Privacy Policy
1. Data Controller
Bier Factory Rapperswil AG, Eichwiesstrasse 6, 8645 Rapperswil-Jona, Switzerland
2. Data Collection
We collect personal data necessary to process your order: name, email address, shipping and billing address, phone number, and the order details themselves.
We also record session-based usage data to improve the shop — pages viewed, clicks and cart actions, each with a timestamp. These session records contain neither your name nor your email address; if a session leads to an order, the order number is linked to it. Only the last 200 sessions are kept, older ones are overwritten automatically.
3. Disclosure to Third Parties
We do not sell personal data. To run the shop, data is passed to the following service providers, in each case only as far as necessary for that purpose:
- Planzer Transport AG (shipping, Switzerland): name, company if given, street, postcode, town, country, phone number, email address, and any delivery instruction from your order comment.
- SumUp (card payments) and TWINT: payment is handled directly by these providers; they process the payment data and it does not enter our systems.
- Google (Maps/Places): the checkout page loads Google’s address autocomplete. The characters you type into the address field are sent to Google for this.
- Cloudflare (Turnstile): to protect our forms against spam, your IP address and technical details about your browser are sent to Cloudflare.
- Didit (age verification): see section 7.
4. Data Use
Your data is used exclusively for order processing and, with your consent, for marketing communications.
5. Data Security
All data is transmitted via SSL encryption. Payment data is processed by our payment provider SumUp.
6. Your Rights
You have the right to access, correct, or delete your personal data. Contact us at info@bierfactory.ch.
7. Age Verification
For the sale of alcoholic beverages, we verify once that you are at least 18 years old. The check is carried out by our processor Didit (Didit ID, didit.me). You submit a selfie, from which Didit estimates your age; an identity document is requested only if the result is not clearly above 18. The selfie is biometric data and therefore particularly sensitive personal data; it is processed solely for the age check and solely at Didit. We receive and store only the result of the check (age confirmed: yes/no) with its date; ID images and ID data are never transmitted to us. The verification data is deleted at Didit once the check is complete. The legal basis is the statutory obligation to verify age when selling alcohol. Didit’s privacy policy additionally applies.
