Our privacy notice
This website contains offers and sections from the Lindt Chocolate Competence Foundation (chocolate tour) and Lindt & Sprüngli Schweiz AG (chocolate courses / café / events / shop). The privacy notice of Lindt & Sprüngli Schweiz AG can be found under the following Link.
The privacy notice of the Lindt Chocolate Competence Foundation can be found in the following section.
Lindt Chocolate Competence Foundation privacy principles
We at LINDT CHOCOLATE COMPETENCE FOUNDATION respect your right to privacy. Our main principles include: We will protect your privacy and we wish to offer you tailor-made service. Personal data is collected for specific purposes based on your consent or on a legitimate interest when you interact with us. You have the right to be informed about and to access your personal data at any time you like and may request correction or deletion. We do not sell your personal data to anyone. However, if need be and if explicitly mentioned subsequently or if you have consented to it, we may share your data with partners and other service providers via which their own privacy notice may apply. We ensure that we will take all reasonable steps in order to protect your data from misuse and keep it secure.
Lindt Chocolate Competence Foundation privacy notice
We appreciate you visiting and using our websites, our online shops, our applications and our social media pages (called the “Sites”). We trust you will enjoy learning more about LINDT CHOCOLATE COMPETENCE FOUNDATION and the story of our services. This Privacy Notice explains how and for what purposes we use the information collected about you through our Sites, our offline programs, your visits to our museum.
WHEN DOES THIS PRIVACY NOTICE APPLY?
HOW IS DATA COLLECTED BY LINDT CHOCOLATE COMPETENCE FOUNDATION?
ABOUT CHILDREN’S PERSONAL DATA
WHY DO WE COLLECT PERSONAL DATA AND USE IT?
WHY DO WE SHARE PERSONAL INFORMATION TO OTHER PARTIES?
1. WHEN DOES THIS PRIVACY NOTICE APPLY?
We here at LINDT CHOCOLATE COMPETENCE FOUNDATION respect your right to privacy when you use our Sites or when you interact with us in our museum. By using our Sites or by providing personal data, you in turn accept the practices described in this Privacy Notice. If you do not agree to this Privacy Notice, we suggest you refrain from using or visiting our Sites or providing personal data.
LINDT CHOCOLATE COMPETENCE FOUNDATION reserves the right to make changes to this Privacy Notice at any time, so make sure you review it regularly. The changes will be effective when posted on this Website and we will provide you reasonable notice of any material change.
2. HOW DO YOU CONSENT?
We will only collect, use or disclose your personal information where it is fair and lawful to do so. In most cases, we will request your consent explicitly. In addition, we will process your personal data for legal purposes, to perform a contract or based on our legitimate interests.
We will ask you to provide additional consent if we need to use your personal information for purposes not covered by this Privacy Notice. You are not obliged to give such consent but if you decide not to, your access to some activities may be limited. Finally, you may revoke your consent at any time with effect for the future.
3. HOW IS DATA COLLECTED BY LINDT CHOCOLATE COMPETENCE FOUNDATION?
3.1. PERSONAL DATA
This Privacy Notice applies to personal data that LINDT CHOCOLATE COMPETENCE FOUNDATION collects from individuals or entities via a number of sources (for example websites, online shops and mobile apps, social networking sites, events or consumer engagement services) and, in some instances, from third parties.
3.2. TYPES OF PERSONAL DATA COLLECTED
LINDT CHOCOLATE COMPETENCE FOUNDATION only collects personal data necessary for a specific purpose. We collect the following personal data:
Personal data you share with us directly
We collect personal data when you request information about us, purchase our services, register for a contest, or use an application of our company. You will be informed what kind of data is mandatory and what kind of data may be provided by you on a voluntary basis. The types of personal data include:
|
Information collected automatically when you interact with our Sites
We also use cookies and other tracking technology which collect certain kinds of information when you interact with our websites and apps, such as IP addresses, browsing preferences and pages you have viewed, as well as information about your navigation experience (time of the visit). You can read more in our Cookie Notice.
