Privacy policy

Umami Snack Forster, Rütiweidstrasse 3, 6033 Buchrain is the operator of the umamisnack.ch website and the services offered on it and is therefore responsible for the collection, processing and use of your personal data and for ensuring that the data processing complies with the applicable data protection laws.

Your trust is important to us, which is why we take the issue of data protection seriously and ensure appropriate security. It goes without saying that we comply with the legal provisions of the Federal Data Protection Act (FADP), the Ordinance to the Federal Data Protection Act (FADP), the Telecommunications Act (TCA) and any other applicable data protection provisions of Swiss or EU law, in particular the General Data Protection Regulation (GDPR).

To help you understand what personal data we collect from you and for what purposes we use it, please read the information below.

1. calling up our website

When you visit our website, our servers temporarily store each access in a log file. The following technical data is collected without your intervention, as is the case with every connection to a web server, and stored by us until automatic deletion after 3 months at the latest:

  • the IP address of the requesting computer,
  • the name of the owner of the IP address range (usually your Internet access provider),
  • the date and time of access,
  • the website from which the access was made (referrer URL), if applicable with the search word used,
  • the name and URL of the retrieved file,
  • the status code (e.g. error message),
  • the operating system of your computer,
  • the browser you use (type, version and language),
  • the transmission protocol used (e.g. HTTP/1.1) and
  • if applicable, your user name from a registration/authentication

The collection and processing of this data is carried out for the purpose of enabling the use of our website (connection establishment), to ensure system security and stability on a permanent basis and to enable the optimisation of our Internet offering as well as for internal statistical purposes. This is our legitimate interest in data processing within the meaning of Art. 6 para. 1 lit. f GDPR.

2. opening of a customer account

To place orders in the online shop, you can order as a guest or open a customer account. When registering for a customer account, we collect the following data:

  • First and last name
  • Postal address
  • E-mail address
  • Phone number
  • Password

The data is collected for the purpose of providing the customer with password-protected direct access to his basic data stored with us. The customer can view his completed and open orders or manage or change his personal data.

The legal basis of the processing of the data for this purpose lies in the consent given by you in accordance with Art. 6 para. 1 lit. a EU GDPR.

3. purchase in the online shop

If you would like to place an order in our online shop, we require the following data for the processing of the contract:

  • First and last name
  • Billing address (and if different, delivery address)
  • Information within the framework of the payment (depending on the selected payment method)
  • Login data, i.e. e-mail address and password (for registered customers)

Unless otherwise stated in this privacy policy or you have given your consent, we will only use the aforementioned data to process the contract, namely to process your orders, to deliver the ordered products and to ensure correct payment.

The legal basis of data processing for this purpose is the fulfilment of a contract according to Art. 6 para. 1 lit. b EU GDPR.

4. disclosure of data to third parties

We only pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship.

Furthermore, we pass on your data to third parties as far as this is necessary in the context of the use of the website and the processing of contracts (also outside the website), namely the processing of your bookings. This includes the respective transport service provider who has been entrusted with the shipment of ordered goods. A service provider to whom the personal data collected via the website is passed on or who has or may have access to it is our web host hosttech GmbH, Seestrasse 15a, 8805 Richterswil. The website is hosted on servers in Switzerland. The data is passed on for the purpose of providing and maintaining the functionalities of our website. This is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR.

Finally, if you pay by credit card on the website, we will forward your credit card information to your credit card issuer and to the credit card acquirer. If you choose to pay by credit card, you will be asked to enter all mandatory information. The legal basis for the transfer of data is the fulfilment of a contract according to Art. 6 para. 1 lit. b EU GDPR. Regarding the processing of your credit card information by these third parties, we ask you to also read the terms and conditions as well as the privacy policy of your credit card issuer.

5. transmission of data abroad

We may also transfer your personal data to third party companies (contracted service providers) abroad for the purposes of the data processing described in this privacy policy. These are obligated to the same extent as we ourselves to the data protection. If the level of data protection in a country does not correspond to that in Switzerland or the EU, we ensure by contract that the protection of your personal data corresponds to that in Switzerland or the EU at all times.

6. cookies

Cookies help in many ways to make your visit to our website easier, more enjoyable and more meaningful. Cookies are information files that your web browser automatically stores on your computer’s hard drive when you visit our website.

We use cookies, for example, to offer you the shopping cart function across several pages and to temporarily store your entries when you fill out a form on the website so that you do not have to repeat the entry when you call up another sub-page. Cookies may also be used to identify you as a registered user after you have registered on the site, without requiring you to log in again when you visit another sub-page.

