L’Épicier du Lac
Version 2026-10-02-v4-zavu
FR Brothers SàrlChamp de la Croix 36, 1784 Courtepin, Suisse
info@brasserie-esta.com
Terms of use and access
1. Scope and operator
These terms govern account creation and use, access to L’Épicier du Lac stores, use of the application and purchases. The contracting party and operator is the entity identified above. By creating an account, the user accepts the version displayed at registration; technical evidence of acceptance may be retained. Features marked as test, demo or inactive do not constitute a promise of availability.
2. Personal account, accuracy and security
The account is strictly personal. The user provides accurate, current and non-misleading information, protects the phone, codes and session, and does not allow a third party to use the account or access. Loss, compromise or suspicious use must be reported promptly. Operations following valid authentication may be attributed to the relevant account, subject to substantiated challenge and mandatory law. Phone verification confirms control of the number, not civil identity or age.
3. Store access and conduct
Access may be restricted to active accounts and applicable opening or technical conditions. Facilitating unauthorised entry, bypassing or tampering with doors, cameras, sensors, payment or security systems, damaging premises or disrupting the service is prohibited. Reasonable in-store instructions relating to safety or operations must be followed.
4. Purchases, scanning, prices and payment
The user must scan every item taken, select the correct quantity and verify the basket before confirmation. No goods may leave without confirmed payment unless an expressly authorised procedure applies. Legally applicable displayed prices and mandatory information remain reserved. An obviously recognisable technical or display error may be corrected before performance to the extent permitted by law. If payment status is uncertain, it must be checked or the operator contacted before leaving with the goods.
5. Regulated products and checks
Creating an account gives no entitlement to buy age-restricted, legally restricted or controlled products. The operator may require lawful or necessary checks and refuse a sale when legal or safety requirements are not met. Any future identity verification will be separately disclosed before activation and limited to what is necessary.
6. Fraud, abuse, damage and evidence
Where there are reasonable indications of theft, fraud, non-payment, account sharing, unauthorised access, technical tampering, threats, damage or other abuse, the operator may secure the service, preserve relevant evidence, review transactions and request information needed to examine the matter. The user is liable for damage caused through fault and amounts legally due. Actual loss, unpaid claims and legally recoverable reasonable costs may be pursued; these terms create no unsupported private penalty.
7. Suspension, refusal of access and termination
The operator may immediately suspend or restrict an account or access when reasonably necessary for safety, abuse prevention, non-payment, breach of these terms, legal obligations or protection of the store, customers or staff. No advance notice is required in urgent situations. Where appropriate, review may be requested. The service or an account may be terminated for the future subject to accrued obligations and mandatory law.
8. Technical availability
The app, network, access control, payment methods and third-party services may be interrupted for maintenance or failures. To the extent permitted by law, continuous availability and complete error-free operation are not guaranteed. Functions may be temporarily stopped for security, maintenance, updates, incidents or legal obligations.
9. Liability
The operator’s liability is governed by Swiss law. To the extent permitted by law, the operator is not liable for indirect or consequential losses, losses arising from a compromised user device, misuse of the service, or third-party outages outside reasonable control. Liability that cannot lawfully be excluded or limited remains fully reserved, including intent or gross negligence and mandatory rights concerning personal injury, product safety and data protection.
10. Product information and customer responsibility
Legally required information on product packaging or labels prevails over abbreviated app displays. Customers must check allergens, ingredients, storage conditions and warnings relevant to them. This does not remove any mandatory safety or information duty of the operator.
11. Intellectual property and prohibited uses
The app, design, text, marks, databases and technical elements are protected to the extent provided by law. Without express permission, users may not bypass access controls, scrape data at scale, disrupt the service, exploit vulnerabilities for fraudulent purposes or access unauthorised areas. Good-faith security findings should be reported through the operator’s designated channel.
12. Changes, governing law and disputes
The operator may amend these terms for the future when the service, law, security or operating model changes. Material changes are notified and renewed acceptance is obtained where required. Existing rights and obligations remain reserved. Swiss law applies. Mandatory places of jurisdiction, including consumer protections where applicable, remain reserved.
