Privacy policy

Our mission is to provide the Client with products and services of the highest quality. This implies, on one hand, the constant search for producers and suppliers of excellent products, the availability of reliable, professional and competent partners to meet the highest expectations of our customers. This requires the use of modern communication and data processing technologies, because without them we would not be able to provide the products and services that distinguish us.

Our company has always placed privacy, confidentiality and discretion as elements that distinguish us. For this reason, the management of the personal and sensitive data of our customers is extremely important to us.

ARVI SA offers its products and services in Switzerland and is required to comply with Swiss law, in particular the Federal Act on Data Protection of 25 September 2020 (FADP), in force since 1 September 2023, and the related Data Protection Ordinance (DPO). Although ARVI SA does not address abroad, nor does it offer products or services in the European Union, nor does it actively profile users of the website residing in Europe, in order to ensure transparency and protection for our customers and users of our website, this information has been prepared also taking into account the principles of the General Data Protection Regulation, officially Regulation (EU) No 2016/679 and better known as the GDPR (hereinafter referred to as the “GDPR”).

Your data will then be collected, processed, transmitted and stored in accordance with the applicable regulations.

The purpose of this declaration is to provide you with all information in accordance with the above-mentioned regulations and in particular:

  • A. Who we are
  • B. What data do we collect and why do we do so?
  • C. Consent
  • D. What are your rights
  • E. Security measures (how we protect your data)
  • F. Duration of data retention
  • G. Transmission of your data to third parties
  • H. Transmission of your data abroad
  • I. Cookies, analysis and tracking systems, social media plug-ins and external links
  • L. Relationship with Shopify
  • M. Profiling and automated individual decisions
  • N. Minors
  • O. General provisions
  • P. Amendments to this declaration

In case of discrepancies between the original text and its subsequent translations, only the original Italian version is valid. Version November 2026.

A. Who we are

ARVI SA, a joint-stock company under Swiss Law UID: CHE-110.590.911, with registered office in Via Pedemonte di Sopra 1, Melano (CH-6818), hereinafter referred to as the Company, is responsible, among other things, for the management of the online shop and this website. In this capacity, the Company therefore acts as the owner of the processing of data that, also through this site, are collected. The processing is carried out in compliance with the applicable federal regulations and the principles set out in the GDPR.

For any questions regarding data protection or to exercise your rights, you may contact: ARVI SA, Data Protection, Via Pedemonte di Sopra 1, 6818 Melano, Switzerland, email info@arvi.ch, telephone +41 91 649 68 88.

B. What data do we collect and why do we do so?

1. When you visit our website, the servers of the platform that hosts our online shop (Shopify, see point L) record temporary files. The following technical data is saved automatically with almost every connection to a web server, without any action being required on the part of the visitor. This applies in particular to the following data:

  • Transmission protocol (ie. http);
  • IP address of the device accessing our server;
  • Name of the owner of the IP addresses of which your device is part (usually your internet access provider);
  • Time and date of access;
  • If applicable, the page from which the access was made, or the keyword search;
  • The name and URL address of the data transmitted;
  • Search words on the website;
  • The status code;
  • The operating system of your device;
  • Information about your browser (type, language in use and version).

The data described above are necessary in order to establish a connection with our servers and for statistical purposes. This allows us to optimize our online services. In this sense, the company has a legitimate interest in processing this data.

2. If you decide to open a customer account, we need the following data:

  • First and last name;
  • Postal address;
  • Email address (the account is accessed by means of a one-time code sent to this address);
  • Cell phone number and/or landline number, if applicable.

The abovementioned data are indispensable to allow the opening of an adequately protected customer account, which allows the Client to monitor his orders, requests, etc. The legal basis for processing is your consent.

3. If you intend to purchase through our online shop, we need the following data in order to finalize the purchasing agreement:

  • First and last name;
  • Email address and telephone number;
  • Billing address;
  • Delivery address, if different from billing address;
  • Contact person, if any, at the delivery address;
  • Payment data: credit card details are processed directly by the payment service provider and are not stored by the Company;
  • Confirmation of legal age, which is necessary to purchase alcoholic beverages.

