Functioning of the website and creation of log files
When you visit our website, the Internet service provider automatically collects and stores information in “server log files” that your browser transmits to us. These include:
- Browser type and browser version
- Operating system used
- User’s Internet service provider
- Host name of connected device
- Date and time of server access
- User’s IP address
- Referrer URL (the page visited before)
- Time of server access
- Login status
These data cannot be attributed to a particular person and will not be merged with data from other sources. The purpose of storing log files is to guarantee the proper functioning of our website as well as the security of our IT systems. Consequently, such data are processed on the legal basis of the legitimate interests of the party processing the data.
Data are only stored for as long as is necessary to fulfil the purpose of being collected, and are therefore deleted automatically after a period of three months. Storing log files is essential for the operation of the website, and you therefore do not have the option of contesting this.
The cookies are stored on your device. You therefore have full control over the use of the cookies. You can delete them or, alternatively, disable or limit them by changing your Internet browser settings. If you disable cookies for our website, you may not be able to enjoy the website’s full functionality.
How we use Google Analytics
In the case of Google Analytics, Google will use the data on our behalf to evaluate your use of the website, compile reports on website activity and provide us with other services relating to the use of the website and the Internet. We use Google Analytics on the legal basis of our legitimate interest in analysing our website.
You can prevent cookies from being stored by changing the appropriate settings in your browser. However, please note that doing so may mean you will not be able to enjoy the full functionality of this website. You can also opt out of Google Analytics by downloading and installing the browser add-on available at https://tools.google.com/dlpage/gaoptout
Our website uses Google Analytics including the functions of Universal Analytics. This allows us to analyse the activities on our website across devices (e.g. if it is accessed via a laptop and later via a smartphone). This is made possible by assigning a user ID to a user as a pseudonym. This is done, for example, when you register for a customer account or sign in with your customer account. No personal data will be forwarded to Google. The additional functions of Universal Analytics will not result in a limitation of the aforementioned data protection measures that include IP address anonymization and the Google Analytics opt-out.
Use of SAS CI Discover
Our website uses functions of SAS Customer Intelligence Studio 360 which is supplied by SAS Institute Inc., 100 SAS Campus Drive, Cary, NC 27513-2414, USA.
These functions depend on the use of a cookie. They enable us to store your web and app user history (browsing, orders, etc.) and, if you are logged into our website, to collate these data with your previous usage of our website and process them. In this way, we can customize and display adverts and offers that are personalized for you, and based on your interests. On each device from which you log in with your account details, we can display the same personalized advertising and offers.
We use this technology to improve our analysis of user behaviour and to allow us to place our products more effectively. These are our justified interests which serve as the legal basis for processing the data.
You can block the placement of cookies in your browser settings. However, please note that doing so may mean that you will not be able to enjoy the full functionality of this website. The Privacy Shield agreement applies to data transfers to the USA.
How we use Google AdWords conversion tracking
Our website uses Google AdWords conversion tracking which involves a cookie being stored on your device for the purpose of tracking and performance measurement whenever you access our website via a Google advertisement. It does not collect any personally identifiable information about users. Our legitimate interest in measuring website performance serves as the legal basis.
Cookies expire after 30 days and are not used to identify users. If you do not wish to participate in the tracking programme, you can block the relevant cookies by changing your browser settings.
How we use Google Remarketing and other retargeting technologies
Our website uses the features of Google Analytics Remarketing combined with the cross-device capabilities of Google AdWords and Google DoubleClick. To this end we collaborate with Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). This feature makes it possible to link advertising target groups created with Google Analytics Remarketing to the cross-device functions of Google AdWords and Google DoubleClick. This allows personalized advertising tailored to your interests and based on your previous usage and browsing behaviour on one device (e.g. mobile phone) to be displayed on any of your other devices (e.g. a tablet or PC). Your web and app browser history is linked to your Google account for this purpose, provided you have given the relevant consent.
To support this feature, Google Analytics collects Google-authenticated IDs of users that are temporarily linked to our Google Analytics data. This enables us to define and create target groups for cross-device advertising.
Our website uses remarketing technology for marketing purposes. The aggregation of the data collected in your Google account takes place on the legal basis of your consent, which you may give or withdraw from Google. For data collection operations not merged together in your Google account (for example, because you do not have a Google account or have objected to data merging), the collection of data is based on our legitimate interest in analysing usage behaviour and employing user-specific advertising.
For retargeting purposes, we also collaborate with Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA), using cookies to collect and analyse anonymized information about the behaviour of website visitors. This helps to tailor advertising directly to your interests. Our legitimate interest in improving our content serves as the legal basis.
