Tabascorbo
Privacy
Updated: 2 September 2026
In the village, we write nothing down about you. No advertising, no resale, no trackers, no profiling. But three providers do get to see something: our host, Google (the site's typefaces, and the bot filter on the form) and, when you order, the Post to deliver it. This page says exactly what, why, for how long, and what you can demand from us.
1. Who is responsible
The site tabascorbo.ch is run by Wartek & Co, an artisan producer based in Crans (canton of Vaud, Switzerland). We decide what is collected and why, which makes us the controller under the Swiss Federal Act on Data Protection (FADP, revised).
Contact for any data protection matter: commande@tabascorbo.ch. Full details in the legal notice.
2. What we collect, and why
Nothing is collected behind your back, and nothing is collected "just in case". This is the complete list.
| When | What we receive | What for |
|---|---|---|
| You visit a page | Standard server logs: IP address, date and time, page requested, browser | Running and protecting the site. Purged automatically by the host. |
| Pre-order form | Your name, your e-mail and the content of your message: preferences, quantities, delivery address if you give one | Confirming the pre-order, telling you what is in stock, preparing and shipping your bottles. |
| Submitting the form | The bot filter logs the IP address, a timestamp and the outcome of the check | Blocking automated submissions. See section 3. |
| You place an order | Your name and postal address go to the carrier | To deliver to you. That is all. |
We run no audience analytics, no ad targeting, no profiling: no Google Analytics, no Facebook pixel, no measurement tool of any kind. No data is sold, rented or passed to a third party for commercial or advertising purposes.
One exception deserves to be named: the site's typefaces are loaded from Google Fonts. Your browser therefore fetches them from Google, which receives your IP address in the process — on every page, not only the one carrying the form. No cookie is set for this and we derive nothing from it, but we would rather write it down than let you believe this site talks to nobody.
3. The bot filter (Google reCAPTCHA)
Since 31 August 2026 the pre-order form has been protected by Google reCAPTCHA v2 — the "I'm not a robot" checkbox. We added it because the form was receiving automated spam.
This has to be said plainly: that service does see things. To tell a human from a program, reCAPTCHA analyses, on the form page, your IP address, information about your browser and device, and the way you interact with the page (mouse movement, typing, time spent). It also sets its own cookies. Google processes this, not us: all we get back is the verdict, "human" or "bot".
Since 2 April 2026, Google acts as a processor for reCAPTCHA: it handles this data on our behalf and on our instructions, no longer for its own account. Details on Google's side: privacy policy and terms of service.
A second filter, this one ours. Before reaching our inbox, your message goes through an automatic check that weeds out robot submissions. In particular it rejects any message containing a link, any message written in a non-Latin alphabet, and any form sent back in under three seconds. That check is rarely wrong, but it can be: if your message does not arrive, write to us directly at commande@tabascorbo.ch — a pre-order by e-mail counts exactly the same.
4. What happens to your message
The form sends your message to our address commande@tabascorbo.ch, hosted by Infomaniak in Geneva. A copy is then collected through an external mailbox hosted outside Switzerland — that is the inbox we read day to day. The original stays with Infomaniak.
No online payment is requested through this form: we never see a card number, and there is none to keep.
5. Cookies
No advertising cookies, no analytics cookies. What you may come across:
- depending on your browser, a technical cookie remembering your language or the sound setting on the home page;
- the cookies set by Google reCAPTCHA on the form page (section 3).
We show no consent banner: none of these cookies is used to track you for advertising or statistical purposes. You can block them in your browser — the form will then stop working, the rest of the site will not.
6. Who else sees your data
Nobody beyond the providers strictly needed. Here they are, in full:
| Provider | Role | Where |
|---|---|---|
| Infomaniak Network SA | Hosting of the site and the mail | Geneva, Switzerland |
| Google Ireland Ltd / Google LLC | reCAPTCHA bot filter, and typefaces (Google Fonts) | Ireland, United States |
| Our working mailbox | Reading orders day to day | Outside Switzerland |
| Swiss Post | Shipping, with the address you give us | Switzerland |
Transfers abroad. Google and our working mailbox involve transferring data outside Switzerland, in particular to the United States. Since 15 September 2024 the Swiss Federal Council recognises (Annex 1 to the Data Protection Ordinance) that US companies certified under the Swiss–U.S. Data Privacy Framework provide an adequate level of protection within the meaning of art. 16 FADP. These transfers take place on that basis, failing which on standard contractual clauses.
7. How long we keep what
| Data | Retention |
|---|---|
| Server logs | Per the host's policy, a few weeks |
| Bot filter log | 12 months |
| Pre-orders not taken further | 12 months after the last exchange |
| Delivered orders and invoices | 10 years — statutory retention period (art. 958f CO) |
8. Your rights
Swiss data protection law gives you the right, at any time and free of charge, to:
- know what data we hold about you and obtain a copy (art. 25 FADP);
- have inaccurate data corrected (art. 32 FADP);
- have your data erased, or object to a processing operation — subject to what we are legally required to keep, accounting records in particular;
- receive the data you provided in a common format, or ask us to transfer it to someone else (art. 28 FADP);
- withdraw your consent where a processing operation rests on it.
One address for all of it: commande@tabascorbo.ch. We answer within 30 days. We may ask you to prove your identity — which is precisely there to protect you.
If our answer does not satisfy you, you may turn to the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, edoeb.admin.ch, or to the civil courts.
9. Security
The site is served entirely over HTTPS. Messages go through Infomaniak's encrypted SMTP. Technical files (logs, configuration) are out of reach from the web. No measure is perfect: should an incident affect your data and pose a risk to you, we would contact you and report the case to the FDPIC, as art. 24 FADP requires.
10. Changes
This policy changes as the shop changes. The date at the top gives the last revision. The 2 September 2026 update sets out the bot filter, names Google Fonts, lists the providers and spells out your rights.
11. Contact
A question about this page, or a request to make? commande@tabascorbo.ch