Source: http://www.cacaobetulia.com/privacy-policy/
Timestamp: 2019-04-26 16:49:29+00:00

Document:
When you visit and interact with the website of Cacao Betulia or otherwise contact us, we may collect, use, share and process information relating to you (“Personal Data”)*.
We highly value your right to privacy. Any information you entrust to us will be treated responsibly. We are committed to ensuring that your privacy is being protected.
If you provide us with personal data of other persons (such as family members, colleagues), please make sure the respective persons are aware of this Data Protection Statement and only provide us with their data if you are allowed to do so and such personal data is correct.
How Personal Data is being used by us or our partners.
Which steps we take to ensure the protection of your Personal Data.
Usage of this website by Children: Our website is fully customized for persons at the age above 16 years. Younger children need a permit from their parents to transmit personal data to us. Otherwise we do not collect their data.
* Personal Data or Personally Identifiable Information, as described in the European and US privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context.
For an explanation of the used terms, please see “Codicil: Definitions” at the end of this declaration.
The use of this web offer for information purposes is basically possible without any indication of personal data.
However, if you wish to take advantage of special services from our company through our website, personal data processing may be required. Basically, we process your personal data only to the extent necessary to provide our online offers, content and services.
In case of data exchange, we use your data only for processing contracts concluded with you, for the technical administration or to answer your inquiries, e. g. to our offers.
The collection and use of your personal data takes place regularly only after your informed consent or if the processing of the data is permitted by law. In addition, personal identifiable information voluntarily provided to us will only be stored until the purpose is fulfilled.
Our employees are committed to privacy and confidentiality. The transfer to other companies or data collectors does not take place, with the exception of website services, explained in Part IV.
We endeavor to ensure the security of your data within the framework of applicable data protection laws and technical possibilities. Our catalog of protection measures can be found in the section “Data Security”. We point out that the data transmission in the Internet, e. g. by e-mail or other communication protocols, may have security issues and is usually stored on the servers of the provider. A complete protection from access to your data by third parties is not possible.
2. What data is collected by us?
You have the opportunity to register on our website for various services, providing a small amount of personal data to us.
Personal data is all information that relates to a specific or identifiable person. This may be, for example, your name, your postal address, e-mail address and telephone number. The personal data that is sent to us, can be derived from the respective input mask used for the registration.
This personal data can be processed by us. Processing means any process or series of operations related to personal data, such as collecting, organizing, storing, adapting or modifying, reading, querying, using, with or without the help of automated procedures; disclosure by submission, dissemination or other form of provision, reconciliation or association, restriction, erasure or destruction.
The personal data you enter will be collected and stored solely for internal use by us and for your own purposes (e. g. based on a contract). Wherever possible, the data is anonymized. Anonymized means that no conclusions can be drawn on an affected person.
The criterion for the duration of the storage of personal data is the respective statutory retention period. After the deadline, the corresponding data are routinely deleted, if they are no longer required to fulfil a contract or to initiate a possible contract.
If you are interested in a special offer from Cacao Betulia you can submit a request using our prepared form (e. g. for download of product specifiactions). Which personal data is transmitted, is given with the appropriate input mask. Your data may be collected manually in a third-party software (e. g. “cloud”), imported automatically or manually in internal databases. The processing of relevant offers to your request can be done manually or by software. You can be informed by e-mail, letter or by phone about a fitting offer.
You have the possibility to unsubscribe from this service at any time, by using a dedicated unsubscribe option or contact us via e-mail or by phone.
Visitors of our website can submit messages via an online contact form. In order to be able to receive a reply, at least the specification of a valid e-mail address is required. All further information can be given voluntarily by the requesting person.
By submitting the message via the contact form, the visitor consents to the processing of the transferred personal data. The data processing takes place exclusively for the purpose of processing and answering inquiries via the contact form.
This is done on the basis of the voluntarily granted consent in accordance with Art. 6 (1) 1 lit. a) GDPR.
The personal data collected for the use of the contact form will be automatically deleted as soon as the request has been completed and there are no reasons for further storage.
