CAREISTA.ch – Privacy policy

of

CAREISTA | BeverFood AG (BeverCare)
Chaltenbodenstrasse 6C
8834 Schindellegi
Switzerland
E-mail: hello@careista.ch
Phone: +41 44 520 5275

Status: 01.08.2025
Version: 1.02

CAREISTA | BeverFood AG (BeverCare), Chaltenbodenstrasse 6C, 8834 Schindellegi, Switzerland (“BeverCare”) is responsible (see definition below) for the processing of personal data in accordance with this privacy policy. The contact person responsible for data protection at BeverCare can be reached at the above postal address or e-mail address with the note “Data protection” or by telephone at the above telephone number.

1. DEFINITIONS

Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller (processor).
Personal data is information relating to an identified or identifiable (i.e. identified or identifiable) natural person, such as name, address, telephone number, e-mail address, date of birth, etc. (personal data). (personal data).

The controller is a natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data(controller or responsible party).

Any handling of personal data, regardless of the means and procedures used, in particular the collection, procurement, storage, use, processing, disclosure, archiving or deletion of data, is considered processing(processing or processing).

The website refers to the online platform or the website or webshop www.careista.ch or corresponding subpages(website).

2. PURPOSES OF PROCESSING

BeverCare processes the following personal data for the following purposes:

2.1 Optimization and personalization of our website and our services

Type of personal data
IP address; see in particular paragraph 7.5 regarding Google Analytics
Purpose of use
Optimization and personalization of our website and our offer as described in more detail in paragraph 7 below

2.2 Marketing

Type of personal data
First name; last name; gender; address; telephone number (mobile); e-mail address

Intended use
Marketing or direct marketing purposes to inform you about publications, events, news, services, products and/or offers from BeverCare or third parties that may be of interest; see also paragraph 8

2.3 Fulfillment of contracts and communication with customers

Type of personal data
First name; surname; gender; address; telephone number (mobile and landline); e-mail address; date of birth; any other data transmitted to BeverCare in the course of fulfilling the contract

Intended use
Processing of the respective contractual relationship or the pre-contractual relationship regarding the sale and delivery of products and in particular the sending of the corresponding order and delivery notifications to customers by e-mail

2.4 Fulfillment of contracts with business partners

Type of personal data
First name; surname; gender; address; telephone number (mobile and landline); e-mail address; account numbers; any other data whose processing is necessary in the context of the processing of a contractual relationship with BeverCare or which is provided or made available to BeverCare by business partners; any other relevant data provided to BeverCare in the course of the contractual relationship or the pre-contractual relationship

Intended use
Planning, implementation and management of the (contractual or pre-contractual) business relationship between BeverCare and the business partner

3. PROFILING

BeverCare may process and link personal data in order to try to find out more about you and, in particular, to evaluate certain key personal aspects (such as occupation, economic circumstances, personal interests, place of residence, family situation, behaviour) (if necessary automatically) so that BeverCare can, for example, better predict which products and services you might be interested in in order to make you individualized offers and suggestions.

4. STORAGE

BeverCare stores personal data as follows:
If no explicit storage period is specified at the time of collection, the personal data will be deleted if it is no longer required to fulfill the purpose for which it was collected (see paragraph 2 above), unless statutory retention obligations (e.g. retention obligations under commercial and tax law) prevent deletion.

5. CONSENT, LEGAL BASIS, REVOCATION AND DATA PROTECTION RIGHTS

If this is required under the applicable data protection regulations, we will request your consent to the processing of your personal data, which will then form the legal basis for the processing. However, you hereby acknowledge that the legal basis for the processing – depending on the circumstances and the applicable data protection law – may also lie in the performance of the contract, in the implementation of contractual or pre-contractual measures or in the protection of legitimate interests, provided that the applicable data protection regulations require such a legal basis at all. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. In addition, depending on the circumstances and the applicable data protection law, you have, in particular

– the right to disclosure of or access to the personal data concerned;
– the right to rectification, erasure or restriction of processing of personal data;
– the right to object to the processing;
– the right to lodge a complaint with a competent supervisory authority; and
– the right to data portability (i.e. to receive the personal data in a commonly used electronic format).

