Privacy Policy

Last updated: November 9th, 2025

This Privacy Policy explains how The Coffee Society (“we”, “us”, “our”, or “the Site”) collects, uses, protects, and shares personal data of visitors and customers of thecoffeesociety.ch. We are committed to processing your personal information in a transparent and lawful manner, in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

Data Controller

The controller responsible for the processing of personal data collected on this website is:

Data We Collect

a) Data you provide directly

• First and last name
• Billing and shipping address
• Email address
• Phone number
• Payment information (processed securely by our payment providers)
• Messages or inquiries sent through contact forms or email
• Account details (username and encrypted password) if you create an account

b) Data collected automatically

• IP address and browser type/version
• Operating system, device type, and browser language
• Pages visited, time spent, and referring URLs
• Cookies and similar technologies (see Section 8)

c) Data from third parties

We may also receive data from:

• Payment service providers (e.g., Stripe, PayPal)
• Analytics and marketing tools (e.g., Google Analytics, Meta Pixel)
• Email marketing platforms (e.g., Mailchimp)

Purposes of Processing

We process your personal data for the following purposes:

• To manage and fulfill your orders
• To create and manage your customer account
• To communicate with you (customer support, inquiries)
• To send marketing communications and newsletters (with your consent)
• To improve our website and user experience
• To comply with legal and accounting obligations
• To prevent fraud and enhance site security

Legal Basis for Processing

We process your data based on the following legal grounds:

• Contract performance (for orders and account management)
• Consent (for newsletters and non-essential cookies)
• Legitimate interests (to improve the website and prevent fraud)
• Legal obligations (for tax and accounting compliance)

Data Recipients

We may share your data with trusted third parties, including:

• Technical and hosting providers
• Payment processors (e.g., Stripe, PayPal)
• Delivery services (e.g., Swiss Post)
• Email marketing platforms (e.g., Mailchimp, Brevo)
• Analytics and advertising services (e.g., Google Analytics, Meta/Facebook Pixel)

These partners process your data only as instructed by us and under strict confidentiality and security standards.

International Data Transfers

Some of our service providers are located abroad (e.g., in the EU or the United States). In such cases, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses, adequacy decisions, or equivalent protections as required by the FADP and GDPR.

Data Retention

We retain your personal data only for as long as necessary for the purposes outlined above, or as required by law:

• Order data: 10 years (legal accounting requirement)
• Account data: until account deletion
• Marketing data: until you withdraw consent
• Cookies: according to your browser settings or consent banner

Cookies and Similar Technologies

We use cookies and similar technologies to:

• Ensure the proper functioning of the website (essential cookies)
• Analyze website traffic and usage (e.g., Google Analytics)
• Provide personalized content and targeted advertising (with your consent)

You can manage or disable cookies in your browser settings or through the cookie consent banner displayed on your first visit.

Data Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, alteration, or disclosure — including encrypted connections (HTTPS), secure storage, and password encryption.

Your Rights

You have the following rights regarding your personal data:

• Right of access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent at any time

To exercise your rights, please contact us at info@thecoffeesociety.ch.

If you believe your rights have been violated, you may also file a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the competent supervisory authority in the EU.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

Contact