3. What data is collected by the provider of the web offer on behalf of us?
The hosting services we use are designed to provide the following services: infrastructure and platform services, computing capacity, storage and database services, security services, and the technical maintenance we use to operate this website.
In doing so, we or our hosting provider processes stock data, contact data, contract data, usage data, meta and communication data of visitors to this website.
The legal basis, which requires no consent, is the legitimate interest of Cacao Betulia in the efficient and secure provision of our website to our customers in accordance with. Art. 6 (1) p. 1 lit. f) DSGVO with Art. 28 GDPR.
We use this protocol data without any assignment to you or other profiling for purely statistical evaluations for the purpose of operation, security and optimization of our website. We do not use automatic decision-making or profiling.
We are honouring Do-Not-Track signals when a Do-Not-Track (DNT) browser mechanism is in place.
It may be possible, to subscribe to a newsletter, provided by us.
To confirm your subscription, you need to fill out a simple signup form, which basically only needs your e-mail address. This registration will be logged. After subscribing, you will receive a message to the given email address, asking to confirm your registration. This so-called “Double Opt-In“ is a necessary protection, so third parties cannot register your e-mail address to our newsletter.
You can revoke your consent to receive the newsletter and thus unsubscribe from the newsletter at any time. We save the registration details as long as they are needed for sending the newsletter.
We are using a designated software for the distribution of the newsletter to our subscribers, which guarantees a legally compliant data protection.
You have the possibility to unsubscribe from the newsletter at any time. Each newsletter includes a link for unsubscription. If this link is missing, we ask you to contact the person responsible for the privacy of our website (see our Imprint).
By registering for the newsletter of Cacao Betulia you expressly agree to the processing of the transmitted personal data (your e-mail address).
Legal basis for sending the newsletter is your consent according to Art. 6 (1 ) 1 lit. a) in conjunction with Art. 7 DSGVO.
In accordance with applicable law, we may include visible and invisible image files in our newsletters and other marketing e-mails. If such image files are retrieved anonymously from our servers, we can determine whether and when you have opened the e-mail, so that we can measure and better understand how subscribers use our offers and further customize them.
You may disable this feature in your e-mail program, which will usually be a default setting.
By using our websites and consenting to the reception of e-mails you agree to our use of such techniques. If you object, you must configure your browser or e-mail program accordingly.
This website can store information, a so-called cookie, on the user’s computer to improve the functionality of this service and the content. Cookies used on this website do not violate your privacy. They are not used to store any personal information. Our cookies cannot be traced back to an individual user.
Our usage of Cookies is limited. It is not necessary to accept cookies to visit our website.
1. What is a Cookie and how do we use it?
Session cookies, which are deleted the moment you quit your browser.
Permanent cookies, which are stored for a longer period of time (e. g. one year) or permanently.
The collection of unpersonalized data with the help of Cookies is in our legitimated interest and justified by Art. 6 Abs. 1 1 f) DS-GVO.
This website can provide download, newsletters and email subscription services. Cookies may be used to remember if a user is already registered for a download of product information and whether to show certain notifications which might only be valid to subscribed/unsubscribed users.
Your browser provides an option, to ask for permission every time a cookie tries to be stored. The browser includes also an option, to accept website cookies and block all third party cookies. Usually, your browser’s help section will provide information on how to change your cookie settings.
Please keep in mind, there are no industry standard options for disabling cookies without disabling the functionality and features they add to the website. It is recommended that you don´t restrict the usage of all cookies used by this website, to get the unlimited service.
By using this website you agree to store user information on cookie files and allow these files to remain on your computer after the browser session has ended, so they may be used upon your next visit. You can decide to retract this permission by refusing cookies in your browser settings.
Please read our declaration regarding Google Analytics.
Our web analysis includes the anonymous collection and analysis of data from visitors of this websites. The analysis serves the statistical collection of web use for the continuous improvement of our website and services. This is our legitimate interest in accordance with Article 6 (1) 1 lit. f GDPR.