You can prevent cookies being stored by changing the appropriate settings in your browser.
Social media plug-ins
Embedding of YouTube videos
Our website uses plug-ins, in the form of embedded videos, from the website YouTube which is owned by Google. The operating company of YouTube is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages that includes a YouTube plug-in, a connection to YouTube’s servers will be established. Data indicating which of our pages you visited will then be transmitted to YouTube’s servers. If you are logged into your YouTube account, YouTube can associate your browsing behaviour directly with your personal profile. The Privacy Shield agreement applies to data transfers to the USA.
The purpose of using YouTube plug-ins is to make our content visually appealing. Our legitimate interest in positioning our content therefore serves as the legal basis.
We use Facebook social plug-ins on our website. supplied by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). The Facebook social plug-ins are used in the form of a “Share” button or “Like” button. You can recognize them by their blue and white Facebook colours.
When you visit our page, the plug-in establishes a direct connection between your browser and the Facebook server. This notifies Facebook that you have visited our page from your IP address. If you click the Facebook “Share” or “Like” buttons while logged into Facebook, Facebook associates this information with your personal profile. If you wish to prevent Facebook from linking your visit to our website with your Facebook user profile, you can log out of your Facebook user account. For further information about this please refer to Facebook’s data policy (https://www.facebook.com/policy.php
We use Facebook social plug-ins to promote our products to a broader audience. These are our justified interests which serve as the legal basis for processing the data. The Privacy Shield agreement applies to data transfers to the USA.
If you wish to prevent providers from collecting your data via these cookies, you can select “Block cookies from third parties” in your browser settings. Please note, however, that this may limit the performance and functionality of the website.
We use Twitter plug-ins on our website. Twitter is a service supplied by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.
If you use Twitter, and especially, the "Retweet" function, Twitter will associate your Twitter account with the websites you visit. This will be announced to other Twitter users, especially your followers. In this way, data is also transmitted to Twitter.
We have no influence over the content or scope of the data collected by Twitter through the plug-ins. To our knowledge, Twitter collects the URL of the website that is being visited as well as the user's IP address. However, these are not used for any purposes other than to display the Twitter plug-in. Please refer to the Twitter data policy at http://twitter.com/privacy
for further information about this.
We use the Twitter plug-ins to promote our products to a broader audience. These are our justified interests which serve as the legal basis for processing the data. The Privacy Shield agreement applies to data transfers to the USA.
Our website pages include some Instagram functions. These functions are provided by Instagram Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
If you are logged into your Instagram account and click on the Instagram button, the content on our pages may be linked to your Instagram profile. This enables Instagram to associate your visit to our website with your user account. As the website provider, we wish to point out that we have no knowledge of the content of the data transferred and their use by Instagram.
We use the Instagram functions to promote our products to a broader audience. These are our justified interests which serve as the legal basis for processing the data. The Privacy Shield agreement applies to data transfers to the USA.
We use plug-ins from the LinkedIn network on our website. LinkedIn is a service supplied by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you visit a page of our website which contains one of these plug-ins, your browser will download the content of the plug-in from LinkedIn.
This notifies LinkedIn of the specific page on our website you are currently visiting. If you click the LinkedIn “Recommend” button while you are logged into your LinkedIn account, you can link the content of our pages to your LinkedIn profile. This enables LinkedIn to associate your visit to our website with your LinkedIn user account.
We have no influence over the content or scope of the data collected by LinkedIn in this way. For more information on data collection by LinkedIn and on your rights and configuration options please refer to the LinkedIn data policy at http://www.linkedin.com/legal/privacy-policy
We use the LinkedIn plug-ins to promote our products to a broader audience. These are our justified interests which serve as the legal basis for processing the data. The Privacy Shield agreement applies to data transfers to the USA.
We use plug-ins from the XING.com network on our website. These plug-ins are a service provided by XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany.
Each time you visit a page on our website which contains one of these plug-ins, your browser will download the content of the plug-in from XING.
This technical process notifies Xing of the specific page on our website you are visiting. If you are logged into Xing at the same time, this information will be collected by the Xing plug-in and linked to your Xing account. If you press a Xing button that is embedded in our website, for instance the "Share" button, Xing links this information to your personal Xing user account.
You can prevent this information from being associated with your profile by logging out of your Xing account.
We use the Xing plug-ins to promote our products to a broader audience. These are our justified interests which serve as the legal basis for processing the data.