We collect personal data from third party social networking sites (such as the “Like” functionality on Facebook, the “Follow” functionality on Twitter or the YouTube functionality) through so called social plug-ins. The purpose of the data collection by LINDT CHOCOLATE COMPETENCE FOUNDATION via plug-ins is to allow you to share our content on your own social media pages. The further processing and use of the data by the providers on their pages as well as the rights and setting options for the protection of your privacy can be found in the data protection references of the respective providers. If you do not want LINDT CHOCOLATE COMPETENCE FOUNDATION or the third party social networking site to allocate data collected through our Sites to your account with this social network, you must log out of the respective social networking site before visiting our Sites.
4. ABOUT CHILDREN’S PERSONAL DATA
Most of our Sites are designed and intended for use by adults. Where a Site is offering content to a younger audience, we will gather consent from a parent or guardian prior to collecting personal data where we feel it is appropriate or where it is required by applicable laws and regulations (the age of consent varies per country). If we detect that children’s personal data has been transmitted to us, it will be deleted from our database. The parents (or legal guardians) of the child may contact us and request deletion of the data or de-registration (contact details see below). For this purpose, we may ask for a copy of an identification document, confirming the parental or guardian relationship.
5. WHY DO WE COLLECT PERSONAL DATA AND USE IT?
LINDT CHOCOLATE COMPETENCE FOUNDATION collects and uses personal data for a range of purposes. You can object to each of this data processing at any time (contact details see below). Your data is collected for the following purposes:
to allow you to create and access your user account including any loyalty program associated with your account. In these cases, we process your data for the performance of a contract or request according to Art. 6 para. 1 lit. b GDPR.
to process your orders and purchases we process your data for the performance of a contract or request according to Art. 6 para. 1 lit. b GDPR.
to develop consumer engagement and provide you a tailored consumer service, such as:
to send you information, that you have requested. In these cases, we process the data based on your consent according to Art. 6 para. 1 lit. a GDPR.
to get you more actively engaged with our services by publishing your content for example. In these cases, we process the data based on your consent according to Art. 6 para. 1 lit. a GDPR.
to contact you in relation with your queries, complaints or comments, via email, letter, telephone. In these cases we process your personal data, including possible special categories of personal data you provided with your prior consent, in order to process your specific request according to Art. 6 para. 1 lit. b GDPR.
to use it for contests or promotions you have entered you are affiliated with, such as:
to administrate contests or promotions. In these cases, we process the data to perform a contract according to Art. 6 para. 1 lit. b GDPR.
to publish the details of the winners, based on winner’s consent (Art. 6 para. 1 lit. a GDPR; where required), a legal requirement (Art. 6 para. 1 lit. c GDPR) or our legitimate interest (Art. 6 para. 1 lit. f GDPR); as defined in the official rules or details posted with each contest/promotion.
to allow you to participate in our loyalty program and interact with us within the program. In these cases we process the data based on your consent, where necessary, according to Art. 6 para. 1 lit. a GDPR and in order to execute the respective loyalty program according to Art. 6 para. 1 lit. b GDPR.
to contact you for marketing purposes, including direct marketing and social features within social networks: In the following cases you give your consent for the processing of such data according to Art. 6 para. 1 lit. a GDPR:
to send you our newsletters, if you have subscribed to such a service.
to suggest services which we think may be of interest to you.
to offer you the opportunity to take part in competitions or promotions.
to contact you via mobile message service if you have subscribed to such services. If done via a partner, we will communicate its name to you.
to improve our Sites and/or to combine with information we receive from others in order to help understand your needs and offer you with better service, including customizing sites for you and serving you interest-based advertising. In the following cases, we have legitimate interest to process the data according to Art. 6 para. 1 lit. f GDPR, if not otherwise indicated:
to evaluate the use of our Sites, using data such as information about account login, computer usage, and/or previous website usage.
