1. Responsible for Treatment
Auris – Consulting & Investment, S.A.
Rue de la Cité 1, 1204 Geneva, Switzerland
IDE: CHE-198.378.126
E-mail: auris@auriscollection.com | Tel.: +41 79 48 92 755
2. Legal basis
The processing of your personal data is governed by the Swiss Federal Data Protection Act (nLPD), in force since September 1, 2023, as well as the Data Protection Ordinance (OPDa). As a company based in Geneva, Swiss law is fully applicable to all personal data processing operations carried out by Auris.
3. Personal Data Collected
3.1 Data provided directly
- Full name and delivery address
- Email address
- Telephone number (if provided)
- Payment data (processed securely by a third party)
- Wine preferences and order history
3.2 Data collected automatically
- IP address and browser type
- Pages visited and length of visit
- Cookies (see separate Cookies Policy)
4. Purposes and Bases of Legitimacy
Personal data is processed exclusively for the following purposes:
- Processing and shipping orders – legal basis: performance of contract (art. 6 nLPD)
- Customer account management and purchase history – legal basis: contract execution
- Sending newsletters and marketing communications – legal basis: express consent
- Compliance with legal obligations (e.g. tax, customs) – legal basis: legal obligation
- Checking the legal drinking age – legal basis: legal obligation (LAlc)
- Website improvement and usage analysis – legal basis: legitimate interest
5. Data retention
Personal data is only kept for the period necessary to fulfill the purposes for which it was collected:
- Order data: 10 years (Swiss accounting and tax obligation – CO art. 958f)
- Marketing data: until revocation of consent
- Navigation data: 12 months
6. Transfer of Data to Third Parties
Auris does not sell or rent your personal data. They may, however, be shared with:
- Logistics service providers (for parcel delivery)
- Payment processors (e.g. Stripe, PayPal) – subject to their own privacy policies
- Swiss public authorities, when required by law
In the case of international data transfers (e.g. to providers in the USA), Auris ensures that there are adequate safeguards in place under the nLPD, including standard contractual clauses or transfer to countries with an adequate level of protection.
7. Security
Auris applies appropriate technical and organizational measures to protect your personal data against unauthorized access, loss or destruction. All online transactions are encrypted with SSL/TLS technology and stored data uses SHA-256 encryption.
8. Holders’ rights
Under the nLPD, you have the following rights:
- Right of access – to know what data we process about you
- Right to rectification – correct inaccurate data
- Right to erasure – request the deletion of your data
- Right to portability – receive your data in a structured format
- Right to object – to object to processing for marketing purposes
- Right to revoke consent – at any time, without retroactive effect
To exercise any of these rights, please contact us at: auris@auriscollection.com
9. Changes to the Privacy Policy
We reserve the right to update this policy at any time. The latest version will always be available on this page. In the event of material changes, we will notify registered users by e-mail.
10. Control Authority
If you consider that the processing of your data violates the nLPD, you have the right to lodge a complaint with the Federal Data Protection and Transparency Officer (PFPDT):
www.edoeb.admin.ch | Tel.: +41 58 462 43 95
