GDPR Compliance

Last Updated: August 4, 2026

Our Commitment to Data Protection

Swiss Roastery is committed to complying with the General Data Protection Regulation (GDPR) and Switzerland's Federal Act on Data Protection (FADP). This page outlines how we fulfill our obligations under these regulations.

Data Controller Information

The data controller responsible for your personal data is:

Swiss Roastery
Industriestrasse 47
8152 Glattbrugg, Switzerland
Email: [email protected]

Your Rights Under GDPR

Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. We will provide this information in a commonly used electronic format.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction or completion of that information.

Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data was unlawfully processed
• Deletion is required to comply with a legal obligation

Note that we may retain certain information where required by law or for legitimate business purposes.

Right to Restriction of Processing

You may request that we restrict processing of your data when:

• You contest the accuracy of the data
• Processing is unlawful but you prefer restriction over deletion
• We no longer need the data but you need it for legal claims
• You have objected to processing pending verification of legitimate grounds

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller where technically feasible.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in your country of residence, workplace, or where an alleged violation occurred.

In Switzerland, the competent authority is:
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1
3003 Bern, Switzerland

Exercising Your Rights

To exercise any of these rights, contact us at [email protected] with:

• Your full name
• The email address associated with your data
• A clear description of your request
• Proof of identity if requested for security purposes

We will respond to your request within 30 days. In complex cases, we may extend this period by an additional 60 days with notification.

Lawful Basis for Processing

We process personal data based on the following legal grounds:

Consent

Where you have explicitly agreed to processing for specific purposes, such as receiving marketing communications.

Contractual Necessity

Processing necessary to fulfill our contractual obligations to you, including order processing and delivery.

Legal Obligation

Processing required to comply with applicable laws, such as accounting and tax regulations.

Legitimate Interests

Processing necessary for our legitimate business interests, such as fraud prevention, network security, and business analytics, provided these interests do not override your fundamental rights.

Data Processing Activities

Categories of Data Subjects

• Website visitors
• Prospective customers
• Current customers
• Former customers

Categories of Personal Data

• Identification data (name, address)
• Contact information (email)
• Order and transaction data
• Communication preferences
• Technical data (IP address, browser information)

Recipients of Personal Data

• Delivery service providers
• Payment processors
• Website hosting providers
• Email service providers

Data Security Measures

We implement appropriate technical and organizational measures including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection
• Incident response procedures

Data Breach Notification

In the event of a personal data breach likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and inform the relevant supervisory authority within 72 hours of becoming aware of the breach.

International Data Transfers

When transferring data outside Switzerland or the EEA, we ensure appropriate safeguards through:

• Adequacy decisions by the European Commission
• Standard contractual clauses
• Binding corporate rules

Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

Changes to This Statement

We may update this GDPR compliance statement periodically. Significant changes will be communicated through our website or directly to affected individuals.

Contact for Data Protection Matters

For questions about GDPR compliance or to exercise your rights, contact:
Email: [email protected]
Mail: Swiss Roastery, Industriestrasse 47, 8152 Glattbrugg, Switzerland