GDPR · FADP
Privacy
Policy
Version 1.0 — Compliant with the Swiss FADP & GDPR
This is a translation provided for convenience. The French version prevails in case of discrepancy.
1. Data controller
The controller of the personal data collected via the Helvitic platform is Défayes, Helvitic, En Arche 44, 1912 Leytron, Switzerland. For any question relating to data protection, contact us at contact@helvitic.ch.
2. Data collected
User account
Name, email address, account creation date, role (customer or winemaker). When signing in via a third-party provider (e.g. Google), we only receive the data transmitted by the provider (name and email).
Orders
Order identifier, items ordered, total amount, delivery status, Stripe session reference. The full delivery address is collected by Stripe Checkout and transmitted directly to the winemaker concerned — it is not stored in our databases.
Session security
When signing in, the IP address and browser (user-agent) are associated with your session to secure it (detection of fraudulent access). This data is deleted with the session and with the account.
Technical diagnostics
In the event of a technical error only, a diagnostic report is sent to our monitoring tool (Sentry): IP address, browser, pages concerned and a reconstruction of the screen in which entered text and images are masked. No browsing is recorded outside of errors, and no advertising or third-party tracking cookies are used.
Interactions
Cellars and wines added to favourites, cellars followed, notifications read.
3. Purposes of processing
- •Management of user accounts and authentication
- •Processing and tracking of orders
- •Sending notifications related to your subscriptions (new wines, cellar events)
- •Improvement of the user experience and the platform
- •Legal compliance (FADP, CO, VAT)
- •Fraud prevention
4. Legal bases
The processing of your data is based on the following legal grounds:
- •Performance of the contract: order processing, account management
- •Legitimate interest: service improvement, fraud prevention
- •Consent: non-essential cookies, marketing communications
- •Legal obligation: retention of transaction data (VAT, CO)
5. Data NOT collected
Helvitic applies a principle of strict data minimisation.
6. Retention period
7. Sharing with third parties
Helvitic neither sells nor rents your personal data. Your data may be shared with:
Stripe
secure payment processing (PCI-DSS)
Region: United States / Europe
Winemakers
delivery address transmitted to prepare your order
Region: Switzerland
Carriers (Vinolog, Planzer)
delivery of your order
Region: Switzerland
Infomaniak
hosting of the platform in Switzerland — application, database and images (virtual private server) — and sending of transactional emails (sign-in, order confirmations, pickups, notifications) — name and email address
Region: Switzerland
Sentry
technical monitoring: in the event of an error, a diagnostic report (IP, browser, pages) and a screen reconstruction with text and images masked
Region: Europe / United States
No transfer of data outside the EU/Switzerland is carried out without appropriate safeguards in accordance with the FADP and the GDPR. The transfer to Stripe (United States) is governed by the approved standard contractual clauses.
8. Your rights
In accordance with the Swiss FADP and the GDPR, you have the following rights:
- •Right to access: obtain a copy of your personal data
- •Right to rectification: correct inaccurate or incomplete data
- •Right to erasure: request the deletion of your data (right to be forgotten)
- •Right to portability: receive your data in a structured format
- •Right to objection: object to processing based on legitimate interest
- •Right to withdrawal of consent: at any time for processing based on consent
To exercise these rights, contact contact@helvitic.ch. We respond within 30 days. In the event of a dispute, you may contact the Federal Data Protection and Information Commissioner (FDPIC).
9. Cookies
Helvitic uses cookies that are strictly necessary for the operation of the platform (authentication, cart, language preferences). These cookies do not require prior consent.
Anonymised analytics cookies may be used to improve our services. You can manage your preferences via the cookie banner displayed on your first visit or from your browser settings.
10. DPO contact
For any question relating to the protection of your personal data, you can contact our Data Protection Officer (DPO) at: contact@helvitic.ch
Last updated: 2026 — This policy may be amended; the applicable version is the one published on this site.