Privacy Statement:

Responsible authority in the sense of the data protection laws, in particular the EU data protection basic regulation (DSGVO), is:

ViCAFE Espresso Bars AG

Your rights of data subjects
You can exercise the following rights at any time using the contact details provided by our data protection officer:

Information about your data stored with us and their processing (Art. 15 DSGVO),
Correction of incorrect personal data (Art. 16 DSGVO),
Deletion of your data stored with us (Art. 17 DSGVO),
Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 DSGVO),
Objection to the processing of your data by us (Art. 21 DSGVO) and
Data transferability if you have consented to data processing or have concluded a contract with us (Art. 20 DSGVO).
If you have given us your consent, you can revoke it at any time with effect for the future.

You may at any time file a complaint with a supervisory authority, e.g. the competent supervisory authority of the federal state in which you reside or the authority responsible for us.

You will find a list of the supervisory authorities (for the non-public sector) with their addresses at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Collection of general information when you visit our website
the nature and purpose of the processing:
If you access our website, i.e. if you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like. This is exclusively information that does not allow any conclusions to be drawn about your person.

They are processed in particular for the following purposes:

Ensuring a trouble-free connection to the website,
Ensuring the smooth use of our website,
Evaluation of system safety and stability as well as
for other administrative purposes.
We do not use your data to draw conclusions about your person. Information of this kind is evaluated statistically by us if necessary, in order to optimize our Internet appearance and the technology behind it.

Legal basis:
Processing takes place in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipient:
Recipients of the data may be technical service providers who act as contract processors for the operation and maintenance of our website.

Storage period:
The data is deleted as soon as it is no longer required for the purpose of collection. This is generally the case for the data used to provide the website when the respective session has ended.

Provision prescribed or required:
The provision of the aforementioned personal data is neither required by law nor by contract. Without the IP address, however, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or restricted. For this reason an objection is excluded.

Registration on our website
the nature and purpose of the processing:
When registering for the use of our personalised services, some personal data is collected, such as name, address, contact and communication data (e.g. telephone number and e-mail address). If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time. Of course, we will also provide you with information about the personal data we have stored about you at any time.

Legal basis:
The data entered during registration is processed on the basis of the user’s consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:
Recipients of the data may be technical service providers who act as contract processors for the operation and maintenance of our website.

Storage period:
Data will only be processed in this context as long as the corresponding consent has been given. Afterwards they will be deleted, as long as there are no legal obligations to store them. To contact us in this context, please use the contact data provided at the end of this data protection declaration.

Provision prescribed or required:
The provision of your personal data is voluntary, solely on the basis of your consent. Without the provision of your personal data, the provision of your personal data is voluntary.

Provision of chargeable services
the nature and purpose of the processing:
In order to provide services subject to a charge, we will request additional data, such as payment details, in order to be able to execute your order.

Legal basis:
The processing of the data required for the conclusion of the contract is based on Art. 6 para. 1 lit. b DSGVO.

Recipient:
Recipients of the data may be contract processors.

Storage period:
We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax requirements.

Provision prescribed or required:
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to the content and services we offer.

Comment function
the nature and purpose of the processing:
If users leave comments on our website, the time of their creation and the user name previously chosen by the website visitor are stored in addition to this information. This serves our security, as we can be held responsible for illegal content on our website, even if it has been created by users.

Legal basis:
The processing of data entered as comments is based on a legitimate interest (Art. 6 para. 1 lit. f DSGVO).

By providing the comment function, we would like to enable you to interact in an uncomplicated manner. Your details will be stored for the purpose of processing your enquiry and for possible follow-up questions.

Recipient:
Recipients of the data may be contract processors.

Storage period:
The data are deleted as soon as they are no longer required for the purpose of collection. This is generally the case when communication with the user has been completed and the company can infer from the circumstances that the relevant facts have been conclusively clarified.

Provision prescribed or required:
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our comment function.

Newsletter
the nature and purpose of the processing:
Your data will only be used to send you the subscribed newsletter by e-mail. Your name will be entered in order to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject.

Your e-mail address is sufficient for receiving the newsletter. When you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by e-mail of circumstances relevant to the service or registration (e.g. changes to the newsletter offering or technical circumstances).

For an effective registration we need a valid e-mail address. In order to check that a registration is actually carried out by the owner of an e-mail address, we use the „double opt-in“ procedure. To this end, we log the order of the newsletter, the sending of a confirmation e-mail and the receipt of the reply requested herewith. Further data will not be collected. The data will be used exclusively for the newsletter dispatch and will not be passed on to third parties.

Legal basis:
On the basis of your expressly given consent (Art. 6 para. 1 lit. a DSGVO), we regularly send you our newsletter or comparable information by e-mail to your specified e-mail address.

You can revoke your consent to the storage of your personal data and its use for newsletter dispatch at any time with effect for the future. In every newsletter you will find a corresponding link. You can also unsubscribe directly from this website at any time or inform us of your cancellation via the contact option given at the end of this data protection notice.

Recipient:
Recipients of the data may be contract processors.

Storage period:
The data will only be processed in this context as long as the corresponding consent is available. They will then be deleted.