Most Internet browsers automatically accept cookies. However, you can configure your browser in such a way that no cookies are stored on your computer or that a message always appears when you receive a new cookie. On the following pages you will find explanations on how to configure the processing of cookies in the most common browsers:

Disabling cookies may prevent you from using all the features of our website.

7. tracking tools

a. General

For the purpose of demand-oriented design and continuous optimization of our website, we use the web analysis service of Google Analytics. In this context, pseudonymised usage profiles are created and small text files stored on your computer (“cookies”) are used. The information generated by the cookie about your use of this website is transmitted to the servers of the providers of these services, stored there and processed for us. In addition to the information provided under para. 1, we may receive the following information:

  • Navigation path that a visitor takes on the site,
  • Dwell time on the website or subpage,
  • the subpage on which the website is left,
  • the country, region or city from which access is made,
  • terminal device (type, version, colour depth, resolution, width and height of the browser window) and
  • Returning or new visitor.

The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services associated with the use of the website and the Internet for the purposes of market research and the design of this website in line with requirements. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf.

b. Google Analytics

The provider of Google Analytics is Google Inc, a company of the holding company Alphabet Inc, based in the USA. Before the data is transmitted to the provider, the IP address is shortened by activating IP anonymization (“anonymizeIP”) on this website within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area. The anonymised IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these cases, we ensure through contractual guarantees that Google Inc. maintains a sufficient level of data protection. According to Google Inc., in no case will the IP address be associated with other data concerning the user.

For more information about the web analytics service used, please visit the Google Analytics website. Instructions on how to prevent the processing of your data by the web analytics service can be found at http://tools.google.com/dlpage/gaoptout?hl=de.

8. note on data transfers to the USA

For the sake of completeness, we would like to point out for users resident or domiciled in Switzerland that there are surveillance measures in place in the USA by US authorities which generally allow the storage of all personal data of all persons whose data has been transferred from Switzerland to the USA. This is done without any differentiation, limitation or exception on the basis of the objective pursued and without any objective criterion allowing to limit the access of the US authorities to the data and their subsequent use to very specific and strictly limited purposes which are capable of justifying the interference linked both to the access to these data and to their use. Furthermore, we would like to point out that in the USA there are no legal remedies available to data subjects from Switzerland that would allow them to gain access to the data concerning them and to obtain their correction or deletion, or that there is no effective judicial legal protection against general access rights of US authorities. We explicitly draw the attention of the data subject to this legal and factual situation so that he or she can make an appropriately informed decision to consent to the use of his or her data.

We would like to point out to users residing in a member state of the EU that the USA does not have an adequate level of data protection from the point of view of the European Union – among other things due to the issues mentioned in this section. Where we have explained in this Privacy Policy that recipients of data (such as Google) are based in the USA, we will ensure that your data is protected to an appropriate level with our partners, either through contractual arrangements with these companies or by ensuring that these companies are certified under the EU or Swiss-US Privacy Shield.

9. right of access, rectification, erasure and restriction of processing; right to data portability

You have the right to request information about the personal data that we have stored about you. In addition, you have the right to correct incorrect data and the right to have your personal data deleted, provided that this does not conflict with a legal obligation to retain the data or with a statutory provision allowing us to process the data.

You also have the right to demand that we return the data you have given us (right to data portability). Upon request, we will also share the data with a third party of your choice. You have the right to receive the data in a common file format.

You can contact us for the aforementioned purposes via the e-mail address [email protected]. We may, at our discretion, require proof of identity to process your application.

10. data security

We use appropriate technical and organisational security measures to protect your personal data stored with us against manipulation, partial or complete loss and against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

You should always keep your access data confidential and close the browser window when you have finished communicating with us, especially if you share the computer with others.

We also take internal data protection very seriously. Our employees and the service companies commissioned by us have been obligated by us to maintain confidentiality and to comply with the provisions of data protection law.

11. retention of data

We store personal data only as long as it is necessary to use the tracking and analysis services mentioned above as well as further processing within the scope of our legitimate interest. Contractual data is kept by us for a longer period of time, as this is required by legal retention obligations. Obligations to retain data, which oblige us to retain data, result from accounting regulations and from tax law regulations. According to these regulations, business communications, concluded contracts and accounting vouchers must be kept for up to 10 years. As far as we do not need these data any longer for the execution of the services for you, the data are blocked. This means that the data may then only be used for accounting and tax purposes.

12. right to complain to a data protection supervisory authority

You have the right to complain to a data protection supervisory authority at any time.

Status: 04.02.2020