Privacy Policy

Last updated: 22.01.2025

We place great importance on transparency in handling personal data. This privacy policy provides information about what personal data we collect, for what purpose, and to whom we disclose it. To ensure high transparency, this privacy policy is regularly reviewed and updated.

1. Services We Use

  • Google Ads
  • LinkedIn Ads
  • MailChimp
  • Google Maps
  • YouTube
  • Google Forms
  • Microsoft 365
  • WordPress

2. Contact Information

For questions or concerns about the protection of your data, you can reach us at any time via email at ahuesser@goodchocolatehub.org. Responsible for data processing through this website is:

Good Chocolate Hub
Hermetschloostrasse 70
8048 Zürich
Switzerland

Data Protection Officer:

Andrea Hüsser
ahuesser@goodchocolatehub.org
+41796082931

3. General Principles

3.1 What Data We Collect and From Whom

We primarily process personal data that you provide to us or that we collect when operating our website. Under certain circumstances, we may also receive personal data about you from third parties. This may include the following categories:

  • Personal master data (name, address, date of birth, etc.)
  • Contact details (mobile number, email address, etc.)
  • Financial data (e.g., account details)
  • Online identifiers (e.g., cookie ID, IP addresses)
  • Location and traffic data
  • Audio and visual recordings
  • Particularly sensitive data (e.g., biometric data or health information)

3.2 Under What Conditions We Process Your Data

We treat your data confidentially and in accordance with the purposes set out in this privacy policy. We ensure transparent and proportionate processing.

If we are exceptionally unable to follow these principles, the data processing may still be lawful if there is a justification. Possible justifications include:

  • Your consent
  • The execution of a contract or pre-contractual measures
  • Our legitimate interests, provided your interests do not prevail

3.3 How You Can Withdraw Your Consent

If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of this consent, unless we have another legal justification.

You have the option to withdraw your consent at any time by sending an email to the address stated in the imprint. Data processing that has already taken place is not affected by this.

3.4 In Which Cases We May Disclose Your Data to Third Parties

a. Principle

We may need to use the services of third parties or affiliated companies and commission them to process your data (so-called processors). Categories of recipients include:

  • Accounting, trust, and auditing companies
  • Consulting firms (legal advice, taxes, etc.)
  • IT service providers (web hosting, support, cloud services, website design, etc.)
  • Payment service providers
  • Providers of tracking, conversion, and advertising services

We ensure that these third parties and our affiliated companies comply with data protection requirements and treat your personal data confidentially.

Under certain circumstances, we may also be obliged to disclose your personal data to authorities.

b. Visiting Our Social Media Channels

We may have embedded links to our social media channels on our website. This is always visible to you (typically via corresponding symbols). If you click on the symbols, you will be redirected to our social media channels.

In this case, the social media providers learn that you are accessing their platform from our website. The social media providers can use the data collected for their own purposes. We point out that we do not receive any knowledge of the content of the transmitted data or its use by the operators.

c. Transfer Abroad

In the context of order processing, your personal data may be transferred to companies abroad. These companies are obliged to protect data to the same extent as we are. The transfer can take place worldwide.

If the level of data protection does not correspond to that of Switzerland, we carry out a prior risk assessment and ensure contractually that the same protection as in Switzerland is guaranteed (e.g., by means of the new standard contractual clauses of the EU Commission or other legally prescribed measures). Should our risk assessment be negative, we take additional technical measures to protect your data. You can access the EU Commission’s standard contractual clauses at the following link:
https://commission.europa.eu/publications/standard-contractual-clauses-controllers-and-processors-eueea_de

3.5 How Long We Store Your Data

We store personal data only for as long as necessary to fulfill the individual purposes for which the data was collected.

Data that we store during your visit to our website is kept for twelve months. An exception applies to analysis and tracking data, which can be stored for longer.

We store contract data for a longer period because we are obliged to do so by legal regulations. In particular, we must keep business communications, concluded contracts, and booking receipts for up to 10 years. If we no longer need such data from you to carry out the services, the data will be blocked and we will only use it for accounting and tax purposes.

3.6 How We Protect Your Data

We will keep your data secure and take all reasonable measures to protect your data from loss, access, misuse, or changes.

Our contractual partners and employees who have access to your data are obliged to comply with data protection regulations. In some cases, it will be necessary for us to forward your requests to companies affiliated with us. In these cases too, your data will be treated confidentially.

Within our website, we use the SSL procedure (Secure Socket Layer) in conjunction with the highest encryption level supported by your browser.

3.7 What Rights Do You Have?

a. Right to Information

You can request information about the data we have stored about you at any time. We ask you to send your request for information together with proof of identity to office@goodchocolatehub.org.

You also have the right to receive your data in a common file format if we process your data automatically, and if:

  • You have given your consent for the processing of this data; or
  • You have disclosed data in connection with the conclusion or execution of a contract.

We may restrict or refuse access or data release if this conflicts with our legal obligations, legitimate own or public interests, or interests of a third party.

The processing of your request is subject to the statutory processing period of 30 days. However, we may extend this period due to high request volume, for legal or technical reasons, or because we need further information from you. You will be informed of the extension of the deadline in good time, at least in text form.

b. Deletion and Correction

You have the option to request the deletion or correction of your data at any time. We may reject the request if legal regulations oblige us to longer or unchanged storage or if a permission criterion conflicts with your request.