The date of birth is not collected in the online shop. If the Client provides it to us voluntarily, it is recorded only in our internal management system and used to send gifts at Christmas time; the Client may request its deletion at any time.

The above information is collected exclusively for the purpose of concluding the contract and therefore allowing us to sell and deliver the chosen products. The legal basis for processing this data is therefore, the fulfillment of a contract.

4. If you subscribe to our newsletter, we process your email address, your preferred language and, if provided by you, your first and last name, as well as statistical data on email opens and clicks, in order to inform you about the availability of new products or special products and about wine related events. We use Mailchimp and an internal system to send it. The legal basis is your consent, which you may revoke at any time via the link contained in every email.

5. When you contact us (email, telephone, contact form), we process the data you provide in order to respond to your request.

In order to be able to provide our services, we need some personal data from our clients and website users. Some of this data is automatically transmitted by the device with which you visit our website. If you wish to prevent this automatic transmission, you must access the settings of your browser or device and deactivate the transmission of personal data.

C. Consent

1. The previous point indicates the type of data collected and the legal basis necessary for their lawful use. The consent is to be understood as an expression of free will, specified and aware. It may be given by means of a statement or by an unequivocal affirmative action. If the processing concerns data worthy of special protection, consent must be given explicitly. In the unlikely event that the Company should collect particularly sensitive personal data, your explicit consent will be required. Regarding the rest, the request for a service or product implies that the Client agrees to provide the Company with the data necessary for the execution of the order. Other data are instead intended for our marketing and communication activities, explicitly collected for this purpose. Of course, you may not give your consent for the processing of your data for this purpose and you may always revoke it if you have already given it. In this regard, we note that the Company's policy is to guarantee that adequate information is provided to our clients regarding the availability of new products or special products, respectively information about wine related events and subjects. Should you have any doubts or questions in regards to this, please contact us at: info@arvi.ch. For any further requests, please refer to point D below.

D. What are your rights

ARVI SA, in accordance with the FADP and regardless of whether or not the GDPR is applicable, guarantees its customers the right to:

  • obtain information about the personal data concerning you that is processed by the Company (right of access, Art. 25 FADP);
  • request that personal data be updated, rectified or (if the data is incomplete) completed;
  • request that personal data be deleted, if: your data is no longer necessary for the purposes for which they were collected or processed; you have revoked your consent or you object to processing; your data is processed unlawfully or must be deleted in order to comply with a legal obligation;
  • request that processing be restricted, if: your data is not accurate or is processed unlawfully or you have objected to processing; although the Company no longer needs the data for processing purposes, it is necessary to enforce your rights legally;
  • object to processing and revoke the consent given at any time, with effect for the future;
  • receive the personal data you have provided to us in a commonly used electronic format or request its transfer to another controller (right to data portability, Art. 28 FADP), if the processing is based on consent or on a contract and is carried out by automated means.

Requests may be submitted in writing or by email to info@arvi.ch; in order to protect your data, we may ask you to prove your identity. As a rule, we reply within 30 days.

We would like to inform you that, in compliance with fiscal, administrative and customs obligations, the Company is required to retain a part of your personal data; see also the chapter "Duration of data retention", below. Provided you believe, that despite your requests to ARVI and their responses, there has been a violation of your rights, please contact the Federal Data Protection and Information Commissioner (FDPIC), who can be reached at the following address: https://www.edoeb.admin.ch.

E. Security measures (how we protect your data)

1. The Company implements, through appropriate technical and organizational measures, the protection of your personal data against unauthorized processing and / or loss of the same. The technical systems are maintained, taking into account - appropriately - constant technological development. The Company, in order to guarantee, not only the absolute discretion of services offered to its customers, but also a confidential management of personal data; the Company has further strengthened their policies used to process your personal data. Your personal data is only accessible to the staff that need it to offer services and products requested by you. In addition, our employees, as well as the service providers, are required to observe and ensure compliance with applicable data protection regulations.

