01 Controller

The person responsible within the meaning of the Swiss Data Protection Act (revDSG) and the EU General Data Protection Regulation (GDPR) is Thomas Edlinger.

02 Data Processing Principles

We process personal data only where necessary for the performance of a contract, compliance with a legal obligation, or on the basis of consent. We collect only the data required for the respective purpose (data minimisation) and do not store it longer than necessary.

Personal data is not sold and is only shared with third parties in the cases described below.

03 Legal Bases

This website is addressed to users worldwide. The following legal frameworks apply:

Processing is based on the following legal grounds:

• Contract performance — processing to fulfil orders and pre-orders (Art. 6(1)(b) GDPR / Art. 31 revDSG)
• Consent — e.g. for analytics cookies and email marketing (Art. 6(1)(a) GDPR)
• Legitimate interests — e.g. security, fraud prevention, system stability (Art. 6(1)(f) GDPR)
• Legal obligation — e.g. statutory retention requirements (Art. 6(1)(c) GDPR)

04 Hosting

On each visit, server log files are automatically stored containing the following data:

• IP address of the requesting device (anonymised)
• Date and time of access
• Name and URL of the requested file
• Browser type and operating system
• HTTP status code

This data is processed solely to ensure technical operation and defend against attacks, and is deleted after 30 days at the latest. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

05 Cookies

Our website uses cookies — small text files stored in your browser. We operate a cookie banner through which you can grant differentiated consent and withdraw it at any time.

06 Contact

When you contact us by email, your details (name, email address, message content) are stored to process your enquiry. This data is not shared with third parties without your consent and is deleted after the matter is resolved, unless statutory retention obligations apply.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

07 WooCommerce & Customer Data

Our shop is based on WooCommerce, a plugin by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. WooCommerce processes the following data for contract performance:

• Email address (for orders and order confirmations)
• Name and billing address (for full orders)
• Order information and product data
• Payment status (no full payment card data)

This data is processed on our Hostinger server. WooCommerce as software does not transfer customer data to Automattic servers — processing takes place exclusively on our server.

Customer data is stored for the duration of the business relationship and the statutory retention periods. Legal basis: Art. 6(1)(b) and (c) GDPR.

08 Newsletter & Mail Mint

We offer the option to sign up for our VIP list and product updates. We use Mail Mint (WPFunnels), a WordPress plugin that stores data exclusively in our database on our Hostinger server. No data is shared with external email service providers.

Legal basis: consent (Art. 6(1)(a) GDPR). Consent may be withdrawn at any time with effect for the future.

09 YouTube Videos

This website may embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Videos are embedded in extended privacy mode (youtube-nocookie.com) so that YouTube sets no cookies until the video is played.

Legal basis: consent (Art. 6(1)(a) GDPR). Google/YouTube privacy policy: policies.google.com/privacy

10 Payment Processing

Payments are processed by external payment service providers. The data required for payment processing is transmitted directly to the respective provider and processed there. We do not store full card details. Legal basis: Art. 6(1)(b) GDPR (contract performance).

11 Your Rights

You have the following rights regarding your personal data:

• Access — You may request information about the data we hold about you at any time.
• Rectification — You may request correction of inaccurate data.
• Erasure — You may request deletion of your data where no statutory retention obligations apply.
• Restriction — You may request restriction of processing.
• Portability — You have the right to receive your data in a structured, machine-readable format.
• Objection — You may object to processing based on legitimate interests.
• Withdrawal — Consents may be withdrawn at any time with effect for the future.

To exercise your rights, contact: info@cocktailcrafter.ch

12 Data Security

We employ technical and organisational measures to protect your data against unauthorised access, loss or manipulation. Data transmission between your browser and our servers is encrypted via HTTPS (SSL/TLS).

Despite all protective measures, we cannot guarantee absolute security for data transmitted over the internet.

13 Changes

We reserve the right to update this Privacy Policy at any time to reflect changes in legal requirements or our services. The current version is available on this page. Registered users will be notified by email of material changes.