WANDER Privacy Notice

Welcome to our websites. We hope that you will enjoy learning more about WANDER and our products here. 

WANDER respects your right to privacy. This means that you can expect us to treat your data sensitively and care-fully, and to ensure a high level of data security. 

We process your personal data solely within the scope of the applicable data protection regulations, which we in-form you about in this privacy policy for natural persons. Information about cookies that are placed via our web-sites, about the use of social media and about particular online tools is available in our special Cookie Guidelines.

Our websites are:
www.wander.ch
www.ovomaltine.ch
www.ovomaltine.de
www.ovomaltine.com
www.ovomaltine.at
www.caotina.ch
www.caotina.com
www.twinings.ch
www.twinings.de
www.twinings.at
www.isostar.ch
www.modifast.ch
www.jemalt.ch
www.dawa.ch
www.shop.wander.ch

1. Contacts

1.1 Name and address of the responsible entity and the data protection coordinator
The responsible entity within the meaning of the General Data Protection Regulation (GDPR) and national data protection legislation is:

WANDER AG
Data protection coordinator
Fabrikstrasse 10
3176 Neuenegg
Switzerland
Tel.: +41 31 377 21 11
Email: datenschutz@wander.ch 
Website: www.wander.ch

1.2 Processor
You can contact our processor at the following email address: datenschutz@wander.ch.

2. Purposes of processing

We process your personal data for the following purposes:
•    to display and optimise website contents
•    at your request, to get in touch with you and/or provide regular information about our activities and offers (newsletter) 
•    to display, supply, deliver and customise WANDER products.
•    to communicate in relation to WANDER products
•    to know your needs so that we can tailor our offers of WANDER products to you
•    to report on the sponsoring commitment of WANDER.
•    to run competitions
•    to register you as a customer and create your account if you decide to open one
•    application process
•    to use data analytics to improve our website, products, marketing, customer relationships and experiences
•    to help maintain the security of our websites
•    to fulfil our legal obligations

3. Types of personal data

We process the following types of personal data:
•    basic data (e.g. names and addresses)
•    contact data (e.g. email and telephone numbers)
•    content data (e.g. text inputs)
•    usage data (e.g. websites visited, access times)
•    meta/communication data (e.g. IP addresses, device information, information in communications you send to us)
•    account data (e.g. gender, age, social media account name and any information we collect about your use of our social media accounts)
•    data related to the ordering and payment process
Please see Visiting our website  below for further information.  

4. Legal basis for processing

The following regularly provide us with the legal basis for processing your personal data:
•    your consent, which you can withdraw at any time (e.g. to receive our newsletter or register for a customer account) 
•    conclusion or performance of a contract with you or your enquiry in the lead-up to concluding a contract (e.g. if you order products from us or submit a job application) 
•    where the processing is necessary for our legitimate interests (e.g. studying how our customers use our products, preventing fraud and providing customer service) 
•    where the processing is necessary to comply with a legal obligation (e.g. compliance with relevant advertising rules and codes of practice)
Where required under applicable data protection laws, we have determined, acting reasonably and considering the circumstances, that we are able to rely on legitimate interests as the lawful basis on which to process your personal information in certain circumstances (we have stated this above and set out our legitimate interests). We have reached this decision by carrying out a balancing exercise to make sure our legitimate interest is not overridden by your privacy rights as an individual.

We consider that it is reasonable for us to process your information for the purposes of our legitimate interests outlined above as: (a) we process your information only so far as is necessary for such purpose; and (b) it can be reasonably expected for us to process your information in this way.  

Where we process your personal information on the legal basis of consent (as indicated above), you may refuse consent to our processing and you may also withdraw your consent at any time: (i) in respect of cookies and other tracking mechanisms on our Website, by using the cookie consent manager in our cookie notification banner, (ii) in respect of marketing communications, by clicking 'unsubscribe' in the footer of the relevant emails, or (iii) in respect of other matters, by using the contact details below. This would not affect your ability to use any features of our Website. Withdrawing neither affects any processing carried out without your consent (i.e. where we rely on another legal basis), nor the lawfulness of processing based on consent before its withdrawal.

Some of the information identified above, is collected by us through the use of cookies or similar technology when you visit our Website, or other websites or social media sites where we have included a cookie. In some cases, we will need your consent in order to place such cookies on your device. More information on the specific types of cookies we collect, our lawful basis and how to manage them can be found in our Cookies Policy.

