GDPR · FADP
Privacy
Policy
Version 1.0 — Compliant with the Swiss FADP & GDPR
This is a translation provided for convenience. The French version prevails in case of discrepancy.
1. Data controller
The controller of the personal data collected via the Helvitic platform is Helvitic Sàrl, En Arche 44, 1912 Leytron, Switzerland. For any question relating to data protection, contact us at contact@helvitic.ch.
2. Data collected
User account
Name, email address, account creation date, role (customer or winemaker). When signing in via a third-party provider (e.g. Google), we only receive the data transmitted by the provider (name and email).
Orders
Order identifier, items ordered, total amount, delivery status, Stripe session reference. The full delivery address is collected by Stripe Checkout and transmitted directly to the winemaker concerned — it is not stored in our databases.
Session security
When signing in, the IP address and browser (user-agent) are associated with your session to secure it (detection of fraudulent access). This data is deleted with the session and with the account.
Technical diagnostics
In the event of a technical error, a diagnostic report is sent to our monitoring tool (Sentry): IP address, browser, pages concerned and a reconstruction of the screen in which entered text and images are masked. No advertising or third-party tracking cookies are used.
Audience measurement and browsing recording
To understand how the platform is used and fix what gets in the way, we measure traffic (Umami, hosted by us in Switzerland, without cookies) and record a reconstruction of browsing on public pages (PostHog, hosted in the European Union): pages viewed, clicks, scrolling. Input fields are masked, the IP address is not kept, no named profile is built, and nothing is recorded in your personal space, during checkout or in the winemaker area. You can opt out at any time from the “Cookies” section below (art. 45c of the Swiss Telecommunications Act).
Interactions
Cellars and wines added to favourites, cellars followed, notifications read.
3. Purposes of processing
- •Management of user accounts and authentication
- •Processing and tracking of orders
- •Sending notifications related to your subscriptions (new wines, cellar events)
- •Improvement of the user experience and the platform
- •Legal compliance (FADP, CO, VAT)
- •Fraud prevention
4. Legal bases
The processing of your data is based on the following legal grounds:
- •Performance of the contract: order processing, account management
- •Legitimate interest: service improvement, fraud prevention
- •Consent: non-essential cookies, marketing communications
- •Legal obligation: retention of transaction data (VAT, CO)
5. Data NOT collected
Helvitic applies a principle of strict data minimisation.
6. Retention period
7. Sharing with third parties
Helvitic neither sells nor rents your personal data. Your data may be shared with:
Stripe
secure payment processing (PCI-DSS)
Region: United States / Europe
Winemakers
delivery address transmitted to prepare your order
Region: Switzerland
Carriers (Vinolog, Planzer)
delivery of your order
Region: Switzerland
Infomaniak
hosting of the platform in Switzerland — application, database and images (virtual private server) — and sending of transactional emails (sign-in, order confirmations, pickups, notifications) — name and email address
Region: Switzerland
Sentry
technical monitoring: in the event of an error, a diagnostic report (IP, browser, pages) and a screen reconstruction with text and images masked
Region: Europe / United States
PostHog
audience measurement and recording of browsing on public pages (input fields masked, IP address discarded, no named identification)
Region: European Union (Germany)
No transfer of data outside the EU/Switzerland is carried out without appropriate safeguards in accordance with the FADP and the GDPR. The transfer to Stripe (United States) is governed by the approved standard contractual clauses.
8. Your rights
In accordance with the Swiss FADP and the GDPR, you have the following rights:
- •Right to access: obtain a copy of your personal data
- •Right to rectification: correct inaccurate or incomplete data
- •Right to erasure: request the deletion of your data (right to be forgotten)
- •Right to portability: receive your data in a structured format
- •Right to objection: object to processing based on legitimate interest
- •Right to withdrawal of consent: at any time for processing based on consent
To exercise these rights, contact contact@helvitic.ch. We respond within 30 days. In the event of a dispute, you may contact the Federal Data Protection and Information Commissioner (FDPIC).
9. Cookies
Helvitic uses cookies that are strictly necessary for the operation of the platform (authentication, cart, language preferences). These cookies do not require prior consent.
Audience measurement relies on a technical identifier stored in your browser by PostHog and on a cookieless counter (Umami). In accordance with art. 45c of the Swiss Telecommunications Act, you can refuse it here; this choice is remembered in this browser.
Audience measurement is active in this browser.
10. DPO contact
For any question relating to the protection of your personal data, you can contact our Data Protection Officer (DPO) at: contact@helvitic.ch
Last updated: 2026 — This policy may be amended; the applicable version is the one published on this site.