Privacy policy

We, Oro de Cacao AG, take the protection of your personal data very seriously and adhere strictly to the rules of data protection laws. Personal data is only collected on this website to the extent technically necessary.

The following declaration gives you an overview of how we guarantee this protection and what kind of data is collected for what purpose.

The website www.orodecacao.com is operated with a valid SSL certificate. Thanks to SSL certificates, the confidentiality of online traffic is maintained despite the public nature of the Internet and connections to the website www.orodecacao.com are encrypted via HTTPS.

The responsible party within the meaning of the data protection laws is:

Oro de Cacao AG
Schwerzistrasse 34
8807 Freienbach
info@orodecacao.com

1. General information
Based on Art. 13 of the Swiss Federal Constitution and the data protection provisions of the Swiss Confederation (Data Protection Act, DPA), every person has the right of protection of his or her privacy and against misuse of his or her personal data. We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations as well as this privacy policy.

In cooperation with our hosting providers, we make every effort to protect the databases as well as possible against unauthorised access, loss, misuse or falsification. We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

By using this website, you consent to the collection, processing and use of data as described below. This website can generally be visited without registration. Data such as pages accessed or the name of the file accessed, date and time are stored on the server for statistical purposes without this data being directly related to your person. Personal data, in particular name, address or e-mail address, are collected on a voluntary basis as far as possible. The data will not be passed on to third parties without your consent.

2 Collection and processing of personal data
Personal data is any information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, acquisition, deletion, storage, modification, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law. We also process personal data in accordance with the following legal bases:

a) Processing of personal data with the consent of the data subject.
b) Processing of personal data for the fulfilment of a contract with the data subject as well as for the implementation of corresponding pre-contractual measures.
c) Processing of personal data for the fulfilment of a legal obligation.
d) Processing of personal data to protect the vital interests of the data subject or another natural person.

We process personal data for the period of time required for the respective purpose or purposes. In the case of longer-term retention obligations due to legal and other obligations to which we are subject, we restrict the processing accordingly. 

3. Purpose of data processing and legal basis
We use the personal data we collect primarily to conclude and process our contracts with our customers and business partners, in particular in connection with the sale of our products to our customers and the purchase of products and services from our suppliers and subcontractors, as well as to comply with our legal obligations at home and abroad.

In addition, we process personal data of you and other persons, to the extent permitted and deemed appropriate, also for the following purposes in which we (and sometimes third parties) have a legitimate interest corresponding to the purpose:

Offering and further developing our offers, services and websites, apps and other platforms on which we are present.

Testing and optimising procedures for needs analysis for the purpose of directly approaching customers as well as collecting personal data from publicly accessible sources for the purpose of customer acquisition.

Advertising and marketing (including the organisation of events), insofar as you have consented to the use of your data. If we send you advertising from us as an existing customer, you can object to this at any time using the contact form at www.orodecacao.com. You can unsubscribe from the newsletter via a link provided for this purpose in the newsletter.

Market and opinion research, media monitoring.

Assertion of legal claims and defence in connection with legal disputes and official proceedings.

Guarantees of our operations, in particular IT, our website, apps and other platforms.

Insofar as you have given us consent to process your personal data for certain purposes (e.g. when registering for newsletters), we process your personal data within the scope of and based on this consent, insofar as we have no other legal basis and we require such a basis. Consent given can be revoked at any time using the contact form on www.orodecacao.com or the corresponding unsubscribe link in the newsletter, but this has no effect on data processing that has already taken place.

4. Cookies / tracking and other technologies in connection with the use of our website.
We typically use "cookies" and similar technologies on our websites to identify your browser or device. A cookie is a small file that is sent to your computer or automatically stored on your computer or mobile device by the web browser you are using when you visit our website. This allows us to recognise you when you return to this website, even if we do not know who you are. In addition to cookies that are only used during a session and deleted after your visit to the website ("session cookies"), cookies can also be used to store user settings and other information for a certain period of time ("permanent cookies"). However, you can set your browser to reject cookies, store them for one session only or otherwise delete them early. Most browsers are preset to accept cookies. We use persistent cookies to remember user preferences (e.g. language, autologin), to help us better understand how you use our offers and content, and to show you offers and advertising tailored to you. If you block cookies, certain functionalities (such as language selection, shopping cart, ordering processes) may no longer work.

