Privacy Policy

Version of November 3, 2025

In this privacy policy, we, Max Chocolatier AG, explain below Max Chocolatier, (we or usThis describes how we collect and otherwise process personal data. This is not an exhaustive description; other privacy policies [or terms and conditions, participation agreements, and similar documents] may govern specific situations. Personal data means any information relating to an identified or identifiable natural person.

If you provide us with personal data of other persons (z.B. If you are providing us with personal data (e.g., from family members or colleagues), please ensure that these individuals are aware of this privacy policy and only share their personal data with us if you are authorized to do so and if this personal data is correct.

This privacy policy complies with the requirements of the EU General Data Protection Regulation («GDPR»), the Swiss Data Protection Act («DSG») and the revised Swiss Data Protection Act («revDSG») interpreted. However, whether and to what extent these laws are applicable depends on the individual case.

 

1. Controller/Data Protection Officer/Representative 

Max Chocolatier is responsible for the data processing described here. If you have any data protection concerns, you can contact us at the following address.

Max Chocolatier AG
Obergrundstrasse 42, 6003 Lucerne
Telephone: +41 (0)41 418 70 97
E-mail: info@maxchocolatier.com

2. Collection and processing of personal data 

We primarily process personal data that we receive from our customers and other business partners in the course of our business relationship with them and other persons involved, or that we collect from users when operating our websites, apps and other applications.

3. Purposes of data processing and legal bases 

We process personal data for the purpose of operating this website.

Furthermore, we process personal data from you and other persons, insofar as permitted and deemed appropriate by us, also for the following purposes, in which we (and sometimes third parties) have a legitimate interest corresponding to the purpose:

  • Offering and further development of our products, services, websites, apps and other platforms on which we are present;
  • Communication with third parties and processing their requests (z.B. Applications, media inquiries);
  • Review and optimization of procedures for needs analysis for the purpose of direct customer contact, as well as collection of personal data from publicly accessible sources for the purpose of customer acquisition;
  • Advertising and marketing (including the organization of events), unless you have objected to the use of your data (if we send you advertising as an existing customer, you can object at any time, and we will put you on a blocklist against further advertising mailings);
  • Market and opinion research, media monitoring;
  • Assertion of legal claims and defense in connection with legal disputes and official proceedings;
  • Prevention and investigation of criminal offenses and other misconduct (z.B. Conducting internal investigations and data analysis for fraud prevention);
  • Guarantees of our operations, in particular the IT, our websites, apps and other platforms;

If you have given us your consent to process your personal data for specific purposes (for example, when you subscribe to our newsletter or undergo a background check), we will process your personal data within the scope of and based on this consent, unless we have and require another legal basis. You can withdraw your consent at any time, but this will not affect any data processing that has already taken place.

4. Cookies/Tracking and other technologies related to the use of our website 

We typically use "cookies" and similar technologies on our websites to identify your browser or device. A cookie is a small file that is sent to your computer and automatically stored on your computer or mobile device by your web browser when you visit our website. This allows us to recognize you when you return to the website, even if we don't know who you are. In addition to cookies that are only used during a session and deleted after your visit ("session cookies"), cookies can also be used to store user preferences and other information for a certain period of time (z.B. two years) to store ("persistent cookies"). However, you can configure your browser to reject cookies, only store them for a session, or delete them prematurely. Most browsers are preset to accept cookies. We use persistent cookies to save your user preferences (z.B. language), so that we can better understand how you use our offers and content, and so that we can show you offers and advertising tailored to you (which can also happen on websites of other companies; however, they will not find out who you are from us, if we even know that ourselves, because they only see that the same user who was also on a certain page on our website is on their website).Some of the cookies are set by us, some also by contractual partners with whom we zusammenarbeiten.Wenn If you block cookies, certain functionalities (such as z.B. Language selection, shopping cart, order processes) no longer work.

In our newsletters and other marketing emails, we sometimes include visible and invisible image elements, where permitted. By retrieving these images from our servers, we can determine if and when you opened the email. This allows us to measure and better understand how you use our offers and tailor them to your needs. You can block this in your email program; most are configured to do so by default.

By using our websites and consenting to receive newsletters and other marketing emails, you agree to the use of these technologies. If you do not wish to do so, you must adjust your browser or email program settings accordingly.

We sometimes use Google Analytics or similar services on our websites. This is a service provided by third parties, which may be located in any country in the world (in the case of Google Analytics, it is Google Ireland (based in Ireland), which in turn relies on Google LLC (based in the USA) as a data processor).Google»), www.google.comWe use a service that allows us to measure and analyze website usage (in a non-personally identifiable way). This service also uses persistent cookies set by the service provider. We have configured the service so that Google shortens the IP addresses of visitors in Europe before forwarding them to the USA, thus preventing them from being traced back to us. We have deactivated the "Data Sharing" and "Signals" settings. Although we assume that the information we share with Google is not considered personal data by Google, it is possible that Google could use this data to infer the identity of visitors, create personal profiles, and link this data to their Google accounts. If you have registered with the service provider yourself, the service provider will also know you. The processing of your personal data by the service provider is then the responsibility of the service provider and is governed by its privacy policy. The service provider only informs us how our respective website is used (no information about you personally).

