Privacy Policy

1. Data Controller

The data controller for this website is Mond, Zurich, Switzerland. You can reach us at moritz@sommelia.ch for any data protection enquiries.

2. Data We Collect

We collect the following personal data when you use sommelia.ch:

• Account information (name, email address) when you sign in
• Order data (shipping address, purchase history, payment references)
• Chat conversations with our AI sommelier
• Taste preferences automatically extracted from your conversations
• Technical data (IP address, browser type, session identifiers) for site functionality and analytics

3. Purpose of Data Processing

We process your data for the following purposes:

• Fulfilling and shipping your orders
• Providing personalised wine recommendations via our AI sommelier
• Improving our service and product selection
• Complying with legal obligations (e.g., accounting, age verification)

4. AI Processing

Our sommelier uses OpenAI's language models to process your chat messages and generate recommendations. Your conversation content is sent to OpenAI for processing. We do not share your personal identity with OpenAI — conversations are processed without your name or account details.

Taste preferences extracted from conversations are stored in our database and used solely to personalise your experience on sommelia.ch.

5. Cookies and Local Storage

We use essential cookies for session management and authentication. We also use local storage to save your cart contents, language preferences, and country selection. We use Google Analytics 4 cookies to understand how visitors use our site (page views, popular wines, traffic sources) and Meta and Google Ads cookies to measure the effectiveness of our advertising. All analytics and advertising data is used in aggregate, anonymised form.

6. Third-Party Services

We share data with the following service providers, only to the extent necessary:

• Stripe — for secure payment processing (subject to Stripe's privacy policy)
• OpenAI — for AI sommelier chat processing (subject to OpenAI's data usage policies)

7. Data Retention

We retain your account data and order history for as long as your account is active, or as required by Swiss accounting and tax law (currently 10 years for financial records). You may request deletion of your account and associated data at any time.

8. Your Rights

Under the Swiss Federal Act on Data Protection (nDSG) and, where applicable, the GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing activities

To exercise any of these rights, contact us at privacy@sommelia.ch.