Privacy Policy

Last updated on: 11.07.2024

We attach great importance to the transparent handling of personal data. This privacy policy provides information about what personal data we collect, for what purpose and to whom we pass it on. To ensure a high level of transparency, this privacy policy is regularly reviewed and updated.

1. which services we use

  • MailChimp for WordPress
  • tawk.to
  • Cloudflare CDN
  • Warenkorbfunktion
  • Sumup
  • Stripe
  • WooCommerce
  • WordPress
  • Cloudflare Turnstile

2. contact information

If you have any questions or concerns about the protection of your data by us, you can contact us at any time by e-mail at email. Responsible for the data processing that takes place via this website is:

Swiss Nature Tea
Bachmannweg 33
8046 Zürich
Schweiz

3. General principles

3.1 What data we collect from you and from whom we receive this data

First and foremost, we process personal data that you transmit to us or that we collect when operating our website. We may also receive personal data about you from third parties. This may include the following categories:

  • Personal master data (name, address, date of birth, etc.);
  • Contact data (cell phone number, e-mail address, etc.);
  • Financial data (e.g. account details);
  • Online identifiers (e.g. cookie identifiers, IP addresses);
  • Location and traffic data;
  • Sound and image recordings;
  • particularly sensitive data (e.g. biometric data or information about your health).

3.2 Under what conditions do we process your data?

We treat your data confidentially and in accordance with the purposes set out in this privacy policy. We pay attention to transparent and proportionate processing.

If, in exceptional cases, we are unable to comply with these principles, data processing may still be lawful because there is a justification. In particular, the following grounds for justification may apply:

  • Your consent;
  • the performance of a contract or pre-contractual measures;
  • our legitimate interests, unless your interests prevail.

3.3 How can you withdraw your consent?

If you have given us your consent to process your personal data for specific purposes, we will process your data within the scope of this consent, unless we have another justification.

You can withdraw your consent at any time by sending an e-mail to the address given in the legal notice. Data processing that has already taken place is not affected by this.

3.4 In which cases can we pass on your data to third parties?

a. Principle

We may need to use the services of third parties or affiliated companies and commission them to process your data (so-called processors). The categories of recipients are as follows:

  • Accounting, fiduciary and auditing company
  • Consulting companies (legal advice, taxes, etc.)
  • IT service provider (web hosting, support, cloud services, website design, etc.)
  • Payment service provider
  • Provider of tracking, conversion and advertising services.

We ensure that these third parties and our affiliated companies comply with the requirements of data protection and treat your personal data confidentially.

We may also be obliged to disclose your personal data to authorities.

b. Visit our social media channels

We may have embedded links to our social media channels on our website. You can see this in each case (typically via corresponding icons). If you click on the icons, you will be redirected to our social media channels.

In this case, the social media providers are informed that you have accessed their platform from our website. The social media providers can use the data collected in this way for their own purposes. We would like to point out that we have no knowledge of the content of the transmitted data or its use by the operators.

c. Transfer abroad

Under certain circumstances, your personal data may be transferred to companies abroad as part of order processing. These companies are obliged to protect data to the same extent as we are. The transfer may take place worldwide.

If the level of data protection does not correspond to that in Switzerland, we will carry out a prior risk assessment and contractually ensure that the same level of protection is guaranteed as in Switzerland (e.g. by means of the new standard contractual clauses of the EU Commission or other legally prescribed measures). If our risk assessment is negative, we will take additional technical measures to protect your data. You can access the EU Commission’s standard contractual clauses at the following link: https://commission.europa.eu/publications/standard-contractual-clauses-controllers-and-processors-eueea_de

3.5 How long do we store your data?

We only store personal data for as long as is necessary to fulfill the individual purposes for which the data was collected.

Data that we store when you visit our website is stored for twelve months. An exception applies to analysis and tracking data, which may be stored for longer.

We store contract data for longer, as we are obliged to do so by law. In particular, we must store business communications, concluded contracts and accounting documents for up to 10 years. If we no longer need such data from you to perform the services, the data will be blocked and we will only use it for accounting and tax purposes.

3.6 How do we protect your data?

We will keep your data secure and take all reasonable measures to protect your data from loss, access, misuse or alteration.

