**Privacy Policy**
The data protection officer pursuant to data protection laws is:
Borgovecchio SA
Carlo Crivelli
via Sotto Bisio 5
6828 Balerna
Phone: +41 91 697 63 43
Email: info@mendrisiottoterroir.ch
Website: http://www.mendrisiottoterroir.ch/
**General Information**
According to Article 13 of the Swiss Federal Constitution and the data protection provisions of the Confederation (Data Protection Act, DPA), every person has the right to privacy and protection against misuse of their personal data. We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this data protection declaration.
In cooperation with our hosting providers, we strive to protect databases as best as possible against unauthorized access, loss, misuse, or falsification. We want to point out that data transmission over the Internet (e.g., communication by email) can have security gaps. Complete protection of data against access by third parties is not possible.
By using this website, the user consents to the collection, processing, and use of data in accordance with the following description. This website can generally be visited without registration. Data such as the pages viewed or the name of the retrieved file, the date, and the time are stored on the server for statistical purposes without these data being directly related to your person. Personal data, in particular name, address, or email address, are collected as far as possible on a voluntary basis. Without your consent, the data will not be passed on to third parties.
**Processing of Personal Data**
Personal data is any information that relates to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, acquisition, deletion, storage, modification, destruction, and use of personal data.
We process personal data in accordance with the Swiss data protection law. Furthermore, we process personal data – insofar as the EU General Data Protection Regulation (GDPR) is applicable – based on the following legal bases in connection with Art. 6 (1) GDPR:
- lit. a) Processing of personal data with the consent of the data subject.
- lit. b) Processing of personal data for the performance of a contract with the data subject as well as for the implementation of corresponding pre-contractual measures.
- lit. c) Processing of personal data to fulfill a legal obligation to which we are subject according to any applicable law of the EU or according to any applicable law of a country in which the GDPR is applicable in whole or in part.
- lit. d) Processing of personal data to protect the vital interests of the data subject or another natural person.
- lit. f) Processing of personal data to protect the legitimate interests of us or third parties, provided that the fundamental freedoms and rights and interests of the data subject do not prevail. Legitimate interests include, in particular, our business interest in being able to provide our website, information security, the enforcement of our legal rights, and compliance with Swiss law.
We process personal data for the period necessary for the respective purpose or purposes. In the case of long-term retention obligations due to legal and other obligations to which we are subject, we restrict processing accordingly.
**Privacy Policy for Cookies**
This website uses cookies. These are small text files that allow specific user-related information to be stored on the user's device while using the website. Cookies make it possible, in particular, to determine the frequency of use and the number of users of the pages, to analyze behaviors of page usage, and also to make our offer more customer-friendly. Cookies remain stored beyond the end of a browser session and can be retrieved when visiting the site again. If you do not want this to happen, you should set your Internet browser to refuse cookies.
A general objection to the use of cookies used for online marketing purposes can be declared for many services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. In addition, disabling cookies in the browser settings can prevent their storage. Please note that if this is done, not all functions of this online offer may be used.
**Privacy Policy for SSL/TLS Encryption**
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in the browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
**Data Transmission Security (without SSL)**
Please note that data transmitted over an open network such as the Internet or an unencrypted email service can be viewed by anyone. You can recognize an unencrypted connection by the fact that the browser address line displays “http://” and no lock symbol is displayed in the browser line. Information transmitted over the Internet and content received online can be transmitted over third-party networks. We cannot guarantee the confidentiality of any communication or material transmitted over such open or third-party networks.
If you disclose personally identifiable information over an open or third-party network, you should be aware that your information can be lost or potentially accessed by third parties and, as a result, your information can be collected and used without your consent. While in many cases, individual data packets are transmitted in encrypted form, the names of the sender and recipient are not. Even if the sender and recipient reside in the same country, data transfer over such networks often occurs without controls via third countries, that is, also through countries that do not offer the same level of data protection as your country of residence. We accept no responsibility for the security of your data during transmission over the Internet and disclaim all liability for direct or indirect losses. We ask you to use other means of communication if you deem it necessary or prudent for security reasons.
Despite extensive technical and organizational security precautions, it is possible that data can be lost or intercepted and/or manipulated by unauthorized persons. As far as possible, we take appropriate technical and organizational security measures to prevent this within our system. However, your computer is outside the security perimeter under our control. It is your responsibility as the user to inform yourself about the necessary security precautions and to take appropriate measures in this regard. As the website operator, we are not responsible for any damages you may suffer as a result of the loss or manipulation of data. The data you enter in online forms may be transmitted to third parties for order processing and may be viewed and possibly processed by them.
**Privacy Policy for Server Log Files**
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
– Browser type and version
– Operating system used
– Referrer URL
– Host name of the accessing computer
– Time of the server request
These data are not assignable to specific persons. These data are not merged with other data sources. We reserve the right to retrospectively check these data if we become aware of specific indications of illegal use.