The above rights do not affect personal data that is processed for you as part of an ongoing contractual relationship or service provision or that we are required or permitted to retain for legal reasons.

With regard to revocation, exercising your other data protection rights and other questions, suggestions and comments on the subject of data protection, please contact the person responsible for data protection using the contact details given at the beginning.

6. DATA TRANSMISSION

BeverCare will not pass on your personal data to third parties unless

– this is explicitly stated otherwise in this privacy policy (see below in this paragraph 6);
– this is necessary to protect your interests
– this is necessary to fulfill, establish, manage, perform or maintain your business relationship with BeverCare;
– you have given your prior consent.

In addition, BeverCare will appoint processors for hosting, maintenance, administration, storage and other services (such as logistical processing, returns, customer service/support, product deliveries/transport, backup, cloud storage, CRM, other IT services, HR services, (e-mail) marketing services, financial services such as accounting and fiduciary services), which process personal data to the extent necessary for the fulfillment of such above-mentioned or similar purposes.

In this context, some of your personal data may be stored or processed outside Switzerland and the European Union (or the EEA), including in countries that do not have a comparably strict level of data protection (such as the USA in particular). If BeverCare stores or transmits personal data outside Switzerland or the European Union (or the EEA), BeverCare will take all reasonable steps required by applicable data protection law to ensure that your personal data is nevertheless processed securely and in accordance with this Privacy Policy. In this case, BeverCare will generally ensure appropriate data protection by entering into binding standard data protection clauses, which have been approved in advance by the competent supervisory authority, with the recipient of the personal data in such an “insecure” third country.

7. DATA PROCESSING THROUGH USE OF THE WEBSITE

By using the website, you consent to your data being stored and/or processed in accordance with the provisions of this privacy policy.

7.1 SSL encryption

This website uses SSL encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

7.2 Server log files

The provider of this website automatically collects and stores information in so-called “server log files”, which your browser automatically transmits to BeverCare. These are in particular

– Browser type and browser version;
– Operating system used;
– Referrer URL;
– Host name of the accessing computer;
– Time of the server request;
– IP address.

This data is not assigned to specific persons. This data is not merged with other data sources. BeverCare reserves the right to analyze this data retrospectively and, if possible, to allocate it if concrete indications of unlawful use become known.

7.3 Use of cookies

7.3.1 Definition
Cookies are small files that are stored on your computer or mobile device when you use our website.

7.3.2 Mandatory and non-mandatory cookies
Mandatory cookies are data that are sent to the browser on your computer’s hard disk so that we can offer you certain functions.

We use non-mandatory cookies to collect information about visits to the website. In addition, we use non-mandatory cookies to improve the user-friendliness of the website, for example to adapt our offer to customer requirements and to make surfing the website as convenient as possible for you. We also use cookies to optimize our advertising. Cookies allow us to present you with advertising that may be of particular interest to you based on your use of our website. Our aim is to make our website as attractive as possible for you and to present you with advertising that matches your areas of interest.

7.3.3 Session cookies and permanent cookies
So-called “session cookies” are automatically deleted at the end of your visit.
We also use permanent cookies. These remain stored on your computer or mobile device after the end of the browser session until you delete them. When you visit our website again, it will then automatically recognize which inputs and settings you prefer. Depending on the type of cookie, these cookies remain stored on your computer or mobile device for between one month and ten years and are automatically deactivated after the programmed time has expired. They are used to make our website more user-friendly, effective and secure. Thanks to these cookies, for example, you will be shown information on the site that is specifically tailored to your interests.

7.3.4 Web analysis tools
In order to constantly improve and optimize the Internet offer, this website uses Google Analytics, a web analysis service of Google LLC (USA) and/or Google Ireland Limited (Ireland) (together Google).