2. In the event of a data security breach that is likely to result in a high risk to your personality or fundamental rights, the Company shall inform the FDPIC and, where necessary, the data subjects, in accordance with Art. 24 FADP.

F. Duration of data retention

1. The Client’s personal data is processed and stored in principle, for as long as it is necessary for the provision of the services requested by the Client (contractual basis) or in compliance with legal obligations (legal basis). In particular, the data is stored for the entire duration of the contractual relationship between the Company and the Client, for accounting and legal purposes (e.g. the obligation to store data for accounting purposes is 10 years). In any case, to the extent that the Company's legitimate interest in data retention lapses, the data shall be rendered anonymous or deleted.

G. Transmission of your data to third parties

1. The Company, in order to provide its services, in some cases, it must provide third parties (outsourcing) access to your data. Particularly, in the context of managing the website, sending newsletters, profiling, marketing purposes and above all, to enable payment for the goods or services ordered and delivery of the goods to the address indicated by the Client. In any case, any transmissions shall only take place to the extent that your consent is given (see point C above) and/or to the extent that this is provided for and/or in accordance with applicable law. In any case, the Company's Partners contractually commit to ensure compliance with the applicable regulations.

2. In particular, in order to be able to provide our services, we use the following providers:

  • Shopify, the platform that hosts our online shop and manages orders, customer accounts and checkout (see point L);
  • the data center moresi.com, based in Switzerland and with servers located in Switzerland, responsible for the IT infrastructure (servers and network) of our management systems, with no access to the data they contain;
  • Worldline, for payment processing;
  • Vinolog, Galliker and Planzer, for the transport and delivery of the goods;
  • Google (Google Analytics, Google Ads, Google Merchant Center), Meta (Facebook, Instagram) and LinkedIn for statistics and advertising, only with your consent (see point I);
  • Mailchimp (Intuit Inc.) and an internal system for sending the newsletter, only with your consent.

In addition, ARVI may refer to other companies in the management of IT and other related services.

3. Your data is also transmitted to the transport companies, as this is necessary to fulfill an order; the companies in charge of the transport and all the necessary administrative procedures (import/export, customs clearance, insurance, etc.). See also in this respect the following paragraph (H).

H. Transmission of your data abroad

1. Some of the providers listed in point G also process personal data outside Switzerland, in particular: Shopify in Canada, in Ireland (EU) and in the United States; Google, Meta, LinkedIn and Mailchimp in the United States and in the other countries in which these companies or their sub-processors operate.

2. Canada and the member states of the European Union and of the European Economic Area guarantee, according to the Federal Council, an adequate level of data protection (Annex 1 DPO). For transfers to the United States, we rely on the Swiss-U.S. Data Privacy Framework, if the recipient is certified under it, or on standard contractual clauses recognized by the FDPIC (Art. 16 para. 2 FADP). For other countries that do not guarantee adequate protection, we use the same safeguards or, in the cases provided for by law, the exceptions of Art. 17 FADP, for example when the transfer is necessary for the performance of a contract with you. On request, we will provide you with further information on the safeguards adopted.

3. In order to deliver the goods to places outside Switzerland (on request, through the advisor in charge), the Company must therefore provide part of the data received from the customer to third parties, in the recipient and/or transit countries (as the case may be). Usually, this is done through the carrier designated by the Company, which will therefore need all the necessary data to be able to carry out customs operations, import and export operations and other formalities required by the applicable legislation. The Company cooperates with international transport companies that meet the required data protection standards. If the transport companies in charge cannot guarantee adequate protection, ARVI reserves the right to suspend the shipment of the goods, or to request the customer's explicit written authorization, with the assumption of responsibility, for any shipment. ARVI encourages the Client in such a case to consult a trusted lawyer before authorizing the transmission of data in such circumstances. The data transmitted abroad, as part of the shipment are:

  • first and last name of the recipient;
  • destination address;
  • contact person, telephone number or e-mail address, respectively;
  • company name and, if applicable, import license;
  • the contents of the consignment (accompanied by the documents required for customs and import-export formalities);
  • value of the goods (necessary for customs formalities).

