Privacy policy

1) Introduction and Contact Information of the Responsible Party

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how we handle your personal data when using our website. Personal data means all data that can be used to personally identify you.

1.2 The responsible party for data processing on this website within the meaning of the Swiss Data Protection Act (DSG) is Kaffeemacher AG, Güterstrasse 140, 4053 Basel, Switzerland, Tel.: 0041 61 413 72 84, E-Mail: kontakt@kaffeemacher.ch. The responsible party for the processing of personal data is the natural or legal person who decides alone or jointly with others on the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website purely for information purposes, i.e., if you do not register or transmit information to us in any other way, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically required for us to display the website to you:

  • The website visited by us
  • Date and time of access
  • Amount of data sent in bytes
  • Source/reference from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymized form)

The data is not passed on or otherwise used. However, we reserve the right to review the server log files retrospectively if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://“ and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

Shopify

We use the system of the following provider for hosting our website and displaying page content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc.

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the Swiss Federal Data Protection and Information Commissioner (FDPIC), which are intended to ensure compliance with Swiss data protection standards.

4) Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of your browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information to varying degrees, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a preset duration, which may vary depending on the cookie.

Some cookies serve to simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website).

We may work with advertising partners who help us make our internet offering more interesting for you. For this purpose, cookies from partner companies may also be stored on your hard drive when you visit our website (third-party cookies). If we work with the aforementioned advertising partners, we will inform you individually and separately about the use of such cookies and the scope of information collected in the sections below.

Please note that you can set your browser so that you are informed when cookies are set and can decide individually on their acceptance, or you can exclude the acceptance of cookies in certain cases or generally. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find this for the respective browsers under the following links:

Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/temporäres-zulassen-von-cookies-und-website-daten-in-microsoft-edge-597f04f2-c0ce-f08c-7c2b-541086362bd2
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

When you contact us (e.g., via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form is apparent from the respective contact form. This data is stored and used exclusively for the purpose of answering your inquiry or for contacting you and the associated technical administration. Your data will be deleted after your request has been processed. This is the case when it can be inferred from the circumstances that the matter in question has been resolved and provided that there are no legal retention obligations.

6) Data Processing When Opening a Customer Account and for Contract Execution

Personal data is collected and processed when you provide it to us to perform a contract or when you open a customer account. Which data is collected is apparent from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to our address. We store and use the data you provide for contract execution. After deletion of your customer account, your data will be blocked in view of tax and commercial retention periods and deleted after the expiration of these periods, unless we can demonstrate a legitimate interest for further processing within the meaning of Art. 31 para. 2 DSG or a legal justification.

7) Comment Function

In connection with the comment function on this website, in addition to your comment, information about the time the comment was created and the commenter name you chose are stored and published on the website. Furthermore, your IP address is recorded and stored. This storage of the IP address is for security reasons and in the event that the affected person violates the rights of third parties or posts unlawful content through a comment. We need your email address to contact you in case a third party objects to your published content as unlawful. We reserve the right to delete comments if they are objected to as unlawful by third parties.

8) Use of Your Data for Direct Marketing

8.1 Registration for Our Email Newsletter

By providing your personal data, you agree that we may use this data to send you newsletters.

We store the IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration to enable us to trace any possible misuse of your email address at a later date. The data we collect when you register for the newsletter is used exclusively for advertising purposes via the newsletter. You can unsubscribe from the newsletter at any time using the provided link in the newsletter or by sending a message to us. After you unsubscribe, your email address will be immediately deleted from our newsletter distribution list, unless we can demonstrate a legitimate interest for further processing within the meaning of Art. 31 para. 2 DSG or a legal justification.

8.2 MailChimp

Our email newsletters are sent via the following provider: The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provide when registering for the newsletter to this provider so that it can handle the newsletter distribution on our behalf.

Subject to your express consent, the provider carries out a statistical evaluation of the success of newsletter campaigns using web beacons or counting pixels in the sent emails, which can measure open rates and specific interactions with the newsletter content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data stocks.

You can revoke your consent to newsletter tracking at any time with future effect.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the Swiss Federal Data Protection and Information Commissioner (FDPIC), which are intended to ensure compliance with Swiss data protection standards.