Please note that the exercise of your rights may conflict with contractual agreements and may have corresponding effects on the execution of the contract (e.g., premature termination of the contract or cost consequences).

c. Legal Recourse

If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a report with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch

3.8 Changes to the Privacy Policy

We may change this privacy policy at any time. The changes will be published on www.goodchocolatehub.org, you will not be separately informed about them.

4. Individual Data Processing Operations

4.1 Provision of the Website and Creation of Log Files

What information do we receive and how do we use it?

By visiting www.goodchocolatehub.org, certain data is automatically stored on our servers or on servers of services and products that we obtain and/or have installed for system administration purposes, for statistical purposes or for backup purposes or for tracking purposes. This includes:

  • The name of your Internet service provider
  • Your IP address (under certain circumstances)
  • The version of your browser software
  • The operating system of the computer with which the URL is accessed
  • The date and time of access
  • The website from which you visit the URL
  • The search words you used to find the URL

Why are we allowed to process this data?

This data cannot be assigned to a specific person and there is no merging of this data with other data sources. The log files are stored to ensure the functionality of the website and to ensure the security of our information technology systems. This is our legitimate interest.

How can you prevent data collection?

The data is only stored for as long as is necessary to achieve the purpose of its collection. Accordingly, the data is deleted after the end of each session. The storage of log files is mandatory for the operation of the website, so you have no possibility to object to this.

4.2 Google Ads

We use the Google Ads service on our website, an online advertising service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). Google Ads allows us to place advertisements in Google search results and in the Google advertising network.

4.3 LinkedIn Ads

We use LinkedIn advertising services on our website, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

Through LinkedIn Ads, we can place targeted advertisements based on users’ interests and behavior. LinkedIn uses cookies and similar technologies to display advertisements based on your previous visits to our and other websites. This allows us to measure and optimize the effectiveness of our advertising efforts.

The information collected through LinkedIn Ads is anonymous to us, meaning we do not receive personal data of individual users. However, this data is stored and processed by LinkedIn, so that a connection to the respective user profile is possible and LinkedIn can use the data for its own advertising purposes, in accordance with LinkedIn’s privacy policy.

If you are a LinkedIn member and are logged into your LinkedIn account while visiting our website, the data collected by LinkedIn Ads will be linked to your LinkedIn account.

The use of LinkedIn Ads serves the purpose of analyzing and optimizing the effectiveness of our advertising measures. The data processing is based on our legitimate interest in targeted advertising and the analysis of the impact and efficiency of this advertising.

4.4 MailChimp

For sending newsletters and email notifications, we use the MailChimp service, offered by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

When you sign up for our newsletter, the data you provide and your email address are transferred to MailChimp, stored, and processed. This allows us to send you regular updates, offers, and information.

When you sign up for the newsletter, your IP address and the date of registration are stored. This storage serves solely as proof in case a third party misuses an email address and signs up for the newsletter without the knowledge of the authorized person.

MailChimp offers extensive analysis options on how the sent newsletters are opened and used. These analyses are group-related and are not used by us for individual evaluation.

The data stored at MailChimp will be deleted as soon as you unsubscribe from our newsletter. This does not affect data stored with us for other purposes.

MailChimp has its own privacy policies and practices that may differ from those of our website. For more information about privacy at MailChimp, please visit: https://mailchimp.com/legal/privacy/. If you have questions about the data collected by MailChimp or want to exercise your rights regarding this data, you should contact The Rocket Science Group, LLC directly.

4.5 Google Maps

On our website, we use Google Maps, a map service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Maps allows us to embed interactive maps directly into the website and enables you to conveniently use the map function, for example for location search or route planning.

By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, other data, in particular your IP address, is transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries. This occurs regardless of whether Google provides a user account through which you are logged in, or whether no user account exists.

Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising.

You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

4.6 YouTube

Videos from YouTube, a platform of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), are embedded on our website. When displaying the videos or clicking on the play button, data, including your IP address and information about the browser you are using, is transmitted to Google servers and stored there. This data is used to provide the video, monitor performance, and improve the user experience.

If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

4.7 Google Forms

We use Google Forms, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), for surveys and online forms. Google Forms allows us to create custom forms for surveys and data collection, which you can fill out via links or directly on our website.

When you complete a Google Form provided by us, the data you enter, as well as your IP address, are transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries.

Please note that the data you enter in Google Forms is processed and stored by Google. If you have concerns about data storage by Google or want to prevent your data from being transmitted to Google, you should not fill out the form.

4.8 Microsoft 365

For various office and communication tasks, we use Microsoft 365, a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft 365 offers a range of productivity tools, including email (Outlook), document storage (OneDrive), collaboration tools (Teams), and Office applications such as Word, Excel, and PowerPoint. When you contact us, for example via email, or when we share documents, these interactions are processed and stored through Microsoft 365.

Microsoft uses servers in various countries to provide Microsoft 365 services. This means that your data may be stored in data centers outside of Switzerland. However, Microsoft has implemented various security and privacy measures to protect their customers’ data.

4.9 WordPress

Our website is based on the WordPress platform, a content management system developed by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. WordPress allows us to create, manage, and publish content.

When using our WordPress-based website, various data, including your IP address, date and time of access, and information about the browser you are using, may be collected and stored. This data is mainly used for administrative purposes and to ensure smooth operation of the website.

Some WordPress features, such as comments or contact forms, may collect additional personal data when you use them.