. The information may also be transferred to servers located abroad, e.g., in the United States (see section 8, particularly on the guarantees provided). During our data processing, we receive, among other things, the following information:

  • navigation path that a visitor followed on our site (including the content viewed and the products selected or purchased),

  • duration of the visit to the site or sub-page,

  • sub-page on which the website is located,

  • country, region, or city from which the access takes place,

  • end device (type, version, color depth, resolution, width and height of the browser window) and

  • recurring visitor or new visitor. The provider will use this information to evaluate the use of the website, to prepare reports on the activity recorded on the website on our behalf, and to provide other services related to website activity and Internet use for the purposes of market research and needs-based site design. With regard to this processing, we and the providers may be considered to a certain extent as co-controllers of the processing under the applicable data protection legislation. The legal basis for this data processing using the following tools is your consent within the meaning of Article 6(1)(a) of the EU GDPR. You can withdraw your consent or refuse the processing at any time by refusing or disabling the relevant cookies in your web browser settings (see section 11) or by using the service-specific options described below. For the further processing of data by the provider concerned as the (sole) controller under the applicable data protection legislation, in particular the possible transfer of this information to third parties such as authorities referred to in national laws, please consult the respective data protection information of the provider.

11.2 Google Analytics

We use the Google Analytics web analytics service from Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States) ("Google"). The above-mentioned data relating to the use of the website for the purposes mentioned above (see section 13.1) may be transmitted to the servers of Google LLC in the United States. The activation of the IP anonymization feature ("anonymize IP") on this website allows the IP address to be shortened before being transmitted to Member States of the European Union or to other States party to the Agreement on the European Economic Area. It is only in exceptional cases that the full IP address is sent to a Google server in the United States and shortened there. Users can prevent the data generated by the cookie and related to the use of the website (including the IP address) from being sent to Google and processed by it by downloading and installing a browser plug-in at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. Please click here for more information on data protection at Google.

12. Social Media

12.1 Social Media Profiles We have integrated links to our following social media profiles on our website:

  • Meta Platforms Inc., 1601 S California Ave, Palo Alto, CA 94304, United States;

  • Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, United States;

  • Twitter Inc., headquartered at 1355 Market Street, Suite 900, San Francisco, CA 94103, United States;

  • If you click on the social media icons, you will be automatically redirected to our respective profile. A direct connection is established between your browser and the server of the respective social network. This allows the media to be informed that you have visited our website from your IP address and clicked on the link. If you click on a link to a media outlet while logged into your user account on that network, the content of our website may be linked to your profile to allow the media to directly attribute your visit to our website to your account. If you want to avoid this pitfall, you must log out before clicking on the corresponding links. There is always a link between your access to our website and your user account when you log in to the network in question after clicking on the link. The respective provider is responsible, under the applicable data protection legislation, for the processing of the associated data. Therefore, please note the information on the network's website. The legal basis for any data processing that could be attributed to us is our legitimate interest in the use and promotion of our social media profiles within the meaning of Article 6(1)(f) of the EU GDPR.

13. Opening a Customer Account

If you open a customer account on our website, we will collect the following data. Optional information is indicated by the word optional in parentheses (optional) in the relevant form:

Core Data:

  • Title

  • Last Name

  • First Name

  • Billing and shipping address

  • Date of birth

  • Company and company address

Login Data:

  • Email address

  • Password

Other Data:

  • Languages

  • Gender

We use personal data to determine your identity and to verify that the conditions for opening the account are met. The email address and password serve as login data and thus ensure that the correct person is using the website under your credentials. We also need your email address to verify and confirm the account opening and for any future communication with you in the context of contract execution. In addition, this data is stored in the customer account for future contract conclusions. For this purpose, we also allow you to store other information on the account (e.g., your preferred payment method).

We also use the data to provide an overview of ordered products and purchased services (see in particular section 17) and to offer a simple option for managing your personal data and for the purpose of managing our website and contractual relationships, i.e., for the conclusion, content design, execution, and modification of contracts concluded with you via your customer account.

We process information on language and gender to offer you deals on the website that are tailored to your profile or personal needs, for the statistical recording and evaluation of selected offers, and for the optimization of our suggestions and offers.

The legal basis for processing for the above-mentioned purposes is your consent within the meaning of Article 6(1)(a) of the EU GDPR. You can withdraw your consent at any time by deleting the account information, deleting your customer account, or by notifying us of your wish to delete it.

To avoid any misuse, you must always handle your login data confidentially and close the browser window when you have finished communicating with us, especially if you share your computer with others.

14. Ordering Products

If you order products or book services on our website, we will need various data to fulfill your request. If you do not log in with your customer account (see section 16), we will collect the following data (depending on the product or service). Optional information is indicated by the word optional in parentheses (optional) in the corresponding contact forms:

  • Title

  • Last Name

  • First Name

  • Billing and shipping address

  • Email address

  • Date of birth

  • Company and company address

  • Phone number

We will use the data to determine your identity before concluding a contract. We will also need your email address to confirm your order and for any future communication with you in the context of contract execution. We store your data with the ancillary order data (e.g., date, order number, etc.), data on the ordered/booked services (e.g., product description, price, and characteristics; the "product data"), payment data (e.g., selected payment method, payment confirmation, and date; see also section 19) as well as information necessary for the processing and execution of the contract (e.g., product returns, use of services or warranties, etc.) in our CRM database (see section 6.1) to ensure correct order processing and contract execution.

To the extent necessary for the performance of the contract, we also disclose the required information to any third-party service providers (e.g., transport companies).

The legal basis for this processing is the performance of the contract we have concluded with you within the meaning of Article 6(1)(b) of the EU GDPR.

The transmission of data that is not marked as mandatory is done on a voluntary basis. We process this data to tailor our offer to your personal needs, to facilitate the execution of contracts, to contact you via an alternative communication channel if necessary for the purpose of contract execution, or to record and evaluate statistics to optimize our offers. The legal basis for the processing of this data is your consent within the meaning of Article 6(1)(a) of the EU GDPR. You can withdraw your consent at any time by notifying us.

15. Online Payment Processing

If you purchase services or products on our website by payment, in addition to the information mentioned in section 14 depending on the products or services in question and the desired payment method, we will need to transmit this information and the fact that you have purchased a product or service from us for the amount and duration concerned to the relevant payment service provider (for example, payment solution providers, credit card issuers, and credit card acquirers). Always consult the information of the company concerned, in particular the data protection policy and the general terms and conditions. The legal basis for this disclosure is the performance of a contract within the meaning of Article 6(1)(b) of the EU GDPR.

To avoid payment problems, the required data, in particular your personal data, may also be disclosed to a credit agency for the automatic verification of your creditworthiness. In this context, the credit agency can assign you a score. This is an estimate of the future risk of payment default, expressed, for example, as a percentage. The score is determined using mathematical and statistical methods and includes credit agency data from other sources. We reserve the right, depending on the information received, not to offer you the "invoice" payment method. The legal basis for this processing is our legitimate interest in avoiding payment defaults within the meaning of Article 6(1)(f) of the EU GDPR.