We inform readers about current developments as well as seasonal specials via our newsletter. The frequency of the newsletter depends on upcoming topics. In addition to e-mail addresses, names and first names can also be used for personalisation purposes. The newsletter is sent using MailChimp, which also stores the e-mail addresses and other information for sending and analysing the newsletter. MailChimp is obliged to process the personal data of the recipients only in accordance with the instructions of Oro de Cacao AG after the conclusion of the data processing addendum. In order to optimise the newsletter for the recipients, success measurements are carried out after sending and statistics are recorded. These include the analysis of opening rates and links clicked on by readers. Subscribers have the option of cancelling their subscription to the newsletter at any time.

By using our website and agreeing to receive newsletters and other marketing emails, you consent to the use of these techniques. If you do not wish to do so, you must set your browser or e-mail programme accordingly. We sometimes use Squarespace or Google Analytics or similar services on our websites. This is a service provided by third parties who may be located in any country in the world (in the case of Google Analytics, it is Google LLC in the USA, www.google.com), with which we can measure and evaluate the use of the website (on a non-personal basis). Permanent cookies set by the service provider are also used for this purpose. The service provider does not receive any personal data from us (and does not retain any IP addresses), but can track your use of the website, combine this information with data from other websites that you have visited and which are also tracked by the service provider, and use this information for its own purposes (e.g. controlling advertising). If you have registered with the service provider yourself, the service provider also knows you. The service provider is then responsible for processing your personal data in accordance with its data protection regulations. The service provider only informs us how our website is used (no information about you personally).

We also use so-called plug-ins from social networks such as Facebook, YouTube, Twitter, Pinterest, Google+ or Instagram on our website. This is visible to you in each case (typically via corresponding icons). We have configured these elements so that they are deactivated by default. If you activate them (by clicking on them), the operators of the respective social networks can register that you are on our website and can use this information for their purposes. The processing of your personal data is then the responsibility of this operator according to their data protection regulations. We do not receive any information about you from them.

5. Data protection declaration for contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up enquiries. We do not pass on this data without your consent.

6. Duration of the storage of personal data
We process and store your personal data for as long as it is necessary for the fulfilment of our contractual and legal obligations or otherwise the purposes pursued with the processing, i.e. for example for the duration of the entire business relationship (from the initiation, processing to the termination of a contract) as well as beyond that in accordance with the statutory retention and documentation obligations. In this context, it is possible that personal data will be retained for the time during which claims can be asserted against our company and insofar as we are otherwise legally obliged to do so or legitimate business interests require this (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the above-mentioned purposes, it will be deleted or made anonymous as a matter of principle and as far as possible.

7. Rights of the data subject
Within the framework of the applicable data protection law and insofar as provided therein, you have the right to information, correction, deletion, the right to restrict data processing and otherwise to object to our data processing, as well as to the release of certain personal data for the purpose of transfer to another body (so-called data portability). Please note, however, that we reserve the right to enforce the restrictions provided for by law, for example if we are obliged to retain or process certain data, if we have an overriding interest in doing so (insofar as we are entitled to rely on this) or if we need the data to assert claims. If you incur costs, we will inform you in advance. We have already informed you about the possibility of revoking your consent in section 3. Please note that exercising these rights may conflict with contractual agreements and may have consequences such as premature termination of the contract or costs. We will inform you in advance if this is not already contractually regulated.

The exercise of such rights usually requires that you clearly prove your identity (e.g. by a copy of your identity card where your identity is otherwise not clear or cannot be verified). To exercise your rights, you can contact the Data Protection Officer at the address above.

Every data subject also has the right to enforce his or her claims in court or to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

8. Changes
We may amend this privacy policy at any time without prior notice. The current version published on our website will apply. Insofar as the data protection declaration is part of an agreement with you, we will inform you of the change by e-mail or other suitable means in the event of an update.

9 Questions about data protection
If you have any questions about data protection, please send us an e-mail (info@orodecacao.com).

Zurich, 1st of December, 2021.