Privacy policy
How we collect, use and protect your personal data, in accordance with the Swiss Federal Act on Data Protection (FADP).
1. Introduction
Domaine Porta (“we”) attaches great importance to the protection of your personal data. This policy explains what data we process, why, to whom we disclose it, how long we keep it and what your rights are. It is based on the Federal Act on Data Protection (FADP, SR 235.1) and its ordinance (Data Protection Ordinance, DPO, SR 235.11).
Our shop is aimed at customers in Switzerland. The EU General Data Protection Regulation (GDPR) does not in principle apply to our processing; should it apply in your case, you have the same rights.
2. Controller
Domaine Porta
Owner: Jean-Daniel Porta, winegrower and winemaker
Chemin des Daillettes 11
1091 Aran, Canton of Vaud, Switzerland
Telephone: +41 21 799 23 63
E-mail: info@vins-porta.ch
UID / VAT no.: CHE-111.234.034 VAT
For any question about your data, write to us at the address above.
3. Data processed and purposes
Contact form
Surname and first name, e-mail address, subject and message, to reply to your enquiry. The message is sent to us by e-mail; it is not stored on the website.
Orders
Surname, first name, billing and delivery addresses, e-mail address, telephone number, wines ordered, amount, delivery and payment method, and the date and time at which you confirmed that you are 18 or over. This data is used to process the order, deliver it, contact you about it, comply with our rule of selling alcohol only to adults and keep our accounts.
Customer account (optional)
If you create an account when ordering: your contact details, your password (stored encrypted) and your order history. You can ask us to delete your account at any time; an account inactive for 5 years is deleted automatically.
Payment
Card payments are processed directly by our payment provider, WooPayments (a service of Automattic Inc.), with Stripe; we never see full card numbers. To prevent fraud, this provider automatically analyses certain data about the transaction and the device used (the Stripe Radar and Sift services, and an hCaptcha anti-robot check on the checkout page); a payment may be refused on this basis. You can ask us to have such a decision reviewed by a person (Art. 21 FADP). For a bank transfer, we receive the payment details from our bank.
Newsletter
Only your e-mail address, to send you our news (new vintages, open cellars, events at the estate) a few times a year, and only if you asked for it. It is never passed on to third parties and is hosted in Switzerland by Infomaniak.
Sign-up takes place in two steps (double opt-in): you are only signed up after clicking the link you receive by e-mail. The legal basis is your consent (Art. 31 para. 1 FADP); you can withdraw it at any time using the unsubscribe link in every mailing, or by writing to us.
An anti-robot check (ALTCHA) is carried out by a calculation in your browser, with no cookie and no images to identify. Mailings may measure opens and clicks, solely to improve our communications.
Technical logs and security
Our host records the IP address, browser, pages viewed, and the date and time of each visit, for the security and maintenance of the website. Failed attempts to log in to the website’s administration are recorded with the IP address, to block attacks.
Map (Contact page)
The Google Maps map loads when the Contact page is opened; your IP address is then transmitted to Google, which may set its own cookies.
We use no visitor statistics, advertising or tracking tools.
4. Recipients and transfers outside Switzerland
We neither sell nor rent out your data. We disclose it only to the providers who help us run the website and process your orders, and only to the extent necessary:
| Provider | Role | Place of processing |
|---|---|---|
| Infomaniak Network SA, Geneva | Website hosting, sending e-mails, newsletter, backups | Switzerland |
| Swiss Post Ltd, Bern | Delivery of parcels (name, address and, if necessary, telephone) | Switzerland |
| Automattic Inc. (WooPayments, WooCommerce app) | Online payment; order notifications on our tablet | United States |
| Stripe Payments Europe Ltd and Stripe, Inc. | Processing of card payments, fraud prevention | Ireland, United States |
| Sift Science, Inc. | Payment fraud prevention, on behalf of our payment provider | United States |
| Intuition Machines, Inc. (hCaptcha) | Anti-robot protection of the payment form, loaded by Stripe | United States |
| Google LLC | Map on the Contact page | United States |
Our host is Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Genève, Switzerland; its servers are located in Switzerland.
Ireland offers an adequate level of protection recognised by the Federal Council. For the United States, the Federal Council recognises an adequate level of protection for companies certified under the Swiss-U.S. Data Privacy Framework (Annex 1 DPO, since 15 September 2024); without certification, the transfer relies on the standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (Art. 16 para. 2 FADP).
5. Retention period
- Orders and accounting records: 10 years (Art. 958f CO), then anonymised.
- Customer account: until it is deleted on request, or after 5 years of inactivity.
- Contact form messages: 12 months after the last exchange.
- Newsletter: until you unsubscribe.
- Host’s logs: 30 days, then deleted automatically.
- Backups: 7 days at the host; a monthly archive is kept offline for 3 months.
6. Your rights
You can:
- ask whether we process data about you and obtain a copy (right of access, Art. 25 FADP) — we reply within 30 days;
- receive the data you have provided to us in a common format, or have it transferred to another controller (Art. 28 FADP);
- have inaccurate data corrected, request its deletion or object to processing (Art. 32 FADP), subject to our legal retention obligations;
- withdraw any consent given at any time (for example for the newsletter).
Write to us at info@vins-porta.ch. If you believe that your rights are not being respected, you can contact the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch.
7. Cookies
The website uses only cookies that are necessary for it to work; no statistics or advertising cookies. They are set only when you use the feature that needs them: the basket, your account, payment or the map on the Contact page.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
woocommerce_cart_hash, woocommerce_items_in_cart |
our website | remember the contents of the basket | end of the visit |
wp_woocommerce_session_… |
our website | link your basket to your visit | 2 days |
wordpress_logged_in_…, wordpress_sec_… |
our website | keep you logged in to your customer account | end of the visit, or 14 days with “Remember me” |
__stripe_mid, __stripe_sid |
Stripe, checkout page | payment fraud prevention | 1 year / 30 minutes |
m (m.stripe.com) |
Stripe, checkout page | payment fraud prevention | 13 months |
__ssid |
Sift, checkout page | payment fraud prevention | 13 months |
__cf_bm (hcaptcha.com) |
hCaptcha, checkout page | anti-robot protection of the payment | 30 minutes |
Google cookies |
Google, Contact page | operation of the map | according to Google |
You can refuse or delete cookies in your browser settings (Art. 45c of the Telecommunications Act, TCA); the basket, your account and online payment will then no longer work, but you can still order your wines from us by e-mail or by telephone.
8. Security
The website is served over HTTPS. Access to the administration is protected by a password and a limit on login attempts. Payment data does not pass through our website.
9. Changes
We may adapt this policy; the date of the last update is shown below. In the event of a significant change, we will inform you appropriately.
Last updated: October 2026
This is a translation: the French version prevails.
