Privacy policy

1. Responsible Party

MONO Drinks AG
Binzstrasse 23 · 8045 Zurich · hello@gripenshot.ch

MONO Drinks AG is responsible for processing your personal data within the meaning of the Swiss Data Protection Act (DSG).

2. Principles of Data Processing

We process personal data – information relating to an identified or identifiable person – in accordance with the principles of legality, proportionality, purpose limitation and data security.
We collect and use your data only to the extent necessary for the provision, execution and improvement of our services.

Contractual basis: Data processing is primarily carried out to fulfill our contract with you (product delivery, customer service). Our complete terms and conditions (T&C) can be found on our website.

3. Collection and Use of Personal Data

Depending on your use of our website or orders, we collect the following categories of data:

• Contact information: Name, address, email
• Order and payment data: ordered products, payment method, billing and delivery address
• Transaction information: Items you view, add to cart, add to wishlist or purchase, as well as your past transactions
• Communication data: Emails, support requests, newsletter subscriptions
• Account information: Username, password (stored encrypted), account settings
• Technical data: IP address, browser type, access times (to ensure operation)
• Usage information: Information about your interaction with the services, how and when you interact with or browse the services

Purpose of data use: Data is used exclusively for contract fulfillment, customer communication, quality assurance and legal documentation purposes.

Detailed purposes of use: Provision and improvement of services: Processing your payments, executing your orders, storing your configurations, sending notifications, managing your account, organizing shipping, handling returns, personalized shopping experience through product recommendations.

Marketing and advertising: Sending marketing emails (only with your consent), displaying online advertising for our products based on your previous purchases or shopping cart contents.

Security and fraud prevention: Authentication of your account, secure payment experience, detection of fraudulent activities.

Communication with you: Customer support, answering inquiries, maintaining business relationships.

Legal reasons: Compliance with applicable law, response to official requests.

3a. Newsletter and Marketing Communication

Registration: You can voluntarily subscribe to our newsletter. We use the double opt-in procedure: After entering your email address, you will receive a confirmation email. The registration is only active after clicking the confirmation link.

Content: The newsletter provides information about new products, offers and company news.

Unsubscribe: You can unsubscribe at any time by:
- Clicking the unsubscribe link in each newsletter
- Emailing hello@gripenshot.ch with subject "Unsubscribe newsletter"

Legal basis: Your explicit consent (Art. 6 Para. 6 DSG). Consent can be withdrawn at any time.

Delivery: Newsletters are sent via our service provider Klaviyo. Klaviyo processes your data on our behalf.

4. Data Processing by Shopify

Our online shop is operated by Shopify International Ltd., Ireland.
Shopify processes data on behalf of MONO Drinks AG to enable technical provision, payment processing and shipping process.
Shopify as processor and controller: For most functions, Shopify acts as a processor on our behalf. However, for certain advanced functions (e.g. Shopify Audiences, Shop Pay), Shopify itself is the controller for data processing.

Advanced Shopify features: To improve our business, we use advanced Shopify features that incorporate data from your interactions with our shop, other Shopify merchants and Shopify itself. For these features, Shopify is responsible for:
- Processing your personal data
- Responding to your requests to exercise your rights

More information: Shopify Privacy Policy for Consumers: https://www.shopify.com/legal/privacy

Exercise your rights with Shopify: For data that Shopify processes as controller, you can exercise your rights here: https://privacy.shopify.com
Data transfer may occur to countries with adequate data protection levels (e.g. Canada) or based on EU Commission standard contractual clauses.

Data hosting: Shopify hosts data on servers in:
- European Economic Area (EEA)
- Canada (adequate data protection level according to Federal Council decision)
- USA (for certain services, secured by EU standard contractual clauses)

Legal basis for international transfer:
- Art. 16 Para. 1 DSG (adequate data protection in Canada/EEA)
- Art. 16 Para. 2 DSG (standard contractual clauses for USA transfers)

Further information can be found in the Shopify Privacy Policy: https://www.shopify.com/legal/privacy

5. Cookies, Tracking and Profiling

Our website uses cookies and similar tracking technologies. Unless these are strictly necessary for the technical operation of the website (e.g., for the shopping cart), we only use them with your explicit consent (opt-in) via our cookie banner.

Tools Used and Profiling: With your consent, we use analysis and marketing tools from third-party providers, in particular Google Analytics, Google Ads, Meta Pixel (Facebook/Instagram), and Contentsquare. These tools record your user behavior on our website (e.g., viewed products, items added to the cart). We use this data to improve the user experience (e.g., using heatmaps and session replays) and to show you personalized advertising for our products on other platforms (retargeting). Through the automated evaluation of this user behavior, profiling within the meaning of the Swiss Data Protection Act (DSG) may take place to analyze your preferences. For more information about data collection and use, please visit the privacy policies of Google, Meta, and Contentsquare.

Revocation: You can revoke or adjust your consent at any time for the future by changing the cookie settings via the link in the footer of our website.

6. Disclosure of Data to Third-Party Service Providers and International Data Transfer

Your data is disclosed exclusively for contract fulfillment, if there is a legal obligation, or if you have expressly consented. There is no sale of your data.

To provide our services, we use carefully selected processors in the following categories:
• Email Marketing & SMS: (e.g., Klaviyo) for managing newsletters and system messages.
• Subscription Management: (e.g., Appstle) for processing recurring orders.
• Automation Processes: (e.g., Make) for the secure transfer of order data between our internal systems.
• Customer Reviews: (e.g., Judge.me) for collecting and displaying product reviews.
• B2B Portals & Accounting: (e.g., BSS B2B, Bexio Connector) for our business customers and accounting obligations.

International Data Transfer (Hosting Locations):
The service providers we use sometimes process your data at locations outside of Switzerland.
• Switzerland and European Economic Area (EEA, e.g., Ireland, Lithuania): An adequate level of data protection is legally recognized here by Federal Council decision.
• USA: Some of our service providers (especially for reviews, subscriptions, and B2B solutions) host data on servers in the USA. The transfer to the USA is carried out lawfully on the basis of the Swiss-US Data Privacy Framework (if the provider is certified) or otherwise based on Standard Contractual Clauses (SCC) of the EU Commission, which are recognized by the Federal Data Protection and Information Commissioner (FDPIC). This ensures that your data is contractually adequately protected even abroad.

7. Data Security

We take appropriate technical and organizational measures to protect your data from loss, manipulation or unauthorized access.
Please note that no data transmission over the Internet is completely secure.

8. Storage Duration

Personal data is only stored as long as it is necessary for contract fulfillment, legal obligations (e.g. accounting / OR) or legitimate interests.
After that, it will be deleted or anonymized.

9. Rights of Data Subjects

According to Art. 25 ff. DSG, you have the following rights:
• Right of access: You can find out what data we store about you.
• Right to correction or deletion of incorrect or unlawfully processed data.
• Right to restriction or objection to certain processing.

Please direct inquiries in writing to: hello@gripenshot.ch
We respond to all inquiries within 30 days.