5. Recipients of personal data

Your data will only ever be disclosed to third parties if this is necessary to perform the contract with you, if disclosure is lawful based on the balance of interests, if we are legally obligated to disclose it, or if you have given your consent for this to happen. However, your data is never sold on.

We will only disclose your personal information to: 

•    companies within our group for internal business purposed such as management, accounting and marketing;
•    e-commerce platform providers, payment gateway and payment service providers and suppliers of cookie-consent management solutions; 
•    other third-party suppliers, including business partners and sub-contractors for business administration, support, processing, services, or IT purposes;
•    our third-party logistics and delivery providers who deliver products to you on our behalf;
•    analytics or search engines, that enable us to optimise and improve your experience of our Website; 
•    third-party suppliers for marketing and advertising purposes (including (but not limited to) those as set out below), and agents who (on our behalf) tailor our marketing communications and offer you products we believe you would be interested in;
•    our regulators, law enforcement or fraud prevention agencies, as well as our legal advisers, courts, the police and any other authorised bodies, for the purposes of investigating any actual or suspected criminal activity or other regulatory or legal matters; 
•    our professional advisors (including without limitation tax, legal, insurance, or other corporate advisors who provide professional services to us); and
•    Regulators or other tax bodies or agencies to comply with our legal and regulatory obligations.

To the extent authorised by applicable laws, we will disclose your personal information to third parties:

•    in the event that we consider selling or buying any business or assets, merging with another business, financing our business, granting a charge over our assets or leasing or licensing our assets,  we may disclose your personal information to any prospective sellers or buyers of such business or assets;
•    in the event we are the subject of any insolvency situation (e.g., the administration or liquidation);
•    if we, or substantially all of our assets, are acquired by a third party, in which case personal information held by us about our customers will be one of the transferred assets; 
•    in order to enforce or apply our terms and conditions; 
•    to protect our rights, property, or safety, or that of our staff, our customers, or others. This includes exchanging information with other companies and organisations (including without limitation regulators, the local police or other local law enforcement agencies) for the purposes of staff and customer safety, crime prevention, fraud protection and credit risk reduction; and
•    if we are under a duty to disclose or share your personal information in order to comply with any legal obligation or regulatory requirements, or otherwise for the prevention or detection of fraud or crime.

We share your name, phone number, email address, gender, age, transaction history, social media account name, and any information we collect about your use of our Website or social media accounts with the parties set out below for the purpose of providing you with marketing and promotional materials:

•    Evalanche. Evalanche Privacy Policy 
•    Bloomreach. Bloomreach Privacy Policy
•    Advertising and social media platforms (who may process your personal data as joint controllers with us for these purposes), including:
 

  • Google. Google Privacy Policy; 
  • Facebook, and Instagram. Meta Privacy Policy;
  • Pinterest. Pinterest Privacy Policy;
  • Youtube. YouTube Privacy Policy;
  • LinkedIn. LinkedIn Privacy Policy;
  • TikTok. Privacy Policy;  
  • Snapchat. Snapchat Privacy Policy;  
  • Twitch. Twitch Privacy Policy.  
    (together our Ad Partners). 


    We process this information based on our legitimate interest in promoting our business and our products, or with your consent. We rely on your consent where the data is collected via a cookie (save for strictly necessary cookies).

    Once we have shared your personal data with our Ad Partners, they are responsible for ensuring your personal data is processed in accordance with Data Protection Laws. Please ensure you review their privacy policies (as set out above) carefully for further information. We will, however, take reasonable steps in the circumstances to ensure our Ad Partners afford a similar degree of protection to your personal information.

    Meta. Where you have consented for us to do so, we will collect and share your personal data with Meta Platforms Ireland Limited (Meta Ireland) in order to advertise to you via Facebook, and Instagram, and in certain instances we are the joint controller of your personal data with Meta Ireland. 

    We have entered into an agreement with Meta Ireland to ensure that your information is protected, and the steps we each shall take to comply with Data Protection Laws with regard to the joint processing of your information. 

    To exercise your rights in relation to your information, Meta Ireland will be your primary contact. Please contact Meta Ireland directly to:

    •    request access to your personal data;
    •    request correction of your personal data;
    •    request erasure of your personal data;
    •    object to the processing of your personal data;
    •    request restriction to the processing of your personal data; and/or
    •    request the transfer of your personal data.