We also use plugins from social networks such as Facebook, TripAdvisor, YouTube, Pinterest, and Instagram on our websites. This is clearly visible to you (typically via corresponding icons). We have configured these elements so that they are deactivated by default. If you activate them (by clicking), the operators of the respective social networks can register that you are on our website and where, and can use this information for their own purposes. The processing of your personal data then takes place under the responsibility of that operator in accordance with their privacy policy. We do not receive any information about you from them.

5. Data sharing and data transfer abroad 

Within the scope of our business activities and for the purposes set out in section 3, we also disclose data to third parties, insofar as this is permitted and appears appropriate to us, either because they process it for us or because they want to use it for their own purposes.This particularly concerns the following areas:

  • Our service providers, including order processors (such as z.B. IT providers);
  • Dealers, suppliers, subcontractors and other business partners;
  • Customers;
  • domestic and foreign authorities, offices or courts;
  • Media;
  • The public, including visitors to websites and social media;
  • Competitors, industry organizations, associations, organizations and other bodies;
  • other parties in potential or actual legal proceedings;

all together Recipient.

Some of these receivers are located domestically, but they can be anywhere on Earth.

If a recipient is located in a country without adequate legal data protection, we contractually obligate the recipient to comply with the applicable data protection regulations (for this purpose we use the revised standard contractual clauses of the European Commission, which are available here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj? (are accessible), unless it is already subject to a legally recognized set of rules for ensuring data protection and we cannot rely on an exception. An exception may apply, in particular, to legal proceedings abroad, but also in cases of overriding public interest or if contract processing requires such disclosure, if you have given your consent, or if it concerns data you have made publicly available and whose processing you have not objected to.


6. Duration of storage of personal data 

We process and store your personal data for as long as it is necessary to fulfill our contractual and legal obligations or otherwise for the purposes pursued with the processing. d.h. This includes, for example, the duration of the entire business relationship (from initiation and processing to termination of a contract) and beyond, in accordance with statutory retention and documentation obligations. It is possible that personal data will be retained for the period during which claims can be asserted against our company and to the extent that we are otherwise legally obligated to do so or legitimate business interests require it.z.B. for evidentiary and documentation purposes). As soon as your personal data is no longer required for the aforementioned purposes, it will generally be deleted or anonymized to the extent possible. For operational data (z.B. For system logs, shorter retention periods of twelve months or less generally apply.

7. Data security 

We take appropriate technical and organizational security measures to protect your personal data from unauthorized access and misuse, such as internal training, IT and network security solutions, and access restrictions.

8. Obligation to provide personal data

As part of our business relationship, you must provide the personal data necessary for establishing and maintaining the business relationship and fulfilling the associated contractual obligations (you are generally not legally obligated to provide us with data). Without this data, we will generally be unable to enter into or perform a contract with you (or the entity or person you represent).The website also cannot be used if certain information to ensure data traffic (such as z.B. IP address) is not disclosed.

9. Profiling and automated decision-making

We process your personal data partly automatically with the aim of evaluating certain personal aspects (profiling). We use profiling in particular to provide you with targeted information and advice about products. For this purpose, we use evaluation tools that enable us to tailor our communication and advertising to your needs, including market and opinion research.

10. Rights of the data subject 

Under applicable data protection law and to the extent provided therein (such as in the case of the GDPR), you have the right to information, rectification, erasure, restriction of processing and other rights. Objection to our data processing, in particular for the purposes of direct marketing, profiling for direct advertising and other legitimate interests in processing as well as the right to request the release of certain personal data for transfer to another entity (so-called data portability). Please note, however, that we reserve the right to assert any legally permissible limitations, for example, if we are obligated to retain or process certain data, have an overriding legitimate interest in doing so (to the extent we are permitted to rely on such an interest), or require the data for the establishment, exercise, or defense of legal claims. If any costs are incurred by you, we will inform you in advance. We have already informed you about the possibility of withdrawing your consent in section 3. Please note that exercising these rights may conflict with contractual agreements and this could have consequences such as... z.B. This may result in early termination of the contract or cost implications. We will inform you in advance if this is the case, unless it is already contractually stipulated.

Exercising such rights usually requires you to clearly prove your identity (z.B. (e.g., a copy of your ID, where your identity is otherwise unclear or cannot be verified). To assert your rights, you can contact us at the address given in section 1.

Furthermore, every affected person has the right to enforce their claims in court or to file a complaint with the competent data protection authority.  The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

11. Changes 

We may amend this privacy policy at any time without prior notice. The current version published on our website applies.