Data protection

1. Data controller

The controller is Fermentierra Laurent Cornu, a sole proprietorship at Rue du Village 15, 1424 Champagne (VD). Contact: info@fermentierra.com.

This notice applies to fermentierra.com, its shop, customer accounts, subscriptions, workshops, direct sales, newsletter and embedded external content. It is governed by the Swiss Federal Act on Data Protection (FADP).

2. Data processed and purposes

Fermentierra processes the data required for the following purposes:

• Browsing and security: IP address, date and time, pages viewed, browser, device, referrer and technical logs to display, secure and diagnose the site.
• Accounts, orders and subscriptions: name, contact details, billing and delivery addresses, company information, order history, subscription preferences and customer-service correspondence to manage accounts, sales, payments, deliveries, subscriptions, claims and accounting duties.
• Payments: amount, currency, payment method, status and transaction reference and, for transfers, bank information. Full card details are processed by Stripe or PayPal and are neither received nor stored by Fermentierra.
• Professional customers and stockists: business contact details and public establishment information to manage the commercial relationship and display active stockists on the public map.
• Workshops: name, contact details, registration, payment and any voluntarily disclosed allergies or dietary restrictions to organise the workshop and protect participants.
• Photographs and videos: images from workshops or events only after informing and obtaining consent from identifiable people, to present Fermentierra's activities.
• Contact and newsletter: identity, email address, message content, proof of subscription and campaign interactions to answer enquiries and send the requested newsletter.
• Analytics and advertising: after consent to analytics, Google Analytics receives pages viewed, measurement identifiers, products, order ID, currency and amounts for orders placed. These analytics events contain no names or email addresses. After separate consent to advertising measurement, a SHA-256 hash of the order email address may be sent for conversion matching. The Analytics property is linked to Google Ads for conversion measurement. No Meta pixel is loaded.

Data comes directly from the individuals concerned, their use of the site and, for stockists, the commercial relationship or public professional sources used to verify displayed information.

3. Cookies and integrated services

Cookies required for the basket, customer account, security and operation are used without prior consent. The consent manager lets you allow or reject Google Analytics, Google Ads advertising measurement, Google Maps, Microsoft Clarity, Infomaniak ticket booking and browser error diagnostics separately. You can change or withdraw each choice at any time.

After consent to error diagnostics, Sentry receives a sample of technical browser errors to help fix website problems. Server errors may also be reported. Reports are configured without cookies, HTTP headers, request bodies, URL parameters, customer identity, session recordings or visit tracking. Sentry may process the IP address to receive a report and infer an approximate country. Error messages may still contain information entered on the site. Sentry processes reports under its data processing terms.

Google Analytics loads only after consent to analytics. It may set cookies to recognise visits and count orders placed, including those paid later by bank transfer. The order value excluding tax and shipping, tax and shipping are sent separately. Private order URL parameters are not sent. The Analytics property is linked to Google Ads for conversion measurement; remarketing is not enabled on this website. Only when both analytics and advertising measurement are allowed may Google use advertising cookies and receive a SHA-256 hash of the order email address with the purchase to match conversions to ad interactions. The email address is normalised and hashed on the server and is not sent in plain text. This consent is optional and withdrawing it stops new transmissions of matching data. Personalised ads remain disabled.

After separate consent to browsing analysis, Microsoft Clarity receives technical information, measurement identifiers, public page visits, clicks and scrolling to produce heatmaps and session replays. Input fields and the cart drawer are masked. Account, cart, checkout and booking pages and private areas are excluded. Clarity does not load before this consent and stops after withdrawal. Sharing with Microsoft Ads is disabled. Ordinary recordings are retained for 30 days; heatmaps and marked recordings may be retained for nine months. Microsoft processes data under its processing terms and privacy statement.

The Meta pixel is not currently integrated into the website. This notice and the consent manager will be updated before any activation.

Links to Fermentierra's Facebook, Instagram and YouTube pages lead to Meta and Google services, which then process data under their own terms.

Loading Google Maps allows Google to receive the IP address, device information and map request. The map loads only after consent.

RTS content opens on rts.ch only when you follow a link. No RTS player loads on this website; RTS then applies its own privacy and cookie policies. The embedded workshop booking service is provided by Infomaniak and loads only after consent to ticket booking. Infomaniak may then receive the IP address and technical information. Booking details are processed to arrange the reservation.

Lexend is hosted directly on this website. Loading it does not contact Google Fonts.

Brevo SAS processes the email address, optional profile information, proof of subscription and delivery, opening and click information needed to send and measure the newsletter. Subscription is voluntary and every message contains an unsubscribe link.

4. Recipients

Data is accessible only where necessary:

• to Infomaniak for hosting, technical services and workshop ticketing;
• to Planzer for deliveries;
• to Stripe and PayPal for online and card payments;
• to TWINT, participating financial institutions and relevant Swiss banks for payments;
• to Brevo for the newsletter;
• to Sentry for technical error diagnostics;
• to Microsoft for Clarity after separate consent within the limits described above;
• to Google for Analytics and Maps after consent and advertising measurement after separate consent and for YouTube when you follow a link; to Meta when you follow links to Facebook and Instagram;
• to accounting, technical or legal providers bound by confidentiality and to authorities where required by law.

Each recipient receives only the data needed for its task.

5. Processing abroad

Infomaniak, Planzer, TWINT and Swiss banks process data mainly in Switzerland. Brevo stores data in the EU, including France, Germany and Belgium. Stripe may process data in Ireland and the United States; PayPal in Singapore, the United States and other countries listed in its notice; Microsoft, Google, Meta and Sentry in Ireland, the United States and countries listed in their current terms.

Where data is sent to a country without a level of protection recognised as adequate by Switzerland, the transfer relies on suitable safeguards, including standard contractual clauses, or another basis permitted by the FADP.

6. Retention

• Order, payment and accounting records are kept for ten years where required by law.
• The customer account is kept during the commercial relationship, then deleted on request or after three years without activity, subject to data that must remain archived.
• Contact enquiries are kept for no more than two years after the last exchange.
• Workshop organisation data is kept for no more than twelve months after the event; allergy or dietary information is deleted after the workshop. Accounting documents remain subject to the statutory period.
• Photos and videos are kept for the period stated when consent is given or until it is withdrawn. Withdrawal ends new uses and leads, where reasonably possible, to removal from publications controlled by Fermentierra.
• Newsletter data is kept until unsubscribing. Proof of consent and the objection to further messages may be kept for three additional years.
• Technical logs are kept for no more than twelve months. Choices about optional services are stored for 182 days unless changed or withdrawn sooner.

7. Rights of individuals

Anyone may ask whether Fermentierra processes their data and, within the limits of the law, request access, correction, deletion, provision or transfer. Consent may be withdrawn and processing based on it objected to at any time.

Requests should be sent to info@fermentierra.com. Fermentierra may request information needed to verify identity. Individuals may also contact the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch/.

8. Changes

This notice is updated when processing activities or providers change. The version published on the site is the version in force. Last updated: 22 October 2026.