9) Data Processing for Order Execution

9.1 The personal data we collect is passed on to the shipping company responsible for delivery as part of contract execution, to the extent this is necessary for delivery of the goods. We pass on your payment data to the commissioned credit institution as part of payment processing, provided this is necessary for payment processing. If payment service providers are used, we will inform you of this explicitly below.

9.2 To fulfill our contractual obligations to our customers, we work with external shipping partners. We pass on your name and delivery address exclusively to a shipping partner selected by us for the purpose of delivering the goods.

9.3 Passing on Personal Data to Shipping Service Providers

- Post CH
If the goods are delivered by the shipping service provider Post CH (Schweizerische Post AG, Switzerland, Wankdorfallee 4, 3030 Bern), we pass on your email address to Post CH before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent for this in the ordering process. Otherwise, we only pass on the recipient's name and delivery address to Post CH for the purpose of delivery. The data is passed on only to the extent necessary for delivery of the goods. In this case, prior coordination of the delivery date with Post CH or transmission of delivery status information is not possible.
Consent can be revoked at any time with future effect by the responsible party named above or by the shipping service provider Post CH.

9.4 Use of Payment Service Providers (Payment Services)

- Google Pay

If you choose the payment method "Google Pay" from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment processing is handled via the "Google Pay" application on your mobile device running at least Android 4.4 ("KitKat") and equipped with an NFC function by charging a payment card stored in Google Pay or a verified payment system there (e.g., PayPal). To release a payment via Google Pay in excess of €25 requires prior unlocking of your mobile device using the verification measure set up (such as facial recognition, password, fingerprint, or pattern).

For the purpose of payment processing, the information you provide in the ordering process along with information about your order are passed on to Google. Google then transmits your payment information stored in Google Pay in the form of a transaction number assigned only once to the originating website, with which a completed payment is verified. This transaction number contains no information about the actual payment data of your payment method stored in Google Pay, but is created and transmitted as a unique numeric token. In all transactions via Google Pay, Google acts only as an intermediary for processing the payment. The transaction is executed exclusively in the relationship between the user and the originating website by charging the payment method stored in Google Pay.

To the extent personal data is processed in the described transmissions, processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.

Google reserves the right to collect, store, and evaluate certain transaction-specific information with each transaction made via Google Pay. This includes the date, time, and amount of the transaction, merchant location and description, a description of the purchased goods or services provided by the merchant, photos you attached to the transaction, the name and email address of the seller and buyer or the sender and recipient, the payment method used, your description of the reason for the transaction, and where applicable, any offer associated with the transaction.

According to Google, this processing is carried out exclusively in accordance with Art. 6 para. 1 lit. f GDPR based on Google's legitimate interest in proper accounting, verification of transaction data, and optimization and maintenance of the Google Pay service.

Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when using other Google services.

The Google Pay terms of use can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Weitere For information on data protection with Google Pay, please visit the following internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- PayPal
If you pay via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "Purchase on Account" or "Installment Payment" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of payment processing. The data is passed on only to the extent necessary for payment processing.
PayPal reserves the right to conduct a creditworthiness check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "Purchase on Account" or "Installment Payment" via PayPal. For this purpose, your payment data may be passed on to credit information agencies based on PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the creditworthiness check regarding the statistical probability of payment default for the purpose of deciding whether to provide the respective payment method. The creditworthiness check may contain probability values (so-called score values). To the extent score values are included in the result of the creditworthiness check, these are based on a scientifically recognized mathematical-statistical method. The calculation of score values includes, among other things, but not exclusively, address data. For further data protection information, including on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Sie You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may continue to be entitled to process your personal data if this is necessary for contractual payment processing.
- PayPal Checkout

This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local payment methods from third-party providers.