I. Cookies, analysis and tracking systems, social media plug-ins and external links

1. Cookies are small packets of data, a sort of identification card, which your device exchanges with our server while browsing our site. The information collected in this way allows in particular, to make navigation more pleasant and effective. Cookies are automatically saved on your device via the browser that you use to surf the net and allow, among other things, to keep track of your choices and settings, so that each access will be made more effective. Each browser allows you to set the management of cookies, and even prevent their transmission. You may, among other things, delete cookies in part or in full, be notified whenever a system asks for the exchange of cookies, etc. Please be aware that without the use of cookies your browsing experience may be partially impaired and some services may not work partially or totally.

Our online shop uses the cookies of the Shopify platform that are necessary for its operation (for example cart, session, checkout, language and currency, security) and, only with your express consent given via the cookie banner, statistics and marketing cookies. Your choices may be changed at any time via Shopify's cookie preferences. The list of cookies used by the platform is available at https://www.shopify.com/legal/cookies.

You can find instructions on how to manage cookies for the major browsers below:

  • Google Chrome: https://support.google.com/chrome/answer/95647?hl=en
  • Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
  • Safari: https://support.apple.com/en-us/guide/safari/sfri11471/mac
  • Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge

2. Our website is equipped with tracking systems that allow us to collect the necessary information for management and implementation. Cookies are used here, as well as throughout tracking systems offered by third parties, in particular Google Analytics, Google Ads (conversion measurement and remarketing), Google Merchant Center, the Meta pixel (Facebook, Instagram) and the LinkedIn Insight Tag. These systems are activated only if you consent via the cookie banner; the data may be transmitted abroad (see point H). If you have consented to marketing cookies, at the time of purchase we also transmit certain order data to Google in pseudonymised (hashed) form – e-mail address, telephone number, name, address and order number – in order to measure the effectiveness of our advertising campaigns more accurately (Google Ads “enhanced conversions”).

3. In order to allow our customers to choose whether and how to stay in contact with our company, communication is available also via the most popular social media applications. In this regard, our site is equipped with systems (called "plug-ins") that allow the user to activate a connection with the selected social media. Only at that moment, and therefore at the explicit request of the customer, the exchange of data necessary for the use of the social media in question takes place.

4. Our website offers links to useful external sites of interest for the provision of our services. The Company does not constantly monitor such sites and therefore you are invited to consult the relevant data protection declarations before you start browsing. Any responsibility for the content or implementation of the Company's data protection regulations is excluded. In any case, unless expressly stated otherwise, the Company does not provide the operators of such sites with any personal data of the Client.

L. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information here Shopify Privacy Portal Link.

M. Profiling and automated individual decisions

The Company does not make automated individual decisions within the meaning of Art. 21 FADP. With your consent, the data collected via marketing cookies and the newsletter may be used to offer you information and offers suited to your interests (profiling); no high-risk profiling is carried out.

N. Minors

1. The Company provides services and products exclusively to customers of legal age. If the customer is residing outside of Switzerland, the Company reserves the right not to process an order, provided the customer is not of legal age in the country where the goods are to be shipped, in accordance with the relevant national legislation.

2. In the unlikely event that a user of legal age should believe that a minor in his custody has provided us with personal data, please inform us immediately. Our staff will take the appropriate action.

3. The Company is constantly committed to protecting children and minors and therefore encourages the parental authority holders to be constantly vigilant that minors cannot access confidential documents and/or information, which could allow them to circumvent measures to determine the age of majority.

O. General provisions

1. We invite the Client to keep their computer system up to date at all times, especially taking care of antivirus systems, in order to prevent data theft and potentially harmful activities. If there are any doubts or questions regarding this information, we invite our Clients to contact us at info@arvi.ch.

P. Amendments to this declaration

1. The Company reserves the right to update this statement to ensure adequate protection in accordance with applicable law. For this reason, in particular if there are significant legislative or jurisprudential changes, or changes to the services and providers used, this declaration may be updated and/or amended. The version in force is always published on this page.