to evaluate the use of our Sites with tracking-tools used based on user’s consent in accordance with Art. 6 para 1 lit. a GDPR or on our legitimate interest in accordance with Art. 6 para 1 lit. f GDPR. Find out more in our Cookie Notice.
to improve our products and services using demographic information, consumer profiling and consumer feedback. In these cases, we process data based on your consent according to Art. 6 para. 1 lit. a GDPR,
to analyse the effectiveness of our advertisement and promotions, via cookies or tracking technologies based on your consent according to Art. 6 para. 1 lit. a GDPR or on our legitimate interest in accordance with Art. 6 para 1 lit. f GDPR.
to personalize your website experience based on targeted advertising. In these cases, we process data based on your consent according to Art. 6 para. 1 lit. a GDPR. Find out more in our Cookie Notice.
to offer you social features via community forums, tell-a-friend program or social networking features such as Facebook Connect. In these cases, we process the data based on your consent according to Art. 6 para. 1 lit. a GDPR.
to process your job application for employment and possibly to determine whether you would be suitable for other positions available with our company. In these cases, we process your data for the performance of a contract or request according to Art. 6 para. 1 lit. b GDPR or based on your consent (where required) according to Art. 6 para. 1 lit. a GDPR.
for internal governance, security and case management. In the following cases, we have legitimate interest to process the data according to Art. 6 para. 1 lit. f GDPR:
to maintain the day-to-day operation, the maintenance and the security of LINDT CHOCOLATE COMPETENCE FOUNDATION Sites.
to conduct demographic studies or audits.
to contact you for consumer research.
to manage risks, disputes and records.
To comply with legal and regulatory requirements. In these cases, we process your data to the extent necessary for compliance with legal obligations to which we are subject according to Art. 6 para. 1 lit. c GDPR.
6. WHY DO WE SHARE PERSONAL INFORMATION WITH OTHER PARTIES?
LINDT CHOCOLATE COMPETENCE FOUNDATION does not share your personal information with any third party that intends to use it for direct marketing purposes, unless you have provided specific consent in relation to this. We disclose your personal data to the following categories of recipients:
|
Find out more about the recipients:
|
The subjects and entities indicated above will process the data in their quality as autonomous data controllers pursuant to applicable law or as data processors. We require such third parties, possibly based outside the country from which you have accessed the Sites, to comply with all relevant data protection laws and security requirements in relation to your personal data. Such third parties are obliged to protect data privacy to the same extent as we do ourselves. If the level of data protection in a country does not comply with Swiss or EU data protection laws, we contractually ensure that the protection of your personal data is the same as that in Switzerland or the European Economic Area (EEA) at all times.
Find out more about the processing of data in the USA
Various third-party service providers have their residence in the USA. We would like to point out to users residing or based in Switzerland/EEA that in the USA there are monitoring measures taken by the US authorities that generally allow the storage of all personal data relating to all persons whose data has been transferred from Switzerland/EEA to the USA. This happens without differentiation, limitation or exception based on the aim pursued and without an objective criterion that makes it possible to limit access to the data by US authorities and its later use to very specific, strictly limited purposes that may justify the intervention associated with both access to this data and use thereof. We would also like to point out that there are no judicial remedies in place in the USA for affected persons from Switzerland/EEA that would make it possible to receive access to the data relating to them and to have this corrected or deleted, as well as no effective legal protection against general access rights by US authorities. We refer the persons affected explicitly to this legal and factual situation so that they can make an appropriately informed decision on whether or not to consent to their data being used.
For users residing in EU Member States particularly, please note that, from the point of view of the European Union, the USA does not have sufficient data protection levels due, inter alia, to the issues mentioned in this section. To the extent that we have explained in this Privacy Notice that recipients of data (such as Google, Facebook and Twitter) are located in the USA, we will either based on a contract or by securing certification of these companies under the EU-US -Privacy Shield or the Swiss-US-Privacy Shield ensure that your data is protected at an appropriate level by our partners.