Provision required or required:
The provision of your personal data is voluntary, solely on the basis of your consent. Unfortunately, we cannot send you our newsletter without your consent.

Contact form
the nature and purpose of the processing:
The data entered by you will be stored for the purpose of individual communication with you. For this purpose it is necessary to provide a valid e-mail address and your name. This is used to assign the query and then answer it.

Legal basis:
The data entered in the contact form are processed on the basis of a legitimate interest (art. 6 par. 1 lit. f DSGVO).

By providing the contact form, we would like to make it easy for you to contact us. Your details will be stored for the purpose of processing your enquiry and for possible follow-up questions.

If you contact us to request an offer, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b DSGVO).

Recipient:
Recipients of the data may be contract processors.

Storage period:
Data will be deleted at the latest 6 months after processing of the request.

If it comes to a contractual relationship, we are subject to the legal retention periods according to HGB and delete your data after the expiration of these periods.

Provision prescribed or necessary:
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.

Use of Google Analytics
the nature and purpose of the processing:
This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: „Google“). Google Analytics uses „cookies“, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, due to the activation of IP anonymisation on these web pages, your IP address will be shortened by Google in advance within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to and truncated by Google on servers in the United States. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. On the basis of the use of the website and the Internet, further associated services are then to be provided.

Legal basis:
The data is processed on the basis of the user’s consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:
The recipient of the data is Google as the processor. For this purpose, we have concluded the corresponding contract with Google.

Storage period:
The data will be deleted as soon as it is no longer required for our recording purposes.

Third Country Transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework. We have also entered into standard privacy clauses with Google for the use of Google Analytics.

Provision required or required:
The provision of your personal data is voluntary, solely on the basis of your consent. If you block access, this may restrict the functionality of the website.

Revocation of consent:
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plugin available under the following link: Browser Add On for deactivating Google Analytics.

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking this link. This will install an opt-out cookie on your device. This will prevent Google Analytics from collecting cookies for this website and browser in the future as long as the cookie remains installed in your browser.

Profiling:
With the help of the tracking tool Google Analytics, the behaviour of visitors to the website can be evaluated and their interests analysed. To do this

Use of script libraries (Google Web Fonts)
the nature and purpose of the processing:
In order to display our content correctly and graphically appealing across browsers, we use „Google Web Fonts“ from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter „Google“) on this website to display fonts.

The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

Legal basis:
The legal basis for the integration of Google Webfonts and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:
Calling script libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible – but currently unclear whether and, if so, for what purposes – for the operator to collect Google data in this case.

Storage duration:
We do not collect any personal data through the integration of Google Web Fonts.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

Third Country Transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision required or required:
The provision of personal data is neither required by law nor by contract. However, without the correct representation of the contents of standard fonts cannot be made possible.

Revocation of consent:
The programming language JavaScript is regularly used to display the contents. You can therefore object to data processing by deactivating the execution of JavaScript in your browser or by installing an integration JavaScript blocker. Please note that this may result in functional restrictions on the website.

Use of Adobe Typekit
the nature and purpose of the processing:
We use Adobe Typekit to visually design our website. Typekit is a service provided by Adobe Systems Software Ireland Companies (4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland; hereinafter „Adobe“) that provides us with access to a font library. To incorporate the fonts we use, your browser must connect to an Adobe server in the United States and download the font required for our website. This will tell Adobe that your IP address has been used to access our website. For more information about Adobe Typekit, please see Adobe’s privacy policy, which can be found at https://www.adobe.com/de/privacy/policy.html

Legal basis:
The legal basis for the integration of Adobe Typekit and the associated data transfer to Adobe is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:
Calling script libraries or font libraries automatically triggers a connection to the library operator. Information on the use of your data by Adobe Typekit Web Fonts can be found at https://typekit.com/ and in the Adobe Typekit Privacy Policy: https://www.adobe.com/de/privacy/policies/typekit.html.

Storage period:
We do not collect personally identifiable information through the use of Adobe Typekit Web Fonts.

Third Country Transfer:
Adobe is certified under the Privacy Shield Agreement, which guarantees compliance with European privacy laws (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active).

Provision required or required:
The provision of personal data is neither required by law nor by contract. However, without the correct representation of the contents of standard fonts, it cannot be made possible.

Use of Google Maps
the nature and purpose of the processing:
On this website we use the offer of Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter „Google“). This enables us to display interactive maps directly on the website and enables you to use the map function conveniently.

For more information about data processing by Google, please refer to the Google Privacy Notice. There you can also change your personal data protection settings in the data protection centre.

Detailed instructions on how to manage your own data in connection with Google products can be found here.

Legal basis:
The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:
When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account that you are logged in to, or whether there is no user account. If you are logged into Google, your information will be directly associated with your account.

If you do not want your data to be assigned to your Google profile, you must log out of Google before activating the button. Google stores your data as user profiles and uses them for advertising, market research and/or for the design of its website to meet your needs. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

Storage period:
We do not collect any personal data through the integration of Google Maps.