Our contractual partners and employees who have access to your data are obliged to comply with data protection regulations. In some cases, it will be necessary for us to pass on your inquiries to companies affiliated with us. Your data will also be treated confidentially in these cases.

Within our website, we use the SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser.

3.7 What rights do you have?

a. Right to information

You can request information about the data we have stored about you at any time. Please send your request for information together with proof of identity to email.

You also have the right to receive your data in a commonly used file format if we process your data automatically and if:

  • you have given your consent to the processing of this data; or
  • you have disclosed data in connection with the conclusion or processing of a contract.

We may restrict or refuse to provide information or data if this conflicts with our legal obligations, our own legitimate interests, public interests or the interests of a third party.

The processing of your request is subject to the statutory processing period of 30 days. However, we may extend this period due to a high volume of requests, for legal or technical reasons or because we require more detailed information from you. You will be informed of the extension in good time, at least in text form.

b. Deletion and correction

You have the option of requesting the deletion or correction of your data at any time. We may reject the request if statutory provisions oblige us to store the data for a longer period or to store it unchanged or if your request conflicts with a legal permission.

Please note that exercising your rights may conflict with contractual agreements and may have a corresponding impact on the performance of the contract (e.g. premature termination of the contract or cost consequences).

c. Legal process

If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch

3.8 Changes to the privacy policy

We may change this privacy policy at any time. The changes will be published on https://www.swissnaturetea.com, you will not be informed separately.

4. Individual data processing operations

4.1 Providing the website and creating log files

What information do we receive and how do we use it?

When you visit https://www.swissnaturetea.com, certain data is automatically stored on our servers or on servers of services and products that we purchase and/or have installed for the purposes of system administration, for statistical or backup purposes or for tracking purposes. These are

  • the name of your internet service provider
  • Your IP address (under certain circumstances)
  • the version of your browser software
  • the operating system of the computer used to access the URL
  • the date and time of access
  • the website from which you visit the URL
  • the search terms you used to find the URL.

Why are we allowed to process this data?

This data cannot be assigned to a specific person and is not merged with other data sources. The log files are stored in order to guarantee the functionality of the website and to ensure the security of our information technology systems. This is our legitimate interest.

How can you prevent data collection?

The data is only stored for as long as is necessary to achieve the purpose for which it was collected. Accordingly, the data is deleted at the end of each session. The storage of log files is absolutely necessary for the operation of the website; you therefore have no option to object to this.

4.2 MailChimp for WordPress

On our website, we use the “MailChimp for WordPress” plugin to integrate the registration functions for our newsletter and other email communications via MailChimp, a service of The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

If you register for our newsletter using the form provided on our website, the data you enter, such as your e-mail address and any other information, will be transmitted to MailChimp and stored there. This enables us to send you regular updates, offers and other information.

The “MailChimp for WordPress” plugin also supports the integration of certain WordPress functions with MailChimp, such as the collection of statistics on registration activity or the customization of registration forms.

4.3 tawk.to

For direct communication, we offer you the option of contacting us via “tawk.to Chat”. This service is provided by tawk.to inc, 187 East Warm Springs Rd, SB298, Las Vegas, NV, 89119, USA.

If you contact us via tawk.to Chat, your IP address and the content of your message, as well as any other data provided by you, will be transmitted to tawk.to and processed there. We receive this data and use it to respond to your request.

tawk.to uses cookies and other technologies to provide the service and enable communication. Your IP address may also be recorded and stored in the process.

Please note that the use of tawk.to Chat and communication via this service is subject to tawk.to’s privacy policy. We recommend that you read these guidelines before using the service.

4.4 Cloudflare CDN

Our website uses the Content Delivery Network (CDN) service of Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). A CDN helps to deliver content from our website faster by distributing copies of the content to a network of fast loading servers.

When you visit our website, your IP address is transmitted to Cloudflare and cookies may be set in your browser, which are necessary for the optimization and security of the service. Cloudflare uses this data to speed up data traffic between our web server and your end device and to protect our website from attacks.

4.5 Shopping cart function

Our website offers a shopping cart functionality that allows visitors to select products or services and reserve them for purchase. During this process, data about the selected products, quantity and total price may be stored.