These web analysis or web optimization services provide BeverCare with data, evaluations, statistics and graphics that provide information about the use of this website. The data on the use of this website is transmitted to the server used for this purpose in the USA and/or Ireland and/or the Czech Republic.

Apart from IP addresses (which are only transmitted to these services in full in exceptional cases), no personal data is stored in the cookies used by these services.

7.3.5 Activation, deactivation and deletion ofcookies
All web browsers offer the option of activating, deactivating or deleting the use of cookies by configuring the browser settings or options accordingly. If cookies are completely or partially deactivated or deleted, not all functions of the website may be available.

7.3.6 Cookies and personal data
Apart from IP addresses (which may constitute personal data), no personal data is stored in the cookies we use. The cookies we use are not assigned to any specific person. When a cookie is activated, it is assigned an identification number.

7.4 Script libraries

In order to deliver content correctly, we use script libraries and font libraries (e.g. Google Web Fonts) on our website. Calling up a script or font library triggers a connection to the library provider. It is possible that the provider of the library collects data from this connection.

7.5 Google Maps

We use an interface to geo-specific data from Google to visualize location-based information. Google records and uses data about the use of the map function. Information on the use of data by Google can be found in Google’s privacy policy.

7.6 Links to other websites and social plugins

The website contains links to other websites. BeverCare has no influence on whether their operators comply with the applicable data protection regulations. BeverCare excludes any responsibility or liability for the websites of third parties accessible via the links.

Social plugins from various social network providers may be used on this website. By means of these plugins, information, which may also include personal data, can be used by the corresponding social networks. If the data subject is logged into a social network at the same time as visiting our website, it can be assumed that personal data will be transmitted. We have no influence over which data is used. We do not record any personal data from social plugins. The privacy policies of the relevant social networks provide information about the collection, processing and use of personal data.

8. NEWSLETTER

It is possible for you to register for the careista.ch newsletter using a form or by e-mail. We will use software designed for this purpose to send the newsletter, which guarantees compliant data protection.

You can unsubscribe from newsletters at any time. There is a corresponding unsubscribe link in every newsletter. If this link is missing, please contact the data protection officer on our website (see at the very beginning of this privacy policy). Our newsletter may contain a tracking pixel. A tracking pixel is a miniature graphic that is embedded in such emails to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns to be carried out. The analysis can be anonymized or based on personal data.

9. SAFETY AND LIABILITY

BeverCare takes appropriate measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration or destruction. To this end, BeverCare uses appropriate technical and organizational security measures that are continuously improved in line with technological developments. However, BeverCare cannot guarantee the absolute security of the data. To the extent permitted by law, BeverCare hereby expressly excludes all liability for any loss or damage that you may suffer or have suffered directly, indirectly, indirectly or directly in connection with breaches of this data protection declaration, data processing by BeverCare, your use of the website or information on the website. In addition to BeverCare, this exclusion of liability also exempts its partners, directors, bodies, employees and representatives.

10. THIRD PARTY CONSENT

If you are acting as an agent or otherwise on behalf of, or providing information to BeverCare through, a third party, you hereby represent that you are an authorized representative or agent of such third party and/or that you have obtained all necessary consents (as required by applicable law) from such third parties to the collection, processing, use and disclosure of their personal data to us and/or that you meet all other requirements under applicable law to allow us to process such third parties’ personal data as agreed.

11. FINAL PROVISIONS

BeverCare reserves the right to change the content of this privacy policy at any time and without notice. It is therefore recommended that you consult this privacy policy regularly.

Should one or more provisions or parts of this privacy policy be or become invalid or void, this shall not affect the validity of the remaining provisions. In the event of the invalidity or nullity of a provision, it shall be replaced by a valid provision that comes closest to the purpose of the invalid or null and void provision against which this data protection declaration is in breach.

Subject to any mandatory applicable data protection laws, this Privacy Policy is governed by Swiss substantive law, excluding its conflict of law rules. The exclusive place of jurisdiction is the City of Zurich, Switzerland (Zurich 1).

***