🔐 PRIVACY & COOKIE POLICY
1. General Information
The protection of your personal data is of particular importance to us.
This Privacy & Cookie Policy explains how Beer Shop Ben Ahmed (UID: CHE-195.084.680, VAT: CHE-195.084.680 MWST), operating the online shop under the brand CandySodas, collects, processes, and uses personal data when you access our website or place orders via:
We process personal data in accordance with:
- the Swiss Federal Act on Data Protection (nFADP / DSG 2023)
- and, where applicable, the General Data Protection Regulation (GDPR)
Data processing is limited to what is necessary to operate the website, fulfill orders, ensure security, and improve our services.
2. Data Controller
The controller responsible for data processing is:
Beer Shop Ben Ahmed
UID: CHE-195.084.680
VAT: CHE-195.084.680 MWST
Bahnhofstrasse 44
3400 Burgdorf
Switzerland
Email: info@candysodas.ch
3. Categories of Personal Data
Depending on how you interact with our website, we process the following categories of personal data:
3.1 Data Provided by You
When placing an order, creating an account, or contacting us:
- First and last name
- Billing and shipping address
- Email address
- Telephone number
- Order details (products, quantities, payment status)
- Communication content
This data is required to process orders and provide customer support.
3.2 Automatically Collected Data
When visiting the website:
- IP address
- Browser type and version
- Operating system
- Referrer URL
- Pages visited and interactions
- Date and duration of visit
This data is used to ensure security, stability, and performance.
3.3 WooCommerce / Shop Data
For e-commerce functionality:
- Shopping cart contents (session-based cookies)
- Order history
- Customer account data (if registered)
This processing is essential for enabling purchases and managing customer relationships.
4. Purposes of Processing
We process personal data for the following purposes:
- Order processing and delivery
- Payment handling and fraud prevention
- Customer communication
- Operation and security of the website
- Improvement of user experience
- Marketing and analytics (only where consent is given)
5. Legal Basis (Swiss DSG)
Under Swiss data protection law, personal data may be processed where justified.
In particular, processing is based on:
- Contract performance (e.g. order processing)
- Legal obligations (e.g. accounting retention)
- Legitimate interests (Art. 31 DSG), such as website security and business operations
- Consent, where required (e.g. analytics and marketing cookies)
Where processing is based on consent, it can be withdrawn at any time.
6. Cookies and Tracking Technologies
6.1 General
We use cookies and similar technologies to ensure functionality and improve user experience.
Cookies are small text files stored on your device.
Non-essential cookies are only set after your explicit consent.
6.2 Types of Cookies
Essential Cookies
These cookies are required for the operation of the website and cannot be disabled. They enable:
- shopping cart functionality
- checkout process
- login sessions
- website security
Analytics Cookies (Google Analytics 4)
With your consent, we use Google Analytics 4 to analyze website usage.
- Data is processed in aggregated form
- IP anonymization is enabled where possible
- Data may be transferred to the United States
Purpose: improving usability and performance.
Marketing Cookies (Meta Pixel)
With your consent, we use the Meta Pixel to:
- measure advertising performance
- display personalized advertisements
6.3 Payment-Related Processing
Payments are processed via Stripe Payments Europe Ltd.
Supported methods:
- Credit and debit cards
- Apple Pay
Stripe processes payment data directly and acts as an independent data controller.
We do not store full payment details.
Processed data may include:
- Name
- Billing address
- Payment amount
- Card data (handled by Stripe)
- Device/payment token (Apple Pay)
7. Third-Party Services
We use selected third-party providers:
Payment Processing
Stripe Payments Europe Ltd.
https://stripe.com/privacy
Processes payment-related data independently.
Shipping
Swiss Post
Processes:
- Name
- Delivery address
Analytics and Security
- Google Analytics 4
- Google reCAPTCHA
Marketing
- Meta Pixel (Facebook / Instagram)
These services are only activated where required based on your consent.
8. International Data Transfers
Some providers (in particular Stripe, Google, and Meta) may process personal data outside Switzerland or the European Economic Area, including in the United States.
In such cases, appropriate safeguards are implemented, such as:
- Standard Contractual Clauses (SCCs)
- or other legally recognized mechanisms
Please note that data transfers to countries without an adequate level of data protection may involve certain risks.
9. Cookie Consent
When visiting our website, you can:
- accept all cookies
- reject non-essential cookies
- customize your preferences
You can change or withdraw your consent at any time via the cookie settings available in the website footer.
10. Data Retention
We retain personal data only as long as necessary:
- Order and accounting data: up to 10 years (Swiss legal requirement)
- Other data: deleted or anonymized when no longer needed
11. Data Security
We implement appropriate technical and organizational measures, including:
- SSL/TLS encryption
- restricted access controls
- secure hosting environment
However, no data transmission over the internet can be guaranteed to be completely secure.
12. Your Rights
Under applicable law, you have the right to:
- access your personal data
- request correction of inaccurate data
- request deletion where legally permissible
- object to certain processing
- withdraw consent at any time
Requests can be submitted to:
info@candysodas.ch
13. Contact
For any data protection inquiries:
Beer Shop Ben Ahmed
Bahnhofstrasse 44
3400 Burgdorf
Switzerland
Email: info@candysodas.ch
14. Changes to This Policy
We reserve the right to amend this Privacy & Cookie Policy at any time.
The version published on this website shall apply.
15. Google reCAPTCHA
To protect our website from spam and abuse, we use Google reCAPTCHA (v3).
This service analyzes user behavior to distinguish between humans and automated bots.
This may include processing:
- IP address
- interaction data
- browser information
The use of reCAPTCHA is based on our legitimate interest (Art. 31 DSG) in ensuring the security of our website.
More information:
https://policies.google.com/privacy
https://policies.google.com/terms