    Further information regarding how to exercise your rights, together with the following further information, may be found in Meta Ireland's Privacy Policy and Terms of Service, including:

    •    how Meta Ireland processes your personal data in the capacity of a joint controller, including the legal basis that Meta Ireland relies upon for such use;
    •    how to exercise your data protection rights against Meta Ireland; and
    •    the name and contact details of Meta Ireland's data protection officer.
     

6. Data transmission abroad

Some data recipients are located in Switzerland and some are located abroad. Whenever possible, your data will be processed within the European Union or the European Economic Area or in Switzerland, a country with adequate data protection from the perspective of the European Union. If data is transferred to a country that does not have an adequate legal level of data protection (such as the United States), we require that the recipient take appropriate measures to protect personal data, e.g. by complying with the EU-U.S. Data Privacy Framework or agreeing to EU standard clauses. For more details and a copy of the EU standard contractual clauses, please visit  https://commission.europa.eu/law/law-topic/data-protection/internationa…;
Personal data collected via cookies set by our Ad Partners may be transferred by those Ad Partners outside of the EEA. Please refer to the relevant third-party privacy policy for further information.
 

7. Type and duration of processing

We process personal data for as long as is required for the respective purpose and we may store your details in a customer relationship management system (CRM system).
Insofar as statutory retention obligations exist, the respective data is stored for the duration of the retention obligation. After expiry of the retention obligation, we review whether a further necessity for processing exists. If a necessity no longer exists, the data is deleted.
Please see Visiting our website  below for further information.  
 

8. Your rights as an affected person

You have the following rights in respect of the personal information we hold about you:


•    To be informed: A right to be informed about the personal information we hold about you.
•    Of access: A right to access the personal information we hold about you.
•    To rectification: A right to require us to rectify any inaccurate personal information we hold about you.
•    To erasure: A right to ask us to delete the personal information we hold about you. This right will only apply where (for example) we no longer need to use the personal information to achieve the purpose we collected it for; where you withdraw your consent if we are using your personal information based on your consent; or where you object to the way we process your data.
•    To restrict processing: In certain circumstances, a right to restrict our processing of the personal information we hold about you. This right will only apply where (for example): you dispute the accuracy of the personal information held by us; where you would have the right to ask us to delete the personal information but would prefer that our processing is restricted instead; or where we no longer need to use the personal information to achieve the purpose we collected it for, but you need the data for the purposes of establishing, exercising or defending legal claims.  
•    To data portability: In certain circumstances, a right to receive the personal information you have given us, in a structured, commonly used and machine readable format. You also have the right to require us to transfer this personal information to another organisation, at your request.
•    To object: A right to object to our processing of the personal information we hold about you where our lawful basis is for the purpose of our legitimate interests, unless we are able to demonstrate, on balance, legitimate grounds for continuing to process the personal information which override your rights or which are for the establishment, exercise or defence of legal claims.
•    In relation to automated decision making and profiling: A right for you not to be subject to a decision based solely on an automated process, including profiling, which produces legal effects concerning you or similarly significantly affect you. We do not carry out any automated processing or profiling.
•    To withdraw: A right to withdraw your consent, where we are relying on it to use your personal information (for example, to provide you with brochures and newsletters). 
•    To complain: A right to lodge a complaint with a supervisory authority, in particular in your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes applicable data protection laws. Please see below for further details.
 

If you have any questions, suggestions or requests, please contact datenschutz@wander.ch.
You can opt-out of Google's use of cookies or device identifiers by visiting Google's Ad Settings. 
 

9. Right of appeal

We encourage you to contact us first at datenschutz@wander.ch if you have any queries, comments, complaints or concerns about the way we handle your personal information. However, if you are not satisfied with our handling of any request by you in relation to your rights or concerns, you also have the right to lodge a complaint about the processing with the supervisory authority responsible for data protection. The supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (EDÖB) (Feldeggweg 1, 3003 Bern, Switzerland). You may also complain to the local authority in the EU Member State in which you reside. To identify the relevant authority, see this link: https://www.edpb.europa.eu/about-edpb/about-edpb/members_de.
 