To facilitate the purchase process, our website may also store information such as your name, delivery and billing address, e-mail address and other data relevant to the purchase. This data is used to facilitate the purchase process and provide you with a seamless user experience.

The data collected as part of the shopping cart functionality is stored on our servers and is only accessible to authorized persons responsible for managing and processing orders. This data will not be passed on to third parties without your express consent, unless this is required by law or necessary for the execution of the contract, e.g. for the delivery of the ordered products by a third-party provider.

To improve the user experience, our website also uses cookies that make it possible to save the contents of your shopping cart, even if you leave the website and return later. You can delete or block these cookies at any time via your browser settings.

4.6 Sumup

Sumup uses this information to process the payment transaction, to prevent fraud and to improve its services. Sumup may combine this data with other information collected as part of your use of other Sumup services.

For the processing of payment transactions on our website, we offer Sumup as a payment option, a service of SumUp Payments Limited.
If you choose to pay with Sumup , certain transaction data, including details of the product or service purchased and the transaction amount, will be transmitted to Sumup . In addition, Sumup may collect other information, such as your IP address or information about your device.

4.7 Stripe

Stripe uses this information to process the payment transaction, to prevent fraud and to improve its services. Stripe may combine this data with other information collected as part of your use of other Stripe services.

For the processing of payment transactions on our website, we offer Stripe as a payment option, a service of Stripe, Inc. and Stripe Payments Company.
If you choose to pay with Stripe, certain transaction data, including details of the product or service purchased and the transaction amount, will be transmitted to Stripe. In addition, Stripe may collect other information, such as your IP address or information about your device.

4.8 WooCommerce

WooCommerce is an open-source software from Automattic, Inc. located at 60 29th Street #343, San Francisco, CA 94110, USA. WooCommerce is an eCommerce platform that enables us to offer products and services on our website.

We use WooCommerce to manage our online store. This includes product presentation, the ordering process, payment processing and inventory management. In the course of using WooCommerce, personal user data may be collected and processed.

Data collected

  • Order data: Information about the products purchased, order numbers, transaction details and delivery status.
  • Customer data: Personal data such as name, e-mail address, delivery and billing address and telephone number provided during the order process.
  • Payment data: Payment information is securely forwarded to the payment service providers we use. WooCommerce itself does not store complete payment data.
  • Technical data: IP address, browser type and version and other technical information necessary for the functionality and security of the website.

Use of the data

The data collected is used for the following purposes:

  • Order processing and shipping: Processing and shipping of orders.
  • Payment processing: Processing payments and preventing fraud.
  • Customer support: Providing customer service and assistance with questions or problems.

Disclosure of data

Your data will only be shared in the following cases:

  • Service providers: to partners and service providers who support us with order processing and delivery.
  • Legal obligations: If we are legally obliged to do so or to enforce our rights.

4.9 WordPress

Our website is based on the WordPress platform, a content management system developed by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA. WordPress enables us to create, manage and publish content.

When you use our website, which is based on WordPress, various data, including your IP address, date and time of access and information about the browser you are using, may be collected and stored. This data is mainly used for administrative purposes and to ensure the smooth operation of the website.

Some WordPress functions, such as comments or contact forms, may collect additional personal data when you use them.

4.10 Cloudflare Turnstile

Our website uses “Cloudflare Turnstile”, a service provided by Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare Turnstile is a security service that helps us to distinguish human traffic from automated traffic and thus protect our website from misuse.

If you try to access content protected by Cloudflare Turnstile, you will be asked to provide certain information, usually your e-mail address. This data is transmitted to Cloudflare and stored there to enable access to the protected content and to give us an overview of the requests.

When you fill out forms on our website or perform certain actions that require verification, Cloudflare Turnstile may be used to ensure that you are a human and not a bot. Various data, including your IP address and information about your interaction with the Cloudflare Turnstile widget, is transmitted to Cloudflare and processed there.

BrainBox Generatoren

BrainBox Generators is a service provided by BrainBox Solutions GmbH to recognize all data protection-relevant services on a website and, among other things, to help with the creation of the privacy policy. No personal data is collected or processed in the process.