This website is using Google Analytics from Google Inc., the most widespread and trusted analytics solution on the web. This service is helping us to understand how visitors use this web service and improve the usage experience. Information about the website usage (e. g. time of visiting) – including your IP address – will be transmitted to Google in the USA and stored. Google can use this information for the purpose of evaluating your use of this website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.
Google is certified to the Privacy Shield Agreement between the European Union, Switzerland and the United States. Google fully agrees to comply with the standards and regulations of European data protection law. Further information can be found here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
We are using IP anonymization. This means, that IP addresses, used during the Internet connection will be abridged by Google and anonymised when accessing our website from a Member State of the European Union or another Contracting State to the Agreement, including Switzerland. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google has officially declared that they will not associate your IP address with any other data held by Google. Google may pass these personal data collected through the technical procedure to third parties.
This website is not using the feature “demographic data”, offered by Google Analytics.
Google will use the collected information on our behalf to evaluate the use of this website. It will compile detailed reports on website activity and provide us with other services related to the internet usage.
For the application of Google Analytics cookies can be stored on your computer (for the explanation of cookies please see above). With the help of these cookies, Google can analyze the use of our website. With each call-up to one of the individual pages of this Internet site, the Internet browser of the data subject will automatically submit data through the Google Analytics component. During this technical procedure, Google collects personal information, such as the IP address of the data subject, to understand the origin of visitors and clicks, and subsequently create commission settlements. These cookies may track things such as how long you spend on the site and the pages that you visit so we can continue to produce engaging content.
You can prevent the storage of cookies by a corresponding setting of your browser software and thus permanently deny the setting of cookies. Blocking cookies in general will also prevent Google Analytics from setting any cookie on the information technology system of the data subject. However, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. Cookies already in use by Google Analytics can be deleted at any time via an integrated web browser option.
For more information on Google Analytics cookies, please visit the official Google Analytics page (https://www.google.com/analytics/).
On this website, we may integrate components of YouTube. YouTube enables video publishers to publish video clips free of charge, including the option of free viewing, review and commenting on them. YouTube allows it to publish all kinds of videos, e.g. user movies, TV broadcasts, music videos and marketing videos, including product descriptions.
With each call-up to one of the individual pages of this website with an integrated YouTube video, the Internet browser is automatically prompted to download a display of the corresponding YouTube component. Further information about YouTube may be obtained under https://www.youtube.com/yt/about/en/.
During this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in on a YouTube account, YouTube recognizes with each call-up to a sub-page that contains a YouTube video, which specific sub-page of our Internet site was visited by the data subject. This information is collected by YouTube and assigned to the respective YouTube account of the data subject.
YouTube and Google will receive information through the YouTube component when you are visiting our website. If you are logged in at your Youtube account at the time of the call to our website, this occurs regardless of whether you click on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desirable for you, the delivery may be prevented if you log off from your account before a call-up to our website is made.
We are using several script libraries and font libraries (e. g. Google Web Fonts) to present the best possible user experience. During the access of our website, a connection to the providers of these libraries (e. g. Google) will be established. The providers may collect these connection data.
On our website social plugins of different providers of social networks can be integrated. By means of these plugins, information, which may also include personal data, can be used by the respective social networks.
This is our legitimate interest in accordance with Article 6 (1) 1 lit. f) GDPR, as it is the main purpose of using plugins of social networks to make our business offers known to a wide audience, inlcuding potential customers.
The social networks are responsible for the privacy-compliant handling of the data of their users. The privacy policies of the respective social networks provide information on the collection, processing and use of these personal data. No personal data of social plugins are stored from us.
If the visitors to our website are simultaneously logged in to a social network, it can be assumed that personal data will be transmitted to them.
Unless specifically stated, we process and store your personal data only as long as necessary for the performance of our contractual obligation and compliance with legal obligations or other purposes pursued with the processing, i. e. for the duration of the entire business relationship.
Personal data may be retained for the period during which claims can be asserted against our company or as we are otherwise legally obliged to do so or if legitimate business interests require further retention (e.g., for evidence and documentation purposes). As soon as your personal data are no longer required for the above-mentioned purposes, they will be deleted or anonymized, to the extent possible.