**Third-Party Services**
This site may use Google Maps to embed maps, Google Invisible reCAPTCHA to protect against bots and spam, and YouTube to embed videos. These services of American Google LLC use cookies, and therefore data is transmitted to Google in the USA, although it is assumed that no personal tracking occurs in this context merely by using our website. Google has committed to ensuring adequate data protection in accordance with the US-European and US-Swiss Privacy Shield. Further information can be found in Google’s privacy policy.
**Privacy Policy for Contact Form**
If you send us inquiries via the contact form, the information you provide in the inquiry form, including the contact data you provide, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on these data without your consent.
**Privacy Policy for Newsletter Data**
If you wish to receive the newsletter offered on this site, we need your email address and information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No further data are collected. We use these data exclusively for sending the requested information and do not pass them on to third parties. You can revoke your consent to the storage of data, email address, and their use for sending the newsletter at any time, for example via the “unsubscribe link” in the newsletter.
**Rights of the Data Subject**
**Right to Confirmation**
Every data subject has the right to obtain from the website operator confirmation as to whether personal data concerning them are being processed. If you wish to exercise this right to confirmation, you can contact the data protection officer at any time.
**Right of Access**
Every person affected by the processing of personal data has the right to receive free information from the operator of this website about the personal data stored about him or her and a copy of this information. In addition, the following information may be provided if applicable:
– the purposes of the processing
– the categories of personal data processed
– the recipients to whom the personal data have been or will be disclosed
– if possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria for determining this duration
– the existence of a right to obtain the rectification or erasure of personal data, or to obtain the restriction of processing by the controller, or to object to such processing
– the existence of a right to lodge a complaint with a supervisory authority
– if the personal data are not collected from the data subject: Any available information about the source of the data
In addition, the data subject has the right to be informed if personal data have been transferred to a third country or to an international organization. In this case, the data subject has the right to obtain information about the appropriate safeguards in relation to the transfer.
If you wish to exercise this right to information, you can contact our data protection officer at any time.
**Right to Rectification**
Any person affected by the processing of personal data has the right to obtain the rectification of inaccurate personal data concerning him or her without undue delay. In addition, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement, taking into account the purposes of the processing.
If you wish to exercise this right to rectification, you can contact our data protection officer at any time.
**Right to Erasure (Right to be Forgotten)**
Any person affected by the processing of personal data has the right to obtain from the controller of this website the erasure of personal data concerning him or her without undue delay, if one of the following reasons applies and to the extent that processing is not necessary:
– The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
– The data subject withdraws consent on which the processing is based, and there is no other legal basis for the processing.
– The data subject objects to the processing based on his or her particular situation, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in the case of direct marketing and related profiling.
– The personal data have been processed unlawfully.
– The erasure of personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
– The personal data have been collected in relation to the offer of information society services directly to a child.
If one of the above reasons applies and you wish to arrange for the erasure of personal data stored by the operator of this website, you can contact our data protection officer at any time. The data protection officer of this website will ensure that the request for erasure is complied with immediately.
**Right to Restrict Processing**
Any person affected by the processing of personal data has the right to obtain from the controller of this website the restriction of processing if one of the following conditions is met:
– The accuracy of the personal data is contested by the data subject for a period that allows the controller to verify the accuracy of the personal data.
– The processing is unlawful, the data subject opposes the erasure of the personal data and requests instead the restriction of the use of the personal data.
– The controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the establishment, exercise, or defense of legal claims.
– The data subject has objected to processing based on his or her particular situation, and it is not yet clear whether the legitimate interests of the controller override those of the data subject.
If one of the above conditions is met, you can request the restriction of personal data stored by the operator of this website by contacting our data protection officer at any time. The data protection officer of this website will arrange the restriction of processing.
**Right to Data Portability**
Every person affected by the processing of personal data has the right to receive the personal data concerning him or her in a structured, commonly used, and machine-readable format. He or she also has the right to have these data transferred to another controller if the legal requirements are met.
In addition, the data subject has the right to have the personal data transferred directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.
To assert the right to data portability, you can contact the data protection officer appointed by the operator of this website at any time.
**Right to Object**
Every person affected by the processing of personal data has the right, on grounds relating to his or her particular situation, to object at any time to the processing of personal data concerning him or her.
The operator of this website will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or if the processing serves the establishment, exercise, or defense of legal claims.
To exercise the right to object, you can contact the data protection officer of this website directly.
**Right to Withdraw Consent under Data Protection Law**
Every person affected by the processing of personal data has the right to withdraw consent to the processing of personal data at any time.
If you wish to exercise your right to withdraw consent, you can contact our data protection officer at any time.