10. Data security

We take all reasonable technical and organisational measures to protect your personal data from manipulation, loss, destruction, unauthorised access or other misuse and to guarantee the protection of your rights and compliance with the applicable data protection provisions.

The measures taken are designed to guarantee the confidentiality and integrity of your data and to ensure the ongoing availability and capacity of our systems and services when processing your data. They are also designed to ensure the restoration of availability of your data and access to it in a timely manner in the event of a physical or technical incident.

The encryption of your data also forms part of our security measures. Data that you enter on our website is encrypted during transmission using HTTPS. All information that you provide online is transmitted via an encrypted transmission route. This means that the information cannot be viewed by unauthorised third parties at any time. 

Our data processing and security measures are updated continually in accordance with technological advances.

If you register with us as a user, access to your customer account is only possible after entering your personal password each time. You should always keep payment and access information confidential and close the browser window when you have finished your communication with us, in particular if other people use the same comput-er. 

We also take our own internal corporate data protection seriously. Our employees and the service providers who work on our behalf are obliged to maintain secrecy and comply with data protection provisions. Furthermore, ac-cess to personal data is only granted to these parties to the extent required.

Information we collect about your use of our Website is transferred to, and stored in, Switzerland. The European Commission considers that Switzerland offers adequate protection for personal data. Otherwise, we do not trans-fer your personal data to any country outside the European Economic Area.

11. Links to other providers’ websites

Our websites may contain links to other providers’ websites which this privacy policy does not cover. After you click on a link, we no longer have any influence on the processing of any data that may be transmitted to the third party by clicking on the link (e.g. IP address or URL of the link), since the conduct of third parties is naturally outside of our control. As a general rule, we are therefore unable to take any responsibility for the processing of your data by third parties. It could involve transferring data to any country, even without adequate data protection. Insofar as the processing of personal data is connected with the use of other providers’ websites, please take note of the data protection information supplied by the provider concerned.

If you still would like to know more about the topic, we hope you will find the following detailed information useful:

12. Visiting our websites

When you visit our websites, our servers temporarily store the following data in a server log file: 

  • IP address of the requesting computer
  • date and time of the access/retrieval
  • name and URL of the data retrieved
  • your computer’s operating system and the browser you use
  • country from which our website is accessed
  • name of your internet service provider
  • time zone difference from Greenwich Mean Time (GMT)
  • content of the request (specific page)
  • access status/HTTP status code
  • volume of data transmitted in each case
  • website last visited
  • browser settings
  • language and version of browser software
  • activated browser plug-ins

We have a legitimate interest in temporarily storing your personal data and log files in order to

  • deliver the contents of our website correctly, ensure its security and optimise the advertising for it
  • provide prosecuting authorities with the necessary information for prosecution in the case of a cyber attack
  • further improve what we offer and our internet presence
  • collect statistical data
  • process orders in our online shop

We will only keep information about your visit to our Website for as long as is necessary for the purposes we’ve mentioned. Typically we delete user browsing information every 26 months.

12.1 Marketing and promotional materials
You have the option of subscribing to our newsletter with your consent via our websites. We use our newsletters to inform you about us and what we offer. The mandatory details (marked with *) are required in order to send you a newsletter. Giving us more data voluntarily allows us to provide you with information that is even more targeted or coherent (e.g. in the case of mail-outs by post).

For the purpose of sending a one-off newsletter or mail-outs by post, we can also collect address data via sporting event organisers if one of our brands is acting as a partner for the event. Such sporting event organisers give us an undertaking that they will obtain the consent of the person affected in each case.

We use the services of Evalanche (SC-Networks GmbH, Enzianstr. 2, 82319 Starnberg) to send and evaluate the newsletter. You can view the data protection provisions of the mailing service here: https://www.sc-networks.ch/unternehmen/datenschutz/.

We may use your information to provide you with marketing and promotional materials (as stated above). In such instances, we will use your information to deliver promotional information that you have requested, or that we feel may interest you (unless you have previously told us that you do not wish to receive marketing communications from us).

The personalisation of advertisements displayed on social media platforms may be based on information you have provided directly to us (for example when browsing our Website or purchasing our products) or based on other information attributed to you via cookies, including cookies set by third parties. Please see our Cookies Policy  for more information.

You may opt-out of receiving marketing and promotional materials from us at any time by emailing us at datenschutz@wander.ch or using the 'unsubscribe' link in the marketing or promotional email.  Your personal data is deleted when you unsubscribe and if you withdraw your consent or raise an objection. Statutory retention periods still apply.
 