We use the pinterest.com service on our website. Pinterest.com is a service provided by Pinterest, Inc., 808 Brannan St, San Francisco, CA 94103, USA. The “Pin-it” button on our website notifies Pinterest that you have visited the respective page on our website. If you are logged into Pinterest, Pinterest can associate your visit to our page with your Pinterest account and link the data in this way. If you click the "Pin-it" button, the respective data are transmitted to Pinterest and stored there.
For information about the purpose and scope of data collection, the processing and use of these data and your rights and configuration options to protect your privacy, please refer to the Pinterest data policy at http://pinterest.com/about/privacy/
We use Pinterest to make our products known to a broader audience. These are our justified interests which serve as the legal basis for processing the data. The Privacy Shield agreement applies to data transfers to the USA.
To prevent Pinterest from associating your visit to our website with your Pinterest account, you must log out of your Pinterest account before visiting our website.
The information about your use of our website obtained via the cookies is usually transmitted to a ContentSquare server and stored there. The IP address transmitted by your browser in this context is not merged with any other ContentSquare data. ContentSquare guarantees that your IP address will be abbreviated so that all data is collected in anonymized form.
You can prevent cookies from being stored by selecting the appropriate settings in your browser; please note, however, that you may not be able to use the full functionality of our website if you do so.
You can prevent your data from being collected by ContentSquare at http://optout.contentsquare.net/
. This will set an opt-out cookie which will prevent your data from being collected when you visit the website in future. The opt-out cookie applies only in this browser and only to the respective website. It will be stored on your computer. If you delete the cookies in this browser, you will have to set the opt-out cookie again. To prevent ContentSquare from collecting data across multiple devices, you have to opt out on all the systems you use.
In rare instances we make use of the "reCAPTCHA“ service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA on our website in order to establish whether a form provided on the website is completed by a natural person or fraudulently by an automated machine-operated process.
The following data are provided to Google for this purpose:
- Referrer URL (the address of the page from which the user arrived at the site)
- IP address
- Operating system details
- Mouse and keyboard behaviour
- Date and language settings
- Screen resolution
If you wish to prevent data about your behaviour from being sent to Google, you must log out of Google before you visit our website and delete all Google cookies. You can request that Google delete the data on their side by contacting Google Support at https://support.google.com/?hl=en-GB&tid=231560237376.
Google web fonts
We use Web Fonts by Google (Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website to ensure that fonts are displayed in standardized way. When you call up one of our pages, your browser loads the required web fonts into your browser cache so that text and fonts are displayed correctly.
To do this, your browser makes contact with the Google servers. This alerts Google to the fact that your IP address is connected to our website. The use of Google Web Fonts is in the interests of a standardized and attractive display of our online offerings. These are our justified interests which serve as the legal basis for processing the data. The Privacy Shield agreement applies to data transfers to the USA.
If your browser does not support web fonts, a standard font on your computer will be used.
Our website uses the Google Maps service via an API. It is supplied by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Your IP address is stored in order to use the functions of Google Maps and usually sent to a server in the USA. We have no influence on this data transfer.
The use of Google Maps is in the interest of the attractive display of our online offerings and to make any locations we mention on the website easy to find. These are also our justified interests which serve as the legal basis for processing the data. The Privacy Shield agreement applies to data transfers to the USA.
Registering your customer account
When you create a customer account on our website, we collect the necessary data such as your name, address, date of birth, e-mail address, telephone number and password. Your customer account is designed to process orders and ensures that you need not re-enter your data every time you place an order. Your consent serves as the legal basis.
In addition, we may also send specific information about promotions, products and events to the e-mail address you provide. Our legitimate interests in the placement of our products and improving our content serve as the legal basis. You can stop receiving future e-mails at any time by clicking the Unsubscribe link in the footer of an e-mail you have received.
You can link your customer account to your Supercard ID. This will merge the data from the Supercard with the data of your customer account. You will then have a single login for various Coop services. For more information about this, go to: https://www.supercard.ch/de/app-digitale-services/supercard-id.html
How we use customer and order data
When you place an order via our website, we collect the data necessary for processing the order, e.g. name, address, e-mail address, method of payment, contents of shopping basket, date of delivery, type of delivery, browser, and, if applicable, vouchers, mobile phone number, and delivery address. To complete an order, you must have a password-protected user account.
We will treat your data as confidential, only forwarding them to third parties when necessary for the purpose of executing the contract. We must provide the forwarding agent (Swiss Post) with your data for delivery purposes, and the relevant financial services provider with your payment details for payment purposes.