If we propose social plugins or if you connect your Account to your accounts on third party platforms like Facebook, we can collect and process account related information. If you connect with Facebook, your Facebook identity, name, email, location, friends list and profile picture will be stored and is used to connect with your Facebook account to provide certain functionality on the Sites. The third-party platform’s use of information collected from you (or as authorized by you) is governed by its own privacy notice and your settings on the service. For further information please check the privacy notice of the respective social network.
7. HOW DO WE STORE AND SECURE DATA AND FOR HOW LONG?
LINDT CHOCOLATE COMPETENCE FOUNDATION takes all reasonable technical and organisational measures to protect the personal data we hold against loss, unauthorised access or disclosure and against other misuse. Personal data will not be sold, shared or otherwise disclosed or transferred to any other third parties except as provided in the Privacy Notice.
We keep your personal data for as long as necessary for the given purpose, such as to send you our newsletter and other marketing communication, answer queries, resolve problems or provide improved and new services, or for legal requirements. We are allowed to retain the data for a reasonable time after you stop using our services. After a certain period, we will destroy or delete it in a secure manner, if there is no legal obligation to retain the information for a longer period.
In particular, we only keep personal information as long as needed:
a) to carry out services that you requested or to which you have given your consent to the extent specified above;
b) to use tracking advertising and analysis services within the scope of our legitimate interest.
In general the following duration periods apply:
|
We use suitable technical and organisational security measures that seem appropriate to us to protect your data stored by us from manipulation, partial or total loss and unauthorised access by third parties. Our security measures are continuously updated according to technological developments. We also take the protection of our own internal company data very seriously. Our staff and the service providers engaged by us are obligated to maintain confidentiality and to comply with the data protection regulations. Moreover, these are granted access to personal data only as far as is necessary.
8. WHAT ARE YOUR RIGHTS?
You can any time object to data processing. You have the following rights:
Right to access: You have the right to demand an insight into your personal data saved with us any time and free of charge if we are processing this data. You can check as to which of your personal data is being processed by us, and that we are using it according to the applicable data protection regulations.
Right to rectification: You have the right to have incorrect or incomplete personal data corrected and to be informed about the correction. In this case, we inform the recipients of the data concerned about the corrections made unless this is impossible or associated with disproportionate effort.
Right to deletion: You have the right to have your personal data deleted under certain circumstances. In the individual case, the right to deletion may be excluded.
Right to restriction of the processing: Under certain conditions, you have the right to demand restriction of the processing of your personal data.
Right to data portability: Under certain circumstances, you have the right to get the personal data that was provided to us by you free of charge in a machine readable format.
Right to lodge a complaint with the supervisory authority: You have the right to appeal to a competent supervisory authority against the method of the processing of your personal data.
Right of revocation: You have the right to revoke an issued consent at any time. Processing activities in the past based on your consent shall, however, not become illegal through your revocation. You may exercise your rights by contacting us at privacy@lindt-cc-foundation.org
If you have an account with LINDT CHOCOLATE COMPETENCE FOUNDATION, you can use the corresponding options directly in your account and change for example your opt-in/opt-out preferences.
9. HOW TO CONTACT US
Lindt Chocolate Competence Foundation, Seestrasse 204, 8802 Kilchberg, Switzerland, registered in Switzerland under company number CHE‑356.778.96, is operating this Website and the Sites referring to this Privacy Notice. Lindt Chocolate Competence Foundation acts as a “data controller” for the personal data it processes in the framework of this Privacy Notice and the compliance of our data processing with applicable Data Protection Regulations, including the EU General Data Protection Regulation (GDPR).
Should you be concerned about a possible interference with your privacy or misuse of your personal data by us, or if you have any questions or comments, you can contact via our online form: www.lindt-home-of-chocolate.com/en/contact/ by email privacy@lindt-cc-foundation.org or write to us using the address mentioned above.
© Lindt Chocolate Competence Foundation 2023