**Data Protection Statement for Unsolicited Advertising Emails**
The use of contact data for sending unsolicited advertising and informational material is prohibited. The page operators expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, such as spam emails.
**Paid Services**
For the provision of paid services, we require additional data, such as payment details, to process your order. We store this data in our systems until the expiration of the legal retention periods.
**Google Ads**
This website uses Google conversion tracking. If you have reached our website via an ad placed by Google, Google Ads will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to that page. Each Google Ads customer receives a different cookie. The cookies cannot therefore be tracked across the websites of Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. Customers can find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users.
If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this purpose – for example, by setting your browser to generally disable the automatic setting of cookies or by setting your browser to block cookies from the domain "googleleadservices.com".
Please note that you should not delete the opt-out cookies if you do not want measurement data to be recorded. If you have deleted all your cookies in the browser, you will need to set the respective opt-out cookie again.
**Use of Google Remarketing**
This website uses the remarketing function of Google Inc. The function is used to present website visitors with interest-based advertisements within the Google advertising network. A "cookie" is stored in the visitor's browser, which allows the visitor to be recognized when visiting websites that are part of the Google advertising network. On these sites, the visitor can be presented with advertisements that relate to content that the visitor has previously accessed on websites that use Google's remarketing function.
According to its own information, Google does not collect any personal data during this process. However, if you do not want to use Google's remarketing function, you can generally disable it by making the appropriate settings at http://www.google.com/settings/ads. Alternatively, you can disable the use of cookies for interest-based advertising through the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.
**Privacy Policy for Google Analytics**
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited. If the data controller for this website is outside the European Economic Area or Switzerland, the data processing of Google Analytics is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as "Google".
The statistics obtained allow us to improve our offer and make it more interesting for you as a user. This site also uses Google Analytics for cross-device analysis of visitor flows, which is done via a user ID. If you have a Google user account, you can disable the cross-device analysis of your usage in the settings under "My data", "Personal data".
The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f GDPR. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other Google data. We point out that on this site Google Analytics has been extended with the code "_anonymizeIp();" to ensure the anonymous collection of IP addresses. This means that IP addresses are processed in truncated form, excluding the possibility of personal references. If the data collected about you is related to a person, this is immediately excluded and the personal data is deleted immediately.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services relating to website activity and internet usage to the website operator. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Google Analytics uses cookies. The information generated by the cookie about your use of the website is generally transmitted to a Google server in the USA and stored there. You can refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google, and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: Disable Google Analytics.
In addition, you can also prevent the use of Google Analytics by clicking on this link: Disable Google Analytics. An opt-out cookie will be stored on your data carrier, which prevents the processing of personal data by Google Analytics. Please note that if you delete all cookies on your device, these opt-out cookies will also be deleted, meaning you will need to set the opt-out cookies again if you want to continue preventing this form of data collection. Opt-out cookies are set for each browser and computer/device and must therefore be activated separately for each browser, computer, or other device.
**Privacy Policy for Google AdSense**
We use Google AdSense on this website. This is an advertising program by Google Inc. In Europe, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. Google AdSense allows us to display advertisements on this website that are relevant to our theme.
Google AdSense uses cookies to serve ads that are relevant to users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Google uses a cookie ID to record which ads are shown in which browser and can thus prevent them from being shown more than once. Additionally, Google AdSense can use cookie IDs to record conversions related to ad requests. This is the case, for example, when a user sees a Google Ads ad and later visits the advertiser's website with the same browser and makes a purchase. According to Google, Google Ads cookies do not contain personally identifiable information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. Through the integration of Google Ads, Google receives the information that you have accessed the relevant part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will obtain and store your IP address.
You can prevent participation in this tracking process in various ways:
a. by adjusting your browser software accordingly; in particular, the suppression of third-party cookies will prevent you from receiving ads from third-party providers;
b. by disabling the cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://adssettings.google.com, a setting that will be deleted when you delete your cookies;
c. by disabling the interest-based ads of providers that are part of the self-regulatory campaign "About Ads" via the link https://www.aboutads.info/choices, this setting being deleted when you delete your cookies;
d. by disabling them permanently in your browsers Firefox, Internet Explorer, or Google Chrome at the link https://www.google.com/settings/ads/plugin. We would like to point out that in this case, you may not be able to use all the functions of this offer in their entirety.
The legal basis for processing your data is the weighing of interests, according to which the processing of your personal data described above does not conflict with any overriding interests on your part (Art. 6 (1) sentence 1 lit. f GDPR).
Further information on Google Ads by Google can be found at https://ads.google.com/intl/de_DE/home/, as well as on Google's data protection in general: https://www.google.de/intl/de/policies/privacy. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at https://www.networkadvertising.org.