We use Safer Pay and Datatrans as the payment interfaces in our online shop. All the usual payment methods can be processed via the Saferpay e-payment platform interface. Saferpay is supplied by SIX Payment Services which is based in Zurich. Your data are forwarded to SIX Payment Services as part of the payment process. Saferpay meets all the common security standards, in particular the Payment Card Industry Data Security Standard (PCI DSS).
Please note that information about payment experiences – particularly those related to uncontested claims unpaid after the due date – as well as debt collection reports and address data, will be forwarded to Intrum Finance Services AG (Eschenstrasse 12, 8603 Schwerzenbach, Switzerland) and MF Group AG (Am Bohl 6, 9004 St. Gallen, Switzerland) for legitimate purposes. Intrum AG and MF Group AG will use the data to verify your identity and creditworthiness, and provide the data to authorized third parties. Intrum AG and MF Group AG may analyse these payment experiences using mathematical and statistical methods of calculation that facilitate automated decision-making, particularly for assessing a person’s creditworthiness. Our legitimate interests serve as the legal basis.
We also use Arvato profile tracking software that enables us to identify potentially fraudulent orders. Thanks to Arvato, we can check orders deemed to be fraudulent and block the device from which these orders have originated. We forward all data collected during the ordering process to Arvato Financial Solutions (Kaistrasse 7, 40221 Düsseldorf, Germany) once the respective order is completed. Our legitimate interest in the security of our online shop serves as the legal basis.
If you have registered your Coop Supercard with us, we will store your Supercard number on our system as well as the number of points necessary for transaction purposes, your points credit, and your verified address data. Your consent serves as the legal basis. For more information, please refer to the Supercard General Terms and Conditions at https://www.supercard.ch/de/ueber-supercard/agb.html.
The details of your purchases can be evaluated in order to better position our products and for personalized marketing promotions. They are evaluated by an anonymized, automated process. We perform dedicated evaluations to define target audience groups. This allows us to notify customers individually of special offers and other services based on their previous purchases. Our legitimate interest in improving our content serves as the legal basis.
Informative newsletters with the latest news and special offers can be e-mailed several times a year to the e-mail address you provide. These serve to notify you of current promotions. Our legitimate interests serve as the legal basis. You can opt out of future e-mails at any time by clicking the footer in one of these e-mails.
We forward a pseudonymized and encoded hash value of your e-mail address and IP address to Sovendus GmbH (Moltkestr. 11, 76133 Karlsruhe, Germany) for the purpose of offering you vouchers of specific interest to you. The pseudonymized hash value of your e-mail address is used in order to respect any potential objections against advertising by Sovendus. The IP address is used by Sovendus for data security only and will normally be anonymized within seven days. We also forward the pseudonymized order number, order value with currency, session ID, voucher code and time stamp to Sovendus for invoicing purposes. If you are interested in a Sovendus voucher, if there is no objection registered under your e-mail address, and if you click on the voucher banner shown in this particular instance only, then your title, name and e-mail address will be forwarded to Sovendus in encrypted form for the purpose of preparing the voucher.
We pass on your data in order to better place our products and to improve our offering. Our justified interests serve as the legal basis.
In the delicatessen section, you can have cakes printed with a photo. You upload a photo to the website and we print it onto a cake we supply you with. The photo for this is stored on our systems and electronically transferred to the branch that will prepare the cake. The legal basis for data processing is the fulfilment of the contract.
You can sign up to a free newsletter via our website. In this case, the data that you enter in the subscription form are transmitted to us. We store the following information for newsletter dispatch purposes: your gender, first name, last name, e-mail address and preferred language. Your registration for our newsletter is not complete until you confirm your e-mail address via a link provided in an e-mail that is sent to you. This ensures that no one can register using someone else’s e-mail address. The newsletter is dispatched via salesforce.com Sàrl (Route de Longeraie 9, 1110 Morges, Switzerland). We forward your data to salesforce.com Sàrl for this purpose.
We collect your e-mail address for the purpose of dispatching the newsletter. Additional personal data help us to prevent our services and your e-mail address from being misused and to address you with a personal salutation. Your consent serves as the legal basis.
You can cancel the newsletter subscription at any time via a link in the e-mail. You will be taken to a page with an overview of your coop.ch newsletters and can click on the one you want to unsubscribe from.
You can rate our products and make comments on our website. If you make use of this option, we will store your IP address and your customer account number. We do this so that we can, if applicable, identify you at a later stage. If your comment violates the applicable law, we could be sued. We therefore have an interest in storing the data. Our legitimate interests in this regard serve as the legal basis.