Privacy notice
1. Controller
The controller is the operator identified above. Privacy requests must be sent to the stated contact. This notice describes processing in the current version and is not a blanket authorisation for unrelated purposes.
2. Data collected and minimisation
Account creation requires first name, last name and a verified telephone number. Email and billing address are optional unless needed for a requested function. This version requests no photo, identity-card copy or identity-card number and performs no facial recognition. Legacy technical identity fields are no longer populated and any historic values must be reviewed and deleted when no obligation or justification requires retention.
3. Purposes
Data is processed to create and administer accounts, authenticate users, manage store access, record purchases and receipts, provide support, prevent and investigate abuse and incidents, secure systems, comply with legal duties, keep accounts and establish, exercise or defend rights in a specific dispute. Data is not sold for advertising. Optional marketing will use a separate mechanism where consent is required.
4. Logs, contractual evidence and security
The system may log sessions, login attempts, security events, access events, transactions, receipts, timestamps, technical identifiers and IP addresses necessary for operation and security. To prove which terms applied, the language, version, cryptographic fingerprint and a copy of the accepted or acknowledged text are retained.
5. Location
Nearest-store search uses location only after browser permission; manual selection remains available. If location is expressly permitted for an access event, necessary coordinates may be linked to that event. No continuous background tracking is planned in this version.
6. Recipients and disclosure
Access is limited to authorised operator personnel and necessary providers for hosting, security, communications, payments or support when activated. Information may be disclosed to authorities, courts, insurers, advisers or other recipients where required or permitted by law or necessary to establish, exercise or defend legal rights, limited to relevant data.
7. Retention and deletion
Data is kept only as long as required by its purpose, a legal duty or a justified evidentiary need. Unneeded account data is deleted or anonymised. Accounting records follow statutory retention periods without requiring the whole customer profile to be retained for the same period. Security and access logs have limited retention, with longer retention where a specific incident justifies it.
8. Security measures
The operator uses risk-appropriate technical and organisational measures including access controls, authentication, role separation, logging, attempt limits, transport encryption where available, backups, updates and data minimisation. No information system can guarantee zero risk.
9. Security incidents
Incidents affecting confidentiality, integrity or availability are assessed and documented. Where a data-security breach is likely to result in a high risk to personality or fundamental rights, the operator applies the notification duties under the Swiss FADP and takes measures to limit consequences.
10. Data-subject rights
Subject to the Swiss FADP, individuals may request information about their data, rectification or deletion and exercise other applicable rights. Proportionate identity verification may be required. Requests may be refused, restricted or deferred where permitted by law, including to protect third-party rights, preserve necessary evidence, comply with legal duties or defend claims.
11. Optional choices and withdrawal
Where processing relies on optional consent, consent may be withdrawn for the future. Withdrawal does not undo processing already carried out lawfully and does not prevent processing still necessary for the contract, security, accounting, legal duties or defence of rights.
12. Hosting, processors and transfers
The application and database are hosted with Hostinger. Depending on the service and configuration, Hostinger and its subprocessors may process data in different countries. The operator limits access, selects an appropriate available hosting location and governs international transfers under applicable Swiss law. Any SMS, payment or email provider actually activated will be added to this notice before production use.
13. Video surveillance and premises security
Stores may use video surveillance to protect people, prevent theft, secure premises and establish facts after an incident. The monitored area must be signposted before entry, camera coverage limited to what is necessary, and image access restricted to authorised persons. Ordinary recordings are deleted after a short period defined by the operator; a relevant extract may be isolated for longer where a specific incident, claim or authority request justifies it. No facial recognition is planned in this version.
14. Phone verification by WhatsApp or SMS
When you request a code, your phone number, message language, OTP message content and delivery metadata are sent to Zavu Labs Inc., our messaging provider. If WhatsApp is used, Meta/WhatsApp also processes the message under its own terms. The code you enter is then checked on our server and is not sent back to Zavu for validation. This integration sends no card numbers, identity documents or purchase history. Provider notices: https://www.zavu.dev/en/privacy and https://www.whatsapp.com/legal/privacy-policy-eea.