**Privacy Policy for Facebook**
This website uses features of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. When you access our pages with Facebook plugins, a connection is established between your browser and Facebook's servers. In the process, data is already transferred to Facebook. If you have a Facebook account, this data can be linked to it. If you do not want this data to be associated with your Facebook account, please log out of Facebook before visiting our site. Interactions, especially the use of a comment function or clicking a "Like" or "Share" button, are also transmitted to Facebook. You can learn more at https://de-de.facebook.com/about/privacy.
**Privacy Policy for Instagram**
On our website, functions of the Instagram service are integrated. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, do not know the content of the data transmitted or how it is used by Instagram. For more information, please refer to Instagram's privacy policy: http://instagram.com/about/legal/privacy/
**Privacy Policy for LinkedIn**
We use marketing services of the social network LinkedIn, provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn") within our online offer.
These services use cookies, which are text files stored on your computer. This allows us to analyze your use of the website. For example, we can measure the success of our ads and show users the products they were previously interested in.
For example, information about the operating system, browser, previously visited website (referrer URL), which websites the user visited, which offers the user clicked on, and the date and time of the visit to our website are recorded.
The information generated by the cookie about the use of this website is transferred in a pseudonymous form to a LinkedIn server in the USA and stored there. Therefore, LinkedIn does not store the name or email address of the respective user. Rather, the aforementioned data are only assigned to the person for whom the cookie was generated. This does not apply if the user has allowed LinkedIn to process without pseudonymization or has a LinkedIn account.
You can refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also object to the use of your data directly on LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
We use LinkedIn Analytics to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. All LinkedIn companies have adopted standard contractual clauses to ensure that data traffic to the USA and Singapore, necessary for the development, implementation, and maintenance of the services, is carried out legally. When we ask users for consent, the legal basis for processing is Article 6(1)(a) GDPR. Otherwise, the legal basis for the use of LinkedIn Analytics is Art. 6 (1) p. 1 lit. f GDPR.
Third-party provider information: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2 Ireland; user agreement and privacy policy.
**Newsletter – Mailchimp**
The newsletter is sent using the 'MailChimp' shipping service provider, a newsletter shipping platform from the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the shipping service provider here. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield agreement, which provides a guarantee of compliance with European data protection levels (PrivacyShield). The shipping service provider is used based on our legitimate interests in accordance with Art. 6 (1) lit. f GDPR and an order processing agreement in accordance with Art. 28 (3) sentence 1 GDPR.
The shipping service provider may use the data of the recipients in pseudonymous form, meaning without assignment to a user, to optimize or improve its own services, for example, to optimize the technical dispatch and presentation of the newsletter or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write to them themselves or to pass the data on to third parties.
**Note on Data Transfer to the USA**
Among other things, tools from companies based in the USA are integrated into our website. If these tools are active, your personal data may be transferred to the servers of the respective companies in the USA. We would like to point out that the USA is not a safe third country in the sense of European data protection law. US companies are obliged to hand over personal data to security authorities without you, as the data subject, being able to take legal action against this. It cannot therefore be ruled out that US authorities (e.g., intelligence services) process, evaluate, and permanently store your data located on US servers for monitoring purposes. We have no influence over these processing activities.
**Copyrights**
The copyrights and all other rights to the content, images, photos, or other files on the website belong exclusively to the operator of this website or the specifically named rights holders. Written consent from the copyright holder must be obtained in advance for the reproduction of any files.
Anyone who commits a copyright infringement without the consent of the respective copyright holder may be prosecuted.
**General Disclaimer**
All information on our website has been carefully checked. We make every effort to ensure that the information we provide is up-to-date, accurate, and complete. However, errors cannot be completely ruled out, which means that we cannot guarantee the completeness, accuracy, and timeliness of information, including journalistic and editorial information. Liability claims for damages caused by the use of any information provided, including any kind of information that is incomplete or incorrect, will therefore be rejected.
The publisher may change or delete texts at their own discretion and without notice and is not obligated to update the content of this website. Use or access to this website is at the visitor's own risk. The publisher, their clients, or partners are not responsible for damages such as direct, indirect, incidental, consequential, or punitive damages allegedly caused by the use of this website and, therefore, assume no liability for such damages.
The publisher also assumes no responsibility for the content and availability of third-party websites that can be accessed via external links on this website. The operators of the linked sites are solely responsible for their content. The publisher, therefore, expressly distances themselves from all third-party content that may be relevant under criminal or liability law or offend common decency.
**Changes**
We may adapt this data protection declaration at any time and without notice. The current version published on our website applies. If the data protection declaration is part of an agreement with you, we will inform you of the change by email or other appropriate means in the event of an update.
**Questions to the Data Protection Officer**
If you have any questions about data protection, please write to us by email or contact the person in our organization responsible for data protection directly, as indicated at the beginning of the data protection declaration.
Balerna, 12.04.2021
Source: SwissAnwalt