In general, shorter retention periods of no more than twelve months apply for operational data (e.g., system logs).
Based on the GDPR (EU) and the Swiss privacy law, your rights on your private data are protected. Some of these rights are complex, and not all of the details have been included in this summary. Please read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
You may exercise any of your rights in relation to your personal data by a written notice to us by mail or by email to our data protection manager (see: Contacting us).
There is no right of access if the disclosure of the information for special reasons, for example due to a predominant legitimate interest of third parties, is contrary to this. The right of access is also excluded if the data are stored only because they can not be deleted due to statutory retention periods or serve exclusively for purposes of data protection or data protection control, if the disclosure would require a disproportionate effort and processing for other purposes by appropriate technical and organizational measures are excluded.
If the personal data has not been collected from you as the data subject, the available information about the origin of the data.
If your personal data are transmitted to a third country or to an international organization, you have the right to be informed about the appropriate guarantees under Art. 46 GDPR in connection with the transfer.
Your personal data have been unlawfully processed by us.
exercise or defence of legal claim.
There is also no entitlement to cancellation if, in the case of lawful, non-automated data processing, the erasure is not possible or only with disproportionately high outlay due to the special nature of the storage and your interest in deletion is low. In this case, the deletion is replaced by the restriction of processing.
Additionally you have the right to object to our processing of your personal data for direct marketing purposes, including profiling for direct marketing purposes. If you make such an objection, we will cease to process your personal data for this purpose.
You have also the right to object to our processing of your personal data for scientific or historical research purposes or statistical purposes on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
In exercising your right to data portability, you have the right to obtain that the personal data are transmitted directly by us to another person responsible, as far as this is technically feasible.
However, the right of data transfer does not apply where it would adversely affect the rights and freedoms of others.
Basically, we restrict the use of personal data within our company. If and to the extent that we engage third parties in the performance of contracts, e. g. logistic service providers or legal authorities, they will only receive personal data to the extent that the transmission is required for the corresponding service.
In the event that we outsource certain parts of the data processing (“order processing”), we contractually obligate processors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the data subject’s rights – stated above.
We do not purposely transmit data to bodies or persons outside the EU, with exception of the previously declared cases.
Cacao Betulia endeavors to ensure the security of your data within the scope of current and reasonable technical possibilities. We comply very closely with the applicable data protection laws.
Your personal data will be transmitted encrypted with us. This applies to your orders, emails and also to possible customer logins.
We use the generally recognized SSL coding system (Secure Socket Layer). We expressly point out that the transmission of data on the Internet (e. g. in the case of communication by e-mail) can have security gaps. A complete protection of the data from access by third parties is not possible.
To safeguard your data, Cacao Betulia maintains technical and organizational security measures according to Art. 32 DSGVO, which we constantly adapt to the state of the art technology.
The servers we use are regularly backed up carefully and the backups are also protected against improper access.
According to important changes in the law of EU, USA or Switzerland we may need to amend this policy and to keep up with new developments and possibilities on the global internet.
Personal data means any information relating to an identified or identifiable natural person – the so-called “data subject” (see below). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Profiling stands for any form of automated processing of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
Pseudonymisation is the processing of personal data with the result, that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
Controller or controller responsible for the processing is the natural or legal person, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by the given law.
When you visit and interact with the website of EXALOS AG, Switzerland, or otherwise contact us, we may collect, use, share and process information relating to you (“Personal Data”)*.
When ordering or registering on our site, as appropriate, you may be asked to enter your name, email address, phone number or other details to help you with your experience and get in personal contact with us.
When do we collect private information?
We collect some information from you when you subscribe to a newsletter, place an order, fill out a form or enter information on our site or provide us with feedback on our products or services .
We only provide articles and information. We don´t ask for credit card numbers.
The website is using Google Analytics from Google Inc. For this application cookies can be saved on your computer. These are small text files to analyze the usage of the website. Information about the website usage (e. g. time of visiting) – including your IP adress – will be transmitted to Google in the USA and saved.

References: Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 7
 Art. 6
 Art. 46
 Art. 32