Last updated: 1 August 2026
1. Who is responsible
Bier Factory Rapperswil AG, CH-8645 Rapperswil, Switzerland, operates swiss-beer-abo.ch and is responsible for the personal data described here. Questions, or any request under section 8: beer@swiss-beer-abo.ch.
2. What we collect, and why
We collect what an order needs, and not more.
- Your details — name, email address, billing address, and optionally company and phone number. Used to take payment, send your invoice and order confirmation, and contact you about your subscription.
- The recipient’s details — name, delivery address and, if you give one, a phone number for the courier. Used to deliver the boxes. See section 3.
- Your gift — the message and sender name printed on the certificate, the occasion, the recipient’s language, and whether and from what date we may write to the recipient.
- Your order — plan, start month, delivery schedule and payment status.
- Age verification — see section 5.
We do not build profiles, and we do not sell personal data to anyone.
3. The person you are gifting
A gift order means you give us somebody else’s name and address. We use it to deliver the boxes, and to write to them only if you ask us to.
If you choose “Never”, the recipient hears nothing from us at all and everything goes through you. If you give a date, we write to them only from that date, and only about their boxes and their delivery. We do not add the recipient to any mailing list and we do not use their address for advertising.
Please make sure the recipient is happy for you to give us their address. If they contact us, we will tell them what we hold about them and delete it on request, within the limits of section 7.
4. Who else sees your data
We use service providers who act on our instructions and only for the purpose named:
- SumUp and TWINT — payment. Card details are entered with the payment provider and never reach us.
- Swiss Post and Planzer — delivery. They receive the recipient’s name, address and, if given, phone number.
- Didit — age verification, section 5.
- Hostpoint — hosting of this website and its database, in Switzerland.
- Google — website statistics and advertising measurement, section 6.
Some of these companies are based outside Switzerland or process data outside Switzerland. Where that happens, we rely on the safeguards Swiss data protection law requires. We give personal data to nobody else, and to nobody for their own purposes.
5. Age verification (18+)
Everything we sell is alcoholic, so we confirm once — before your first order — that you are at least 18. The check is carried out on our instructions by our processor Didit; we remain responsible for it.
You give Didit a short selfie. Didit records the session and estimates your age from it, and asks for an identity document only if that estimate is not clearly over 18. A selfie is biometric data and therefore particularly sensitive personal data under Swiss data protection law. It is processed only by Didit, only for this check, and is never passed to us.
What we keep is the outcome and nothing else: that an email address is confirmed as 18+, how it was confirmed, and the date — stored against a one-way cryptographic hash of the address rather than the address itself. We never receive or store your photograph, your identity document, the name on it, or your date of birth. As soon as the outcome is recorded we instruct Didit to delete the session; sessions that are abandoned or refused are deleted by Didit within one month.
The full clause is number 4 of our terms. Didit’s own privacy policy applies in addition: didit.me/terms/privacy-policy/.
6. Cookies and website statistics
Simply browsing this site sets no cookies at all. Putting something in your basket sets WooCommerce’s cart and session cookies, which are strictly necessary — without them the shop cannot remember your basket from one page to the next. They expire on their own.
We use Google Analytics and Google Ads measurement. Both are loaded with Google Consent Mode set to deny storage for visitors in Switzerland and the EU, and we run no banner that grants it. In practice that means no analytics or advertising cookies are set, and nothing is stored on your device for those purposes. If we ever change that, we will change this page at the same time.
You can refuse or delete cookies in your browser settings. Refusing the strictly necessary ones will stop the basket working.
7. How long we keep things
- Orders and invoices — ten years, as Swiss accounting law requires.
- Subscription and delivery data — for the life of the subscription, and then within the ten-year period above.
- The age-verification record — kept indefinitely, because the check is one-time and does not need repeating. You may ask us to delete it; you would then verify again on your next order.
- Emails you send us — for as long as we need them to deal with the matter.
8. Your rights
You may ask what personal data we hold about you and receive a copy; have inaccurate data corrected; have data deleted where we are not obliged to keep it; object to a particular use; and receive the data you gave us in a portable form. Write to beer@swiss-beer-abo.ch and we will answer. If you are not satisfied, you may contact the Federal Data Protection and Information Commissioner (FDPIC) in Bern.
9. Changes
This statement describes the site as it works today. If we change how we handle data — a different age-verification method, a new service provider, or cookie consent — we will update this page at the same time.