If you pay via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "Pay Later" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of payment processing. The data is passed on in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to conduct a creditworthiness check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "Pay Later" via PayPal. For this purpose, your payment data may be passed on to credit information agencies in accordance with Art. 6 para. 1 lit. f GDPR based on PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the creditworthiness check regarding the statistical probability of payment default for the purpose of deciding whether to provide the respective payment method. The creditworthiness check may contain probability values (so-called score values). To the extent score values are included in the result of the creditworthiness check, these are based on a scientifically recognized mathematical-statistical method. The calculation of score values includes, among other things, but not exclusively, address data. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may continue to be entitled to process your personal data if this is necessary for contractual payment processing.

When selecting the PayPal payment method "Invoice Purchase," your payment data is first transmitted to PayPal for payment preparation, after which PayPal forwards this to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") for payment processing. The legal basis is Art. 6 para. 1 lit. b GDPR in each case. In this case, RatePay conducts an identity and creditworthiness check in its own name to determine creditworthiness according to the principle already mentioned above and passes on your payment data to credit information agencies based on its legitimate interest in determining creditworthiness in accordance with Art. 6 para. 1 lit. f GDPR. A list of the credit agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/

When using a local third-party payment method, your payment data is first passed on to PayPal in accordance with Art. 6 para. 1 lit. b GDPR for payment preparation. Depending on your selection of an available local payment method, PayPal then transmits your payment data to the corresponding provider in accordance with Art. 6 para. 1 lit. b GDPR for payment processing:
- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznan, Poland)
For further data protection information, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
- Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

If you select a payment method from the provider in which you pay in advance (such as credit card payment), your payment data provided in the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order are passed on to this provider in accordance with Art. 6 para. 1 lit. b GDPR. The transmission of your data is carried out exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
- Six Payment
If you choose a payment method from the payment service provider Six Payment, payment processing is handled by the payment service provider Six Payment Services AG (Hardturmstrasse 201, CH-8021 Zurich, hereinafter "Six Payment"), to which we pass on the information you provide in the ordering process along with information about your order (name, address, account number, bank code, any credit card number, invoice amount, currency, and transaction number). Your data is passed on exclusively for the purpose of payment processing with the payment service provider Six Payment and only to the extent necessary for this purpose.
- TWINT
If you choose a payment method from the payment service provider "TWINT," payment processing is handled by the payment service provider TWINT AG (Stauffacherstrasse 31, CH-8004 Zurich, hereinafter "TWINT"), to which we pass on the information you provide in the ordering process along with information about your order (name, address, account number, bank code, any credit card number, invoice amount, currency, and transaction number). Your data is passed on exclusively for the purpose of payment processing with the payment service provider TWINT and only to the extent necessary for this purpose.

10) Contact Regarding Review Reminders

Loox

For review reminders, we use the services of the following provider: Loox Online Ltd., Rehov Har Sinai 2, 6581602 Tel Aviv-Yafo, Israel

Exclusively on the basis of your express consent, we transmit your email address and any additional customer data to the provider so that it can contact you with a review reminder by email.

You can revoke your consent at any time with future effect against us or the provider.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

11) Use of Social Media: Videos

Use of YouTube Videos

This website uses the YouTube embedding function to display and play videos from the provider "YouTube," which is part of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

The extended privacy mode is used, which, according to the provider, only initiates the storage of user information when the video(s) are played. When playback of embedded YouTube videos begins, the "YouTube" provider uses cookies to collect information about user behavior. According to "YouTube" notices, these serve, among other things, to capture video statistics, improve user-friendliness, and prevent abusive behavior. If you are logged into Google, your data is directly assigned to your account when you click on a video. If you do not wish for your data to be assigned to your YouTube profile, you must log out before activating the button. Google stores your data (even for users not logged in) as user profiles and evaluates them. You have a right to object to the creation of these user profiles; to exercise this right, you must contact YouTube. In the course of using YouTube, personal data may also be transmitted to Google LLC servers in the USA.
Regardless of playback of the embedded videos, each time you visit this website, a connection to the Google network is established, which can trigger further data processing operations beyond our control.

For more information on data protection at "YouTube," see the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy

For the transmission of data to the USA, the provider relies on standard contractual clauses of the Swiss Federal Data Protection and Information Commissioner (FDPIC), which are intended to ensure compliance with Swiss data protection standards.