12.2 Getting in touch / interaction
You have the option of contacting us via our website and interacting with us, such as by sharing comments and posts (e.g. photos, videos and personal stories). The mandatory details (*) are required, and the others are volun-tary. This makes it possible for you to communicate with us, and vice versa, so that you can draw our attention to something or we can become aware of your needs.

Personal data collected in this context will be processed for the purpose of handling your request or interacting with you. You and we both have a shared legitimate interest in the processing of your enquiries and in enabling interaction with you. 

You may object to this processing at any time. Please send any objections to datenschutz@wander.ch

Your personal data will be deleted once the request you submitted has been resolved. Deletion will take place if it is evident from the circumstances that the subject matter of the request has been conclusively clarified and there is no statutory retention period that prevents deletion.

12.3 Competitions
When running competitions, we use your personal data to notify prize winners and to promote our offers. Further details can be found in our conditions of participation for each competition.

Your personal data will be processed for the purpose of running the competition and to fulfil legal obligations, as well as to serve our legitimate interests in connection with competitions and prizes. If you have consented to the processing of your personal data, we will process your data for the purpose specified in the declaration of consent. You may withdraw your consent at any time. Please send your withdrawn consent to datenschutz@wander.ch

12.4 Online shop
You can choose whether you would like to provide the data needed for the order only once for this order (“Order without an account”) or whether to create a customer account (“Register), in which case your personal data is saved for subsequent purchases. In the customer account, you can see data relating to your completed, open and recently dispatched orders or manage your personal data, amongst other things. In both cases, the mandatory de-tails (*) are required, and the additional details are voluntary. We will use the data that you have provided mainly to process your order. The basis for this is therefore the fulfilment of the contract with you. 

When you create a customer account, we store your data for the purpose of processing the order and will generally delete this once we are no longer legally required to store it.

If you would like to delete your customer account, email us at datenschutz@wander.ch. It is your responsibility to secure your personal data before the contract ends if you terminate the account. We are entitled to permanently delete all data stored during the contract period.

In the course of processing the order, the service providers used by us (such as carriers, logistics firms and pay-ment services [Datatrans AG, Mastercard, Visa] and online shop service providers) receive the data required to process the order. This data includes your email address and telephone number, order and transaction data. Fur-ther details about these providers’ privacy policies can be found on their websites.

12.5 Online job applications
If you apply for a job with us, we need your details to process your application. During the application process, the standard correspondence data such as postal address, email address and telephone number is stored in the appli-cant database along with your title, name and first name. In addition, all the documents submitted by you in con-nection with the application are recorded. This data is stored, evaluated, processed or forwarded internally solely in the context of your application. The data may be used for statistical purposes (e.g. reporting). It is not possible to identify any individual from this process.

Processing may also be carried out electronically. This is the case in particular if you transmit the corresponding ap-plication documentation by electronic means. Your data is then processed on the systems of our software partner www.abacus.ch/de. All the documents submitted by you in connection with the application are transferred to and stored in Switzerland. The European Commission considers that Switzerland offers adequate protection for per-sonal data. Otherwise, we do not transfer your personal data to any country outside the European Economic Area.

The basis for the processing of application data is our legitimate interest in conducting the application process. 

If we enter into an employment agreement with you, the transmitted data is stored for the purpose of executing the employment relationship in accordance with the legal requirements. If the application process ends without employment, your personal data is stored for three more months for documentation purposes and then deleted, provided that you have not given us your consent to retain your details for further application processes for a spe-cific period.

13. Consent Manager

Some of our web pages ask for your consent to store certain cookies on your end-user device and document this in accordance with data protection law. 
When you click on a relevant web page, the following personal data is transferred:
•    Your consent or revocation of your consent
•    Your IP address
•    Information about your browser
•    Information about your end-user device
•    Time of your visit to the web page
Furthermore, this information is stored in your browser so that the page can recognise your consent/revocation of consent. The data collected in this way will be stored until you request us to delete it or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.

You have the right to object to the processing of your personal data at any time.

Customize privacy settings

14. Amendments to the privacy policy

WANDER reserves the right to amend this privacy policy at any time. Please review this policy regularly. The policy was last updated on 4.12.2024.