Data protection

Privacy Policy
As of August 2018

This privacy policy applies to the use of our online services at www.maxchocolatier.com.

1. Responsible person

Max Chocolatier AG
Obergrundstrasse 42, 6003 Lucerne
Telephone: +41 (0)41 418 70 97
E-mail: info@maxchocolatier.com

2. General purposes of processing

We process personal data for the purpose of operating this website.

3. What data we process and why

3.1 Hosting

To ensure the operation of the website, we use hosting services (infrastructure, storage space, maintenance, etc.) in accordance with Art. 6 para. 1 sentence 1 f) GDPR.

3.2 Access data

We automatically collect the following data when you visit our website:

  • Name and URL of the retrieved file
  • Date && Time
  • Data volume
  • HTTP response code
  • Browser type/version
  • operating system
  • Referrer URL
  • Visited pages
  • IP address

Use in accordance with Art. 6 para. 1 sentence 1 f) GDPR for the optimization and security of the website.

3.3 Cookies

We use:

  • Session cookies (delete themselves after closing the browser)
  • Persistent Cookies (lifespan: 1 month – 10 years)

Purpose: To improve user-friendliness.
You can restrict cookies via your browser settings.

3.4 Data for contract fulfillment

Data collected: Name, address, email, order and payment information.
Legal basis: Art. 6 para. 1 sentence 1 b) GDPR.

3.5 User account

We collect your registration data when you create your account.
Deletion is possible at any time.
Legal basis: Art. 6 para. 1 sentence 1 a) GDPR.

3.6 Newsletter

Only with consent. Revocation possible at any time.
Legal basis: Art. 6 para. 1 sentence 1 a) GDPR i.V.m§ 7 para. 2 no. 3 UWG.

3.7 Making contact

Processing of your data for the purpose of handling your request.
Legal basis: Art. 6 para. 1 sentence 1 b) or f) GDPR.

4. Google Analytics

Used to analyze user behavior.
Google is certified under the EU-US Privacy Shield.
IP anonymization is enabled.
Opt-out possible via: http://tools.google.com/dlpage/gaoptout?hl=de

5. Storage duration

We only store personal data for as long as legally required or necessary to fulfill the purpose.

6. Your rights

You have the following rights:

  • Right of access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Withdrawal of your consent (Art. 7 para. 3 GDPR)
  • Right to lodge a complaint with the supervisory authority (Art. 77 GDPR)

7. Data security

SSL encryption, technical and organizational measures in accordance with Art. 32 GDPR.

8. Data Sharing

No disclosure to third parties, except for contract fulfillment or legal obligation. No transfer to non-EU countries (except Google Analytics).

9. Data Protection Officer

Max Chocolatier AG
Obergrundstrasse 42, 6003 Lucerne, Switzerland
CHE-114.952.568
Responsible according to GDPR, DSG and VDSG.