12) Tools and Other Matters

12.1 - bexio

For accounting purposes, we use the service of the cloud-based accounting software from the following provider: bexio AG, Alte Jonastrasse 24, 8640 Rapperswil-Jona, Switzerland

The provider processes incoming and outgoing invoices as well as, if applicable, the bank movements of our company in order to automatically capture invoices, match them to transactions, and create the financial accounting from this in a semi-automated process.

To the extent personal data is processed, processing is carried out based on our legitimate interest in efficient organization and documentation of our business activities.

12.2 Google Maps

On our website, we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service for displaying interactive (land) maps to visually represent geographic information. By using this service, our location is shown to you and any trip is made easier.

When you access the subpages where the Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this can also result in transmission to Google LLC servers in the USA. This occurs regardless of whether Google provides a user account that you are logged into or whether no user account exists. If you are logged into Google, your data is directly assigned to your account. If you do not wish for your data to be assigned to your Google profile, you must log out before activating the button. Google stores your data (even for users not logged in) as user profiles and evaluates them. You have a right to object to the creation of these user profiles; to exercise this right, you must contact Google.

If you do not agree with the future transmission of your data to Google in connection with the use of Google Maps, you also have the option of completely disabling the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus the map display on this website cannot then be used.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the Swiss Federal Data Protection and Information Commissioner (FDPIC), which are intended to ensure compliance with Swiss data protection standards.

You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html
Ausführliche For information on data protection in connection with the use of Google Maps, please visit Google's website ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/

12.3 Applications for Job Postings via Email

On our website, we post currently vacant positions in a separate section, to which interested persons can apply by email to the contact address provided.

Participation in the application process requires that applicants provide us with all personal data necessary for a thorough and informed evaluation and selection together with the application via email.
Required information includes general information about the person (name, address, a telephone or electronic contact option) as well as performance-specific evidence of the qualifications required for a position. Where applicable, health-related information may also be required, which in the interest of social protection of the applicant must receive special labor and social law consideration.

Which components an application must contain in individual cases for it to be considered and in what form these components must be transmitted by email can be found in the respective job posting.

Upon receipt of the application sent using the specified mail contact address, we store the applicant data and evaluate it exclusively for the purpose of processing the application. For any follow-up questions that arise during processing, we use either the email address provided by the applicant with his application or a given telephone number at our discretion.

The legal basis for these processing activities is the progression of the application process as a pre-contractual employment arrangement.

To the extent special categories of personal data (e.g., health data such as information about severe disability status) are requested from applicants during the application process, processing is carried out so that we can exercise rights arising from employment law and the law of social security and social protection and fulfill our obligations in this regard.

Cumulatively or alternatively, the processing of special data categories may also be carried out for purposes of health prevention or occupational medicine, for assessing the applicant's ability to work, for medical diagnosis, care or treatment in the health or social sector, or for the administration of systems and services in the health or social sector.

If the applicant is not selected in the course of the evaluation described above, or if an applicant withdraws his application prematurely, his data transmitted by email and all electronic correspondence including the original application email will be deleted after appropriate notification, no later than 6 months later. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and potentially fulfilling our proof obligations arising from regulations on equal treatment of applicants.

In the event of a successful application, the data provided will be further processed for the purposes of executing the employment relationship.

13) Rights of the Data Subject

The applicable data protection law grants you the following rights regarding the processing of your personal data in relation to the responsible party (rights of access and intervention), whereby reference is made to the legal basis stated for the respective conditions of exercise:

  • Right to information in accordance with Art. 25 DSG
  • Right to data release or transfer in accordance with Art. 28 DSG
  • Right to correction in accordance with Art. 32 para. 1 DSG

14) Duration of Retention of Personal Data

The duration of retention of personal data is determined by the respective legal basis, the purpose of processing, and – where applicable – additionally by the respective statutory retention period (e.g., obligation to retain under commercial law).

In the case of processing personal data based on express consent, the affected data will be retained until you revoke your consent.

If statutory retention periods exist for data, such data will be retained for the period provided by law.

Otherwise, personal data will be processed for as long as you do not expressly prohibit processing, unless we can demonstrate a legitimate interest for further processing within the meaning of Art. 31 para. 2 DSG or a legal justification.