Third Country Transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Revocation of consent:
If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you cannot use our website or can only use it to a limited extent.

Provision required or required:
The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

Embedded YouTube videos
the nature and purpose of the processing:
On some of our websites we embed YouTube videos. YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter „YouTube“) is the operator of the corresponding plugins. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This will tell YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can personally associate your browsing behavior with you. You can prevent this by logging out of your YouTube account beforehand.

If a YouTube video is started, the provider uses cookies that collect information about user behavior.

Further information on the purpose and scope of data collection and processing by YouTube can be found in the provider’s privacy policy, where you will also find further information on your rights in this regard and setting options to protect your privacy (https://policies.google.com/privacy). Google processes your data in the USA and is subject to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework

Legal basis:
The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:
Calling YouTube automatically triggers a connection to Google.

Storage period and revocation of consent:
If you have deactivated the storage of cookies for the Google Ad Programme, you will not have to reckon with any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser.

You can find further information on data protection at „YouTube“ in the provider’s data protection declaration at: https://www.google.de/intl/de/policies/privacy/

Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision required or required:
The provision of your personal data is voluntary, solely on the basis of your consent. If you block access, this may restrict the functionality of the website.

Social Plugins
the nature and purpose of the processing:
On our websites social plugins of the providers listed below are used. You can recognize the plugins by the fact that they are marked with the corresponding logo.

These plugins may be used to send information, including personal data, to the service provider and may be used by the service provider. We prevent the unconscious and unintentional collection and transfer of data to the service provider through a 2-click solution. In order to activate a desired social plugin, it must first be activated by clicking on the corresponding button. Only through this activation of the plugin, the collection of information and its practice will also be made possible.

We do not collect any personal data ourselves by means of the social plugins or through their use.

We have no influence on which data an activated plugin collects and how it is used by the provider. At present, it must be assumed that a direct connection to the services of the provider will be established and that at least the IP address and device-related information will be recorded and used. It is also possible for service providers to attempt to store cookies on the computer used. Please refer to the data protection information of the respective service provider to find out which concrete data are collected and how they are used. Note: If you are logged on to Facebook at the same time, Facebook can identify you as a visitor to a specific page.

We have included the social media buttons of the following companies on our website:

Google AdWords
the nature and purpose of the processing:
Our website uses Google Conversion Tracking. The operator of the Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have reached our website via an advertisement placed by Google, Google Adwords places a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google.

If the user visits certain pages on our site and the cookie has not expired, we and Google may recognize that the user clicked on the ad and was directed to that page. Each Google AdWords customer receives a different cookie. As a result, cookies cannot be tracked through AdWords customer websites. The information collected from the Conversion cookie is used to generate conversion statistics for AdWords customers who have opted for Conversion Tracking. Customers will know the total number of users who clicked on their ad and were directed to a page with a conversion tracking tag. However, they will not receive information that personally identifies users.

Legal basis:
The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:
Every time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may pass on this personal data collected via the technical process to third parties.

Our company does not contain any information from Google that could be used to identify the person concerned.

Storage period:
These cookies lose their validity after 30 days and are not used for personal identification.

Third Country Transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Revocation of consent:
If you do not wish to participate in tracking, you can refuse to set a cookie as required for this – for example by setting your browser to generally deactivate the automatic setting of cookies or by setting your browser to block cookies from the „googleleadservices.com“ domain.

Please note that you may not delete the opt-out cookies as long as you do not wish measurement data to be recorded. If you have deleted all your cookies in your browser, you must set the respective opt-out cookie again.

Provision required or required:
The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

Use of Google Remarketing
the nature and purpose of the processing:
This website uses the remarketing function of Google Inc. the company operating the services of Google Remarketing is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter „Google“).

This function is used to present interest-related advertisements to website visitors within the Google advertising network. A „cookie“ is stored in the visitor’s browser, which makes it possible to recognize the visitor when he or she visits websites that are part of Google’s advertising network. On these pages, advertisements can be presented to the visitor which refer to contents which the visitor has previously called up on websites which use the remarketing function of Google.

Legal basis:
Legal basis for the integration of Google Remarketing and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:
Each time you visit our website, personal data is collected

Receiver:
Every time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may share this personally identifiable information with third parties.

Our company does not contain any information from Google that could be used to identify the person concerned.

Revocation of consent:
According to its own information, Google does not collect any personal data during this process. However, if you do not want Google’s remarketing function to work, you can always deactivate it by making the appropriate settings at https://support.google.com/adwordspolicy/answer/143465 . Alternatively, you can deactivate the use of cookies for interest-related advertising via the advertising network initiative by following the instructions under http://www.networkadvertising.org/managing/opt_out.asp.

Provision Required or Mandatory:
The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

Changes to our privacy policy
We reserve the right to adapt this data protection declaration so that it always corresponds to the current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. Your renewed visit will then be subject to the new data protection declaration.

Questions to the data protection officer
If you have any questions about data protection, please send us an e-mail or contact the person responsible for data protection in our organisation directly:

info@vicafe.ch

The data protection declaration was created with the data protection declaration generator of activeMind